Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa
File: 4748e949-c2fb-3b07-a310-c7d6a2767edf.roa (raw, json)
Hash identifier: dPrwTyEBmfbvb593PGP/lQ4R/8vbpVvsKDXe+RCynxg=
Subject key identifier: E2:A0:11:44:0C:73:7F:1F:0B:B9:0E:8A:8F:7A:C2:EE:82:FF:7D:0E
Certificate issuer: /CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc
Certificate serial: 010D0C9F432858487CEB2EF5CC015C66871DC800
Authority key identifier: 3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 395101
IP address blocks: 199.175.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:2e:f5:cc:01:5c:66:87:1d:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab96de43-19ee-48ac-8a2f-acd9ed1caffc
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=a56f5cae-9687-4dcf-b195-d90ce23eb38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:24:56:aa:de:c1:50:82:cc:6c:6d:64:d7:
ff:43:d9:27:a3:6d:f0:15:9f:60:71:33:3a:23:37:
34:48:9d:b9:f5:e8:c1:98:ba:ce:3e:71:c9:28:fa:
13:eb:96:89:3b:8a:14:c0:64:ca:f2:50:ee:97:aa:
cf:c0:b2:69:72:0c:c8:9c:30:fc:5c:44:f9:33:7b:
25:71:d5:f5:fd:5b:5a:4b:47:e2:32:e6:23:b9:92:
9d:c4:3f:8c:50:8e:57:81:c0:53:1b:74:5f:3e:2d:
25:b5:b0:71:e0:b4:18:59:92:88:e5:e7:aa:d6:75:
d2:f7:31:b6:2b:ac:40:f8:79:12:50:de:96:b2:68:
bb:da:77:3e:b6:d7:0a:93:cc:de:1b:86:16:1c:19:
4a:da:87:0e:35:06:91:42:81:a8:d3:29:81:16:0e:
e8:b5:69:61:49:5b:17:4d:6a:f3:25:f9:b4:93:8a:
d0:b6:0d:b7:49:01:21:21:8c:38:93:34:bd:6d:22:
50:63:5c:b5:02:30:84:60:48:45:02:4c:80:2d:16:
c8:8c:d0:7e:3b:b1:54:3b:1a:fd:cd:75:0d:0c:1e:
6b:7b:79:df:63:9c:af:ff:73:b8:8a:7a:02:b9:8b:
f6:b9:3d:8d:d0:9c:3a:f0:51:bf:e0:94:67:7f:a5:
ca:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:11:44:0C:73:7F:1F:0B:B9:0E:8A:8F:7A:C2:EE:82:FF:7D:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/4748e949-c2fb-3b07-a310-c7d6a2767edf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.crl
X509v3 Authority Key Identifier:
keyid:3B:CF:83:75:19:2E:01:83:B3:A0:FD:24:21:90:21:F1:62:C7:68:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ab96de43-19ee-48ac-8a2f-acd9ed1caffc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.175.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:d8:12:9e:21:b3:26:39:57:aa:e6:07:eb:7a:5a:61:33:74:
07:2e:54:6b:d7:4b:1f:0a:e1:83:79:2c:53:1a:ba:13:41:37:
56:ab:97:75:39:4d:a8:42:47:b8:c2:94:af:77:ab:ca:da:bc:
63:a0:d7:5c:b2:a3:89:0d:b5:29:14:86:48:20:a7:52:82:ca:
ca:54:d2:2d:72:36:af:97:d4:0b:a3:8a:5d:84:10:52:92:c0:
15:c9:bc:6c:cf:10:a1:dd:d5:b5:38:35:0e:b0:55:a7:e4:d2:
da:77:df:06:65:65:19:84:0a:62:03:41:05:a8:35:c9:36:a9:
7d:af:67:31:7a:62:b6:db:2e:bd:78:4f:55:ee:d0:32:1e:00:
3c:01:0f:6b:b0:4f:95:21:29:28:8b:a2:53:cc:74:d8:65:ba:
8c:d1:0a:ce:8b:99:9a:b2:65:6b:4b:60:8d:78:12:f1:5e:3e:
de:06:9d:74:01:b9:e8:d1:2b:80:1a:61:b1:07:4e:7a:2b:1e:
8c:6d:4c:07:c2:0b:5e:83:6f:57:64:90:cc:09:50:05:e2:79:
d4:e4:37:fe:19:fc:1a:8e:79:5a:1f:55:2d:7c:db:25:96:33:
26:f7:2b:21:36:e9:87:c3:21:4c:82:26:1b:6b:33:e0:de:28:
89:1c:fc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:42:48 2025 by rpki-client