Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa
File: 309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa (raw, json)
Hash identifier: RKu+pibepsIXdRVReoXh4X2hx+UCQtj53R/eHoDKDCY=
Subject key identifier: 21:40:83:31:A1:72:45:56:6A:93:ED:3A:C7:64:C2:8A:B5:D1:53:BF
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285848F4F6A1C911932F41CECD4580
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 16509
IP address blocks: 198.44.180.0/24 maxlen: 24
198.44.181.0/24 maxlen: 24
198.44.182.0/24 maxlen: 24
198.44.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:a1:c9:11:93:2f:41:ce:cd:45:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=ea7f8ca2-b38d-4046-ae3f-ae368bb6af7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:57:80:87:8f:cc:32:c7:50:ae:22:55:e2:
89:73:56:2d:22:0b:12:d1:1d:75:11:64:4e:3c:53:
df:d9:30:51:ed:0e:91:ea:cf:6a:03:bc:44:3c:b7:
bc:3f:42:0b:72:68:86:5c:e4:df:c6:e0:ee:f7:04:
31:d8:89:4f:91:71:ff:4c:30:38:0a:a7:31:f0:b2:
54:ee:2e:3e:ee:95:dc:e2:df:2d:4c:33:8d:e3:61:
67:9e:a8:74:3b:00:d7:4e:ae:16:36:a6:0e:85:06:
bc:91:27:1e:0c:22:bd:37:8b:99:dc:f2:5a:a2:f3:
5b:3e:36:2f:7f:ed:b0:79:b5:a9:fb:0a:88:b9:1f:
9b:25:59:ba:36:2c:4e:bf:81:ff:24:10:c4:a9:84:
e2:15:03:36:62:d5:24:4b:d2:b9:59:a4:ba:74:3c:
fe:1d:3a:78:23:90:4d:96:f8:f7:8e:e6:fc:9f:cc:
18:b9:e5:68:29:6d:e4:ff:0f:03:3b:c4:7a:8e:3b:
54:07:e1:86:a1:ff:72:f3:ed:26:73:16:df:fe:49:
8d:d0:4c:b6:3e:2f:9d:75:2c:60:8a:16:d0:01:c4:
1d:ef:fe:1a:a8:8b:16:60:b1:2d:d0:83:ce:2a:fe:
06:f4:c2:a4:3c:c9:7b:8f:cf:c7:9b:c6:93:da:6b:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:40:83:31:A1:72:45:56:6A:93:ED:3A:C7:64:C2:8A:B5:D1:53:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/309c4cee-5197-3a6f-a6e7-24504b0a5b97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
198.44.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:27:73:c2:28:29:57:65:ec:00:50:9b:eb:1a:e7:d8:b4:3d:
24:f0:dc:f9:9c:20:1a:5f:22:5a:6a:80:ff:a3:c2:94:68:e9:
ff:ba:b7:67:d0:19:05:8a:15:a6:db:e1:c8:71:26:ce:46:9d:
48:3e:7e:59:94:8a:63:3f:d0:7f:a1:40:e3:0b:ab:f8:74:46:
dc:5a:02:65:dd:a5:9e:01:9a:ed:29:61:d0:f6:5e:6b:6d:45:
44:75:7e:16:43:1b:2c:f1:8b:9e:08:cc:1d:d5:2b:09:10:35:
70:ae:c4:06:5f:41:0f:f5:c8:ac:0d:35:81:ff:d4:c5:44:72:
21:87:2b:ab:cb:0e:a9:e5:23:25:6f:7a:c6:65:6e:57:68:6e:
c0:a7:ba:01:ce:fb:51:20:53:57:f6:72:57:48:52:17:93:00:
8c:01:e2:47:19:08:1e:c1:ee:a4:8e:58:e8:0b:c4:84:6e:56:
45:ea:bf:b8:8c:71:fb:cd:74:21:df:21:f4:b4:df:fe:66:19:
1f:d1:24:16:6f:15:ee:d8:17:32:cc:66:f5:ca:29:87:9a:c9:
1c:cb:bc:ec:8c:9e:54:10:d2:52:89:23:e7:60:fc:9f:46:e6:
55:f5:e8:9e:db:a9:ce:9e:71:0a:e0:8a:2a:ca:a9:6f:df:21:
5b:ea:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:42 2025 by rpki-client