Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/f3dc9028-d7b4-3f98-a752-bcda5833ef23.roa
File: f3dc9028-d7b4-3f98-a752-bcda5833ef23.roa (raw, json)
Hash identifier: AsYFhXRJu9hTIqA7FwmpciqMq3+d/tqWH9SvEOsqv98=
Subject key identifier: BF:C1:17:96:FE:17:30:5E:52:6C:8B:B5:20:27:20:2F:85:15:B6:5F
Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial: 010D0C9F432858489E6B662EB7971F231F197AF0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/f3dc9028-d7b4-3f98-a752-bcda5833ef23.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 46606
IP address blocks: 162.240.198.0/24 maxlen: 24
162.240.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6b:66:2e:b7:97:1f:23:1f:19:7a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=1f51c335-85dc-4e89-88ff-7fd207ca0764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:28:94:93:ce:ae:c4:ea:18:1b:d8:29:8b:7f:
e4:64:7a:16:ab:ec:79:ba:ce:1a:4d:7a:43:c4:99:
8c:af:20:a4:19:e1:fc:7f:ab:ce:83:b6:a9:6e:1c:
1a:8d:10:4f:09:c2:37:88:80:45:cb:af:2c:11:aa:
bf:35:ea:de:6c:a5:4c:3c:2d:b9:a8:b0:95:d8:0d:
2b:99:5b:40:d6:b6:84:af:22:4d:85:c4:5e:93:b4:
28:c9:18:9c:3c:3c:6a:8c:45:45:09:ba:f5:60:88:
6e:7a:94:07:23:b1:9b:31:c6:7e:e3:89:24:94:c9:
06:ec:45:ee:8b:ca:2e:62:db:21:0a:b9:fb:f5:aa:
5b:13:46:5f:0d:5a:d6:29:ad:c1:77:e8:7a:cb:09:
07:6b:c5:eb:5c:f2:34:ed:a1:fd:29:c4:91:95:3d:
83:bf:5b:59:1b:9b:38:f5:4b:0a:05:82:8a:8d:fc:
49:93:d1:96:00:bc:82:c9:d0:8c:e8:e5:e3:df:44:
5a:9f:22:19:82:a6:f1:2b:01:0d:1a:42:8a:83:09:
65:a0:58:3a:e2:24:75:ef:eb:e8:5f:88:67:77:b8:
ae:8f:98:55:31:83:e3:de:9e:1a:61:a3:4c:3b:3d:
f9:e0:31:ac:1c:c1:d5:55:80:5b:d2:f9:00:80:8d:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C1:17:96:FE:17:30:5E:52:6C:8B:B5:20:27:20:2F:85:15:B6:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/f3dc9028-d7b4-3f98-a752-bcda5833ef23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
X509v3 Authority Key Identifier:
keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
sbgp-ipAddrBlock: critical
IPv4:
162.240.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:32:a6:79:63:09:1c:e7:1f:09:9c:5b:0e:32:27:2c:b5:60:
4f:3f:1f:87:5d:85:e7:f9:1d:b6:1d:85:3b:c6:1e:d2:8e:70:
68:fb:41:36:5d:ad:14:3e:f0:df:c5:02:84:76:a3:88:b8:57:
e7:e7:12:7e:e6:6a:16:5d:dd:9c:10:2c:aa:ae:70:31:f8:48:
d7:ce:b2:3c:42:1a:70:99:e9:1b:73:83:8a:88:4f:5d:97:07:
82:cd:37:96:1e:51:9c:b0:4e:cf:cc:9b:5c:f6:ff:84:8f:c5:
ab:53:94:fb:1b:30:87:69:e5:ac:9f:6c:45:91:ad:4f:6b:a0:
c4:b4:23:20:08:ff:0a:06:c4:69:11:41:6e:49:1b:c5:3a:a3:
9e:52:d8:97:5b:62:83:27:04:14:70:73:db:bf:12:e7:38:bb:
6b:f9:47:34:8d:a8:f5:35:b0:6a:09:65:8a:2b:fb:e7:a3:23:
3b:5b:73:4d:71:7c:f4:e8:21:c7:09:9d:66:65:67:f1:53:c4:
12:c4:f8:33:2b:d2:8c:9c:6d:8c:71:eb:40:fa:fa:40:1c:71:
4c:b2:96:53:71:05:6f:bc:ed:5b:dd:b0:87:14:5d:cb:d7:9c:
97:63:c1:4a:85:c8:fd:08:97:b0:e7:f4:37:b3:d9:9b:2b:86:
1a:84:9c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:11:00 2025 by rpki-client