Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa
File: 282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa (raw, json)
Hash identifier: ZKCYUpi7hXLiQPq3tB5nnAyY0sA0tPkC653pktYUDec=
Subject key identifier: 0B:A8:62:8A:59:30:12:EB:D6:23:55:27:DA:D1:FC:E1:ED:48:CF:47
Certificate issuer: /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial: 010D0C9F4328584902EC2EC81F35619CB9BA9C20
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 14618
IP address blocks: 198.252.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2e:c8:1f:35:61:9c:b9:ba:9c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=83d6474c-6589-48b6-8961-eb8605873642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:d3:0b:1d:f9:26:c3:e0:b5:a9:55:ea:7c:
11:40:0b:ac:5c:8f:05:62:f1:ec:31:8c:3c:ed:fc:
0b:4a:ef:1c:3f:c3:4e:07:57:12:2d:41:42:c2:8b:
5b:35:33:a1:a4:d2:22:cb:d3:0a:95:39:05:1e:8e:
cc:35:8e:8b:a7:9c:bc:b7:5e:02:80:16:37:56:7e:
a9:21:99:2b:02:ee:69:ad:84:68:80:1d:c6:1a:92:
0e:36:5e:48:0c:b0:28:18:e3:73:17:a6:5e:2a:c8:
45:3c:1a:69:5d:4c:79:5f:c5:1d:26:f5:dc:55:96:
05:c9:a6:5b:f0:95:11:82:df:4e:6e:b1:09:ee:de:
7d:01:1b:78:b9:e6:f9:99:9a:e6:2f:bb:4e:1a:5f:
3f:3e:fa:59:04:84:9c:d8:68:df:ad:5e:8e:46:18:
7c:d7:85:93:9f:bd:f7:2e:43:af:f5:c8:f1:e9:65:
e6:a8:b6:16:eb:78:4f:6a:6b:0f:a4:c8:cc:b1:01:
34:31:0d:e3:68:a7:8b:84:0b:42:ab:81:8d:e1:70:
a6:2a:2f:fd:94:2f:b0:3d:d8:4c:ff:8c:61:fa:c1:
a6:d1:66:c3:95:d4:f1:50:9a:94:61:e8:2b:15:72:
ce:eb:f2:c0:92:38:ca:1a:f7:38:69:ed:1a:75:a8:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A8:62:8A:59:30:12:EB:D6:23:55:27:DA:D1:FC:E1:ED:48:CF:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/282f9e34-ee84-3db6-bfa5-3c62d7a4968c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
X509v3 Authority Key Identifier:
keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
sbgp-ipAddrBlock: critical
IPv4:
198.252.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:aa:de:01:63:9e:43:b1:68:da:f5:55:7d:2f:f5:2c:14:b9:
07:55:40:9e:1e:47:66:dd:f3:e1:90:f7:00:16:e6:84:63:b5:
ef:e3:53:4f:28:04:29:4b:bf:32:af:67:92:07:fe:1c:34:3d:
73:4d:00:9e:f6:8d:cf:05:37:8e:f4:30:8c:b1:f1:00:a3:c6:
fa:c2:4c:dd:fc:e4:17:66:c7:9c:99:dd:e9:a3:ee:c5:14:ae:
04:e5:11:5b:c3:f9:1e:d0:e1:1b:9b:cc:3a:57:06:16:60:a7:
33:d6:88:62:6a:de:04:35:bc:4a:76:ac:34:bc:b4:1f:96:a1:
77:47:d7:e0:03:b6:be:0a:4a:00:49:43:a6:df:99:0f:f7:94:
20:82:15:12:a3:09:55:b1:93:52:ef:33:4b:db:b3:20:c5:72:
fd:36:73:82:f4:d5:b8:cb:c3:ac:4f:66:6b:5d:e6:56:2b:97:
50:46:fe:5c:a8:e0:26:a0:1a:57:f8:8a:b6:2b:fc:3e:8b:ce:
06:97:fd:c0:04:82:b4:e8:e6:2e:53:8b:ab:33:37:bc:35:7c:
20:e0:e0:bd:fc:22:fc:ce:61:2c:79:d0:a4:6e:67:bd:c7:4d:
f8:7d:41:f7:4c:8c:15:26:81:67:b6:18:3a:95:de:8e:11:47:
65:91:07:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:12 2025 by rpki-client