Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa
File: 298e19e8-b0ac-38aa-82ff-af63bd135582.roa (raw, json)
Hash identifier: JvvsnYcr32/ogi3J+8i1hbsXFqT832OCrz0dWicids4=
Subject key identifier: 78:2F:6E:23:63:F8:60:29:F4:FE:35:C4:65:65:99:BF:FA:E4:29:F0
Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de
Certificate serial: 010D0C9F43285849095EFE4BBC7FDFC24D234100
Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa
Signing time: Fri 28 Feb 2025 21:27:30 +0000
ROA not before: Fri 28 Feb 2025 21:27:30 +0000
ROA not after: Thu 29 May 2025 20:27:30 +0000
asID: 16509
IP address blocks: 198.207.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:5e:fe:4b:bc:7f:df:c2:4d:23:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de
Validity
Not Before: Feb 28 21:27:30 2025 GMT
Not After : May 29 20:27:30 2025 GMT
Subject: CN=76c0ab67-eccb-4a5f-a08f-34d505f55fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1f:08:56:9b:26:d9:7b:9f:32:14:07:b5:3e:
22:c2:83:d6:0c:6c:60:c0:62:51:a9:06:d4:99:32:
54:d2:5a:8c:c9:b0:79:f0:3b:4f:a6:85:0c:32:fa:
e4:ee:18:da:01:44:7c:50:ab:fc:9e:c0:d9:19:2e:
49:6a:0e:7c:8a:24:b9:c8:80:22:98:d4:da:fe:68:
fc:01:ce:31:aa:cf:df:8a:05:df:d9:11:dc:61:f6:
8a:32:a9:41:64:cd:78:94:7e:b3:b5:cd:87:4b:a7:
8e:46:e5:e4:98:3d:7c:a9:d4:f0:55:98:55:b2:38:
ee:25:06:46:80:ad:fd:2b:12:23:19:80:8f:79:a1:
27:c0:ba:94:15:6e:5a:5e:4d:cc:74:04:22:4c:0e:
a6:08:28:32:77:1c:45:32:0f:85:20:96:e7:67:19:
80:f9:00:18:bc:55:aa:7c:f4:c3:57:0c:7b:e8:b6:
00:0b:b4:0c:c5:63:28:2d:0b:53:52:3f:53:56:dc:
d2:80:2e:c0:fc:61:65:09:3a:96:e8:c3:38:00:e8:
bf:6e:13:5f:d0:4b:6a:30:98:63:ba:72:28:7c:ae:
05:7b:50:f9:75:8a:34:97:75:27:a9:bd:3a:c5:3c:
70:91:8a:5e:f2:24:0d:27:4d:30:aa:43:c9:a1:e4:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2F:6E:23:63:F8:60:29:F4:FE:35:C4:65:65:99:BF:FA:E4:29:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/298e19e8-b0ac-38aa-82ff-af63bd135582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl
X509v3 Authority Key Identifier:
keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer
sbgp-ipAddrBlock: critical
IPv4:
198.207.169.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:7f:bc:8e:e9:f4:d4:b7:db:d2:8f:96:dc:c3:8b:74:a3:2b:
66:09:f4:01:a7:c0:e7:91:d8:e2:94:df:c9:89:21:a7:67:01:
ee:5a:98:6e:5a:95:94:03:67:c1:3b:0b:d4:f5:cc:00:91:ef:
7b:86:9d:c4:9f:c8:00:02:04:b5:75:7d:c1:f3:0d:85:82:c8:
75:d8:52:9b:c8:f1:09:1a:f5:90:c3:e7:a2:27:5f:8a:94:af:
3f:b0:0a:d9:00:58:0e:dc:7c:47:31:02:0c:08:1b:4d:1c:7d:
79:52:0a:f2:ff:c3:68:ad:c4:3f:55:cc:26:70:93:a8:be:87:
1f:67:f5:4b:73:0f:3f:50:96:4b:96:81:b3:50:d9:f6:e0:52:
e8:5a:9e:62:20:80:dc:16:d3:32:73:06:83:6e:bb:50:65:b5:
90:ed:f1:b0:69:68:10:ec:b9:4b:61:83:da:9c:66:86:aa:62:
bf:a2:f9:c3:b2:63:21:bc:46:94:60:b1:78:d7:50:ab:ec:ee:
0a:9d:a6:24:a3:45:e7:a5:3d:0a:eb:9b:70:aa:bf:d3:10:ce:
59:b8:92:9e:01:0d:d9:44:d6:c1:fc:d4:25:d2:1f:8f:06:a1:
3e:c4:b2:f1:e4:6d:d5:e7:8f:b7:46:19:eb:10:f7:13:d3:3d:
f9:b9:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:52 2025 by rpki-client