Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/77910977-6e5e-4238-9d63-69bc88efa2f9/0c75b76a-030b-31e2-b407-4082ae595fca.roa
File: 0c75b76a-030b-31e2-b407-4082ae595fca.roa (raw, json)
Hash identifier: N5IJEUeRbivM69I9Ih2zWMbu+A8sQnmQEm7f7TQ9TZc=
Subject key identifier: 8A:CC:B2:04:03:21:A7:EC:C8:8B:27:E6:30:27:AD:0B:B4:31:3E:E9
Certificate issuer: /CN=77910977-6e5e-4238-9d63-69bc88efa2f9
Certificate serial: 010D0C9F43285848E16BD18D86F38B74BFD72920
Authority key identifier: 7B:F0:C9:95:F3:52:C4:F1:0D:D7:9B:2F:5A:B4:9D:94:E2:C9:80:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/77910977-6e5e-4238-9d63-69bc88efa2f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/77910977-6e5e-4238-9d63-69bc88efa2f9/0c75b76a-030b-31e2-b407-4082ae595fca.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 398395
IP address blocks: 198.45.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:d1:8d:86:f3:8b:74:bf:d7:29:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77910977-6e5e-4238-9d63-69bc88efa2f9
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=793934f0-58d4-49a9-9926-d2cfe16d1e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:49:06:fc:cf:48:38:40:6d:b6:3c:0a:31:
74:68:2e:d1:1b:1b:20:65:2b:18:55:78:c2:8d:ae:
5e:1f:15:a4:94:75:67:ac:5e:13:e8:b5:60:cf:45:
31:bb:3a:1f:e0:f5:35:7f:5a:34:1d:6a:9c:87:33:
b2:e1:86:fe:0e:e6:d4:d9:6c:94:6a:a5:a5:85:41:
49:5a:f2:93:4e:f0:9d:9d:f3:b7:9f:9a:7b:a7:ba:
53:a2:f5:5f:dd:ca:99:bf:e1:25:52:3c:f6:0e:10:
96:52:2a:e9:07:c7:25:5c:8e:5d:02:78:6d:f3:5b:
a6:bc:87:57:c8:bb:61:8e:00:9b:63:13:a3:9a:61:
95:1d:b5:7d:ab:11:6d:52:88:06:74:45:d2:b8:f3:
e1:32:33:a1:7e:65:bc:0a:6f:8f:a3:90:0d:c0:ac:
48:1e:ce:2b:d3:41:0a:05:f9:e4:97:a3:32:68:2d:
80:d3:ba:8e:f5:74:5b:eb:95:39:22:8f:97:12:de:
66:60:d6:1f:ab:61:b5:89:37:a8:5d:38:de:bc:31:
6b:1b:00:7f:72:67:ca:f2:d9:23:65:bb:01:97:1b:
4e:12:1a:5f:f7:1a:9b:33:35:84:31:ce:27:0c:5e:
af:19:ff:5e:32:5e:aa:60:c9:c2:52:f6:00:06:1e:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CC:B2:04:03:21:A7:EC:C8:8B:27:E6:30:27:AD:0B:B4:31:3E:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/77910977-6e5e-4238-9d63-69bc88efa2f9/0c75b76a-030b-31e2-b407-4082ae595fca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/77910977-6e5e-4238-9d63-69bc88efa2f9/77910977-6e5e-4238-9d63-69bc88efa2f9.crl
X509v3 Authority Key Identifier:
keyid:7B:F0:C9:95:F3:52:C4:F1:0D:D7:9B:2F:5A:B4:9D:94:E2:C9:80:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/77910977-6e5e-4238-9d63-69bc88efa2f9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:7a:07:a0:fd:ac:39:e3:ec:f4:ed:d9:a9:75:4b:2d:fe:6c:
99:55:b1:2a:59:39:53:1c:40:0a:71:37:f7:7b:b5:81:a3:06:
e8:5b:46:d5:20:15:9f:30:d8:f8:ac:cd:b8:c9:4b:7f:79:c9:
6a:fd:b6:c9:81:5a:f0:95:ac:17:9f:8b:b6:13:55:37:74:ae:
35:53:c8:da:3e:e2:f8:9a:2f:b9:1a:f9:fd:9c:26:7e:52:46:
3d:58:7c:31:e2:b0:a2:06:57:79:a0:62:7b:44:fc:f4:d4:7e:
ed:38:56:48:63:78:f8:cc:4c:cd:9d:fb:70:93:cc:e2:43:7e:
5e:99:69:96:d7:5d:67:fd:75:eb:f1:f7:03:06:71:db:57:0d:
bb:b5:0f:2a:56:6a:15:bb:8f:67:7e:2c:03:5f:45:e7:a6:c1:
ed:1f:a6:74:77:72:af:6e:ad:54:94:93:5f:9b:b9:57:fe:71:
ae:35:8f:be:39:b6:d7:7c:60:46:4e:95:0b:62:85:25:7d:c5:
f0:a1:52:f7:3a:4c:06:59:df:fc:61:89:15:63:cd:b4:65:63:
0c:6a:4a:12:9f:35:d8:3b:8f:33:d2:67:7e:69:17:ac:0f:50:
f0:15:bd:70:5e:df:dc:b3:82:30:f1:96:cb:57:9a:7a:c1:c3:
6c:8f:47:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:17 2025 by rpki-client