Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5aa838e4-76b0-398e-bf6c-87040c977a3a.roa
File: 5aa838e4-76b0-398e-bf6c-87040c977a3a.roa (raw, json)
Hash identifier: /nAn+X4YueATvRi+xoH2DKouCecWhKfwsZLPZ4nmCS4=
Subject key identifier: 0B:0A:16:8B:0D:40:51:4A:58:36:6E:51:A7:D4:FD:B1:97:88:0D:E0
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FFCC4AEBE346E25B858E9E00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5aa838e4-76b0-398e-bf6c-87040c977a3a.roa
Signing time: Tue 25 Feb 2025 11:09:38 +0000
ROA not before: Tue 25 Feb 2025 11:09:38 +0000
ROA not after: Mon 26 May 2025 10:09:38 +0000
asID: 30036
IP address blocks: 198.40.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:cc:4a:eb:e3:46:e2:5b:85:8e:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 25 11:09:38 2025 GMT
Not After : May 26 10:09:38 2025 GMT
Subject: CN=2e79370c-16a4-4ffd-84c4-6d412f855b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:a9:26:f6:f1:5e:28:61:b1:ec:bc:6a:c1:
02:00:b3:d5:05:6e:0d:6c:c5:9d:ce:ea:4d:c5:a2:
c2:a3:a4:71:e3:f2:50:2b:01:5c:4a:a0:15:6c:9f:
1b:b5:22:f5:d3:17:3e:66:ce:cd:0c:0d:86:12:94:
13:44:fd:d7:91:a6:35:e5:f8:e8:5b:f2:ea:0f:b6:
87:f9:8d:4a:f4:ed:2a:7d:f8:00:73:2b:5e:54:c3:
bf:e1:a9:b1:a3:8d:8e:d0:6c:85:a6:c3:87:f4:82:
14:74:ba:b6:00:f3:7c:63:fd:3d:4f:83:1c:3b:36:
53:9f:a0:e3:c9:79:18:3d:d7:a0:10:cb:50:ff:4d:
bf:9a:a5:7f:34:a6:d0:26:83:e5:2f:e0:32:6e:c1:
f0:e3:01:f9:88:b5:af:33:45:b5:fd:9f:f5:0b:9b:
48:f7:87:13:16:8b:6f:a8:ae:c6:63:3c:a0:94:10:
e4:2d:cf:45:76:f7:dd:e9:e8:b4:59:48:7e:2c:b5:
d7:c3:38:0f:e4:25:ec:ae:b5:15:1f:da:2b:11:dd:
f9:6d:cb:b9:54:07:41:ce:68:90:00:25:58:c3:dc:
1e:b7:6c:90:a4:40:c1:ee:ea:78:9a:8b:30:7e:86:
67:ee:88:fa:e1:32:4c:ca:0b:7e:db:9f:8d:9c:c8:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0A:16:8B:0D:40:51:4A:58:36:6E:51:A7:D4:FD:B1:97:88:0D:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5aa838e4-76b0-398e-bf6c-87040c977a3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
198.40.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:c1:e9:35:24:3e:ba:c0:06:65:32:e1:92:20:f2:c3:f6:19:
13:3d:a8:3a:30:1d:dc:c8:8b:93:9e:25:30:42:82:d2:12:47:
6c:b6:2b:f8:ba:fb:8b:9a:fb:8e:76:ee:54:d6:43:09:67:cd:
54:5a:eb:d4:99:9b:81:01:e4:5b:08:62:e0:de:1c:15:ae:c2:
0a:d9:0b:c4:36:2b:7c:7e:65:a3:9a:9a:4a:8a:33:ec:9c:6a:
27:e2:34:3d:a9:29:ca:81:0a:7c:06:8a:98:df:cf:cd:12:ac:
86:7e:74:1d:56:b1:66:d1:92:aa:9f:7c:e5:0b:04:b9:bd:15:
9a:4b:0a:95:38:54:17:26:48:17:0e:0f:57:cb:7c:37:2f:84:
ad:f0:5f:27:f9:18:53:de:97:21:3b:ca:58:76:a1:09:54:c7:
e1:c2:64:be:1e:65:cb:a6:08:94:d9:ad:67:fe:df:0f:4f:79:
c3:8d:f1:3f:bf:85:fd:37:51:ea:6f:8b:62:27:d3:9b:70:49:
44:dd:cd:0a:d7:27:40:b4:7c:3e:5e:c7:4b:7f:30:10:46:42:
82:c5:bc:6b:6d:b6:9d:ba:f3:23:a6:c4:37:fe:63:a8:8e:85:
8e:40:00:b9:c3:c4:d8:44:00:31:68:12:82:0f:67:ef:d8:9b:
56:b6:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:48:43 2025 by rpki-client