Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3651ecde-4f02-3d6b-9449-4ee300bf7c97.roa
File: 3651ecde-4f02-3d6b-9449-4ee300bf7c97.roa (raw, json)
Hash identifier: BwesxSPbGv0Lbsyqsv+GrGsXOAnvxN5HYFt+hN0j6Nc=
Subject key identifier: 98:AC:B9:07:8A:04:32:06:9C:F5:BF:A3:C6:B7:8C:44:FF:70:6F:67
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584917DC239ABBC30236C4DFB538
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3651ecde-4f02-3d6b-9449-4ee300bf7c97.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 395747
IP address blocks: 198.41.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:23:9a:bb:c3:02:36:c4:df:b5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=0225efdd-faa6-4b39-a378-9591bbdd44ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f7:b1:81:c9:fa:10:08:c8:fa:7a:53:bb:26:
3a:4a:8d:d6:61:4b:92:62:d7:c9:b1:cb:80:4e:66:
13:06:3b:be:9a:ab:d8:90:5a:79:e0:b4:55:8d:49:
73:8a:29:17:5a:99:f1:fa:86:43:aa:aa:eb:a7:61:
a6:3e:5c:ea:f2:27:ec:3d:2a:d8:05:2e:20:cf:04:
3f:f3:30:e2:51:e2:3e:8b:de:57:3b:f8:8c:40:4b:
dd:de:ed:bf:67:b5:e2:5d:20:59:7c:88:59:59:c4:
f6:41:f2:bb:01:66:fc:c1:19:c8:39:c1:3c:f7:bc:
a6:12:98:67:04:c8:34:80:d4:59:8f:8c:39:64:6c:
13:10:d2:b1:14:f5:8d:3a:96:bb:7c:84:a1:f0:cd:
f5:51:ed:60:81:bd:2a:00:51:7e:e8:3b:cf:d5:1b:
45:e3:63:2f:d2:f0:82:3a:ee:c0:80:60:44:08:92:
ac:aa:13:6a:5f:d0:63:11:31:1b:20:17:b5:11:51:
bf:09:a9:bb:69:c6:a8:4f:b9:35:50:f2:3a:18:3d:
99:e6:67:0e:6a:a1:67:2d:a3:2b:b2:38:23:3e:d0:
af:55:7c:2f:bf:21:b5:23:bd:4e:ad:ea:3b:c1:f9:
f9:02:8e:75:60:64:db:ee:01:c1:a4:0e:d2:9d:ce:
46:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:B9:07:8A:04:32:06:9C:F5:BF:A3:C6:B7:8C:44:FF:70:6F:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3651ecde-4f02-3d6b-9449-4ee300bf7c97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:36:23:ec:12:a0:fe:0b:31:cb:a3:fa:63:96:6d:15:85:97:
b1:54:91:92:4a:40:a5:f9:fd:3e:3b:2c:13:de:c5:ec:10:6a:
d9:51:f1:1a:0d:80:a7:95:c1:e8:c3:9f:21:f9:56:02:0d:66:
45:a6:a1:d5:df:2a:71:07:cc:a5:80:cb:1d:19:00:1c:0b:98:
c7:78:e2:3a:36:2c:61:57:c4:9f:c7:61:23:d3:85:f9:ce:c1:
7b:26:bc:84:35:76:0d:bf:64:d5:65:09:72:e8:e5:87:07:46:
79:08:07:4a:c8:5e:d5:58:98:30:37:40:33:14:90:dd:d6:20:
aa:a3:cb:c8:84:5d:ad:20:d2:30:be:c0:fa:46:da:2f:8f:4b:
ea:e5:3e:59:f1:61:3a:8b:d1:18:ce:d9:e9:85:e4:b4:f6:85:
36:1e:a5:33:3b:b9:da:f4:e2:22:00:1c:79:aa:ee:7b:58:a6:
75:6b:6a:e8:c7:d4:0a:df:71:a1:60:4c:94:32:bf:3c:70:a6:
8b:f7:de:f7:db:4e:55:0a:0c:e8:43:ef:13:02:18:80:5c:9f:
40:95:c2:fc:51:30:9e:2c:04:85:ea:98:d1:9d:43:c8:a5:6c:
28:01:c8:5b:f1:6d:66:d0:26:1e:53:55:8f:0c:9a:19:00:9f:
a3:b9:e0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:48:58 2025 by rpki-client