Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5b9d8709-cf71-3b61-a9f6-52f8a303a4b8.roa
File: 5b9d8709-cf71-3b61-a9f6-52f8a303a4b8.roa (raw, json)
Hash identifier: J/c7ajCKnxcbcjwUrXlfzOMxr6knagdc320epTn0x9M=
Subject key identifier: 20:92:6C:5A:D6:4F:E8:81:F6:84:99:27:27:7C:E7:40:78:D9:48:48
Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial: 010D0C9F43285848FFCC5731E60E120FE9D96040
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5b9d8709-cf71-3b61-a9f6-52f8a303a4b8.roa
Signing time: Tue 25 Feb 2025 11:09:44 +0000
ROA not before: Tue 25 Feb 2025 11:09:44 +0000
ROA not after: Mon 26 May 2025 10:09:44 +0000
asID: 30036
IP address blocks: 198.40.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ff:cc:57:31:e6:0e:12:0f:e9:d9:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Validity
Not Before: Feb 25 11:09:44 2025 GMT
Not After : May 26 10:09:44 2025 GMT
Subject: CN=5ac3b91e-cd85-46f0-8e3d-25bafd0565c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:25:56:e3:06:38:00:9c:1d:4e:59:41:20:c5:
6f:ae:4c:99:4f:1e:19:aa:3e:08:3f:79:c7:e3:3b:
e0:b4:47:c8:d8:72:f5:71:41:6a:29:5d:5a:13:f1:
cc:c4:7f:61:bd:3d:af:f5:e1:6a:ca:dd:21:fb:30:
38:7a:48:04:55:47:ee:1a:9f:0d:df:25:d9:6e:5f:
88:4b:27:e7:2e:6e:95:5f:1d:61:33:1e:09:79:3f:
d4:c8:75:72:09:9b:de:00:80:14:18:18:09:8f:7a:
7f:5f:43:1e:5a:90:ae:9d:8a:ec:48:35:76:d0:01:
f1:8f:0d:18:05:d4:eb:26:60:7c:c8:e7:5d:e2:b8:
91:61:b1:66:11:6c:88:7c:88:3e:5f:16:e4:d5:90:
73:14:76:d6:ef:09:48:76:f5:b9:5b:97:e4:ef:1b:
81:f9:67:b6:f0:7c:f8:69:98:f5:da:60:07:d2:cc:
2b:90:37:3c:2d:d0:41:f3:1f:68:80:15:39:26:cf:
b6:10:86:73:14:f7:cf:c6:b7:19:b1:55:63:f0:a5:
77:0c:83:06:4b:74:c6:22:98:86:65:4b:6e:0b:1d:
c8:39:72:23:44:a2:9b:c9:b1:05:6e:a7:fe:cb:b6:
0b:19:96:97:fe:1b:3e:a6:3e:03:16:78:9f:75:fb:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:92:6C:5A:D6:4F:E8:81:F6:84:99:27:27:7C:E7:40:78:D9:48:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5b9d8709-cf71-3b61-a9f6-52f8a303a4b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
X509v3 Authority Key Identifier:
keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
sbgp-ipAddrBlock: critical
IPv4:
198.40.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:84:5b:40:74:a1:ee:80:bb:15:7f:49:65:ef:25:34:a9:70:
d9:d4:18:d2:d8:8f:28:7d:8a:77:e4:d7:89:6e:81:bb:1e:0a:
33:d0:1b:3e:96:4b:1d:05:d5:bd:6c:38:09:49:83:31:fb:e1:
76:3d:0e:8a:fc:74:82:33:ea:03:b4:55:e1:34:9f:3e:e9:06:
5c:0e:df:3f:5a:1a:a5:b5:83:45:87:73:5d:55:03:75:b5:d4:
dc:f1:1b:6e:fe:44:4e:97:d4:0a:46:87:89:f8:c0:f5:fc:51:
9c:0c:88:9d:c4:92:03:ac:ee:ef:4e:68:49:46:1e:b4:ec:69:
e7:65:58:ae:68:84:a4:b1:7f:27:c7:bf:7e:4e:a5:24:8e:f5:
26:b6:5e:42:12:25:5e:03:a6:dc:0c:68:56:d5:32:1f:10:c0:
66:f3:2f:0c:12:b9:34:d8:0c:1b:9d:ca:bf:8f:86:b8:37:63:
a5:74:2a:89:5d:eb:36:1f:40:19:e1:8d:0a:8c:34:9e:05:f6:
04:7b:dc:64:92:a3:4d:7d:f4:1a:cd:05:7f:4f:46:e5:03:20:
a8:c0:48:85:64:c7:8e:05:b6:5e:7f:c3:b4:56:84:ca:6e:89:
71:b5:bd:69:e0:b7:6b:cf:c5:06:93:95:98:49:cd:34:1d:f7:
4a:63:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:50 2025 by rpki-client