Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8197550-4b47-3563-b11c-54b7f751a9c0.roa
File: b8197550-4b47-3563-b11c-54b7f751a9c0.roa (raw, json)
Hash identifier: 36luBETb7WK2txrWuFgdP6isVMhrfaDmPSrVC9wuRbw=
Subject key identifier: F7:9F:3C:AF:7D:E5:13:D8:80:EC:66:D1:87:EF:AB:1F:8B:B5:82:8F
Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial: 010D0C9F43285848C581FA6110C0CDCEC6F74EC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8197550-4b47-3563-b11c-54b7f751a9c0.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 7155
IP address blocks: 198.45.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:fa:61:10:c0:cd:ce:c6:f7:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=1e820905-057b-45ed-abae-189209c7e6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:da:0b:8e:c5:41:bb:18:49:31:c2:d9:54:
2b:c9:46:56:07:2d:e7:73:f0:cb:1e:d7:b0:39:32:
91:c8:a9:de:4d:aa:b0:6a:e3:6a:21:ce:ee:f9:4c:
73:61:b7:e1:54:0b:77:96:44:b1:eb:79:dd:f8:7b:
8e:a4:a2:d3:2c:a0:77:c2:30:ad:c9:0d:79:12:9e:
fb:40:43:48:b2:f3:e1:78:a5:63:ce:38:17:f9:9d:
ae:b2:2a:92:ad:7c:66:9b:c1:0f:4b:3d:22:07:66:
89:d7:17:e9:54:98:16:d3:34:f3:98:84:3f:23:61:
25:e8:af:c8:9f:f4:d1:df:c2:79:e3:2a:f1:e8:58:
ee:cd:be:46:c9:b9:45:c0:6b:6d:af:f8:54:1f:95:
4b:05:4a:8f:0a:e0:21:39:73:ff:61:dc:ec:bc:a5:
ed:c9:d5:a9:09:e2:38:ac:4d:00:3c:53:d7:7f:49:
68:47:fa:f2:2c:97:a4:9f:53:61:91:d1:42:7f:2c:
3d:df:76:c4:7e:76:c5:c3:06:eb:cc:c1:b1:75:80:
a7:e9:bd:d3:a9:2b:a8:6b:9e:ec:58:11:f6:02:fe:
7d:62:90:cd:cf:ba:ad:8d:9f:58:0d:62:9a:77:db:
d3:0e:28:09:3f:65:c9:a8:f8:6c:97:7c:72:85:a5:
16:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9F:3C:AF:7D:E5:13:D8:80:EC:66:D1:87:EF:AB:1F:8B:B5:82:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8197550-4b47-3563-b11c-54b7f751a9c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
X509v3 Authority Key Identifier:
keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
sbgp-ipAddrBlock: critical
IPv4:
198.45.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:a7:6f:f8:6c:9a:77:b1:e6:77:9a:2c:b2:97:36:2a:69:5c:
cb:88:01:3b:9a:65:27:88:cc:43:d8:71:82:b8:72:53:4c:51:
22:d0:a0:a9:30:b2:11:1b:bd:25:cc:eb:e9:90:b0:47:f7:61:
00:08:a3:61:2b:a6:f8:71:9f:17:f0:01:e4:db:86:a6:79:ec:
06:3d:11:59:fb:10:fb:f2:a3:3b:45:13:a9:0c:1c:39:02:1b:
82:03:bc:1c:61:a2:47:f6:76:49:ad:a0:37:00:73:02:3d:d9:
24:ce:43:51:a9:ce:1a:cb:4d:40:f8:27:58:e2:0e:c3:5e:22:
c4:8a:f6:e2:1d:fe:c8:1f:80:9a:99:0a:0b:0b:70:e0:03:b0:
72:3d:b0:a1:b1:c6:3e:8a:d9:7e:b9:a4:4e:2e:92:88:67:e9:
a1:1b:a4:be:60:d6:a3:6e:62:a8:4d:65:b3:66:b1:fa:29:88:
86:e0:13:69:9d:26:58:65:2b:f9:cb:16:9b:0e:5c:2f:00:cf:
3e:ff:c1:ba:58:5b:44:ec:3e:92:b6:14:33:06:14:4b:86:14:
38:30:d7:2e:ee:1f:7e:1f:98:ed:a0:9c:34:7d:a7:09:b4:ec:
75:ab:a4:0c:d8:42:d9:7f:d5:4b:8e:4b:07:d1:69:5c:b8:7a:
8a:01:47:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:59 2025 by rpki-client