Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/c43498db-1a52-317c-a01f-d3f059ca3df1.roa
File: c43498db-1a52-317c-a01f-d3f059ca3df1.roa (raw, json)
Hash identifier: f3ofIwEwFJBgp0SaOnemhBt4VvobRWpD4XnZYGABwxw=
Subject key identifier: CB:28:95:0A:0D:90:80:BB:2B:A3:13:7C:B3:0B:3F:48:F0:97:5B:A6
Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial: 010D0C9F432858489FA55FC67F31B083385DD200
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/c43498db-1a52-317c-a01f-d3f059ca3df1.roa
Signing time: Wed 22 Jan 2025 00:33:37 +0000
ROA not before: Wed 22 Jan 2025 00:33:37 +0000
ROA not after: Mon 21 Apr 2025 23:33:37 +0000
asID: 20473
IP address blocks: 199.255.148.0/24 maxlen: 24
2602:fd1e::/36 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9f:a5:5f:c6:7f:31:b0:83:38:5d:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Validity
Not Before: Jan 22 00:33:37 2025 GMT
Not After : Apr 21 23:33:37 2025 GMT
Subject: CN=5cf2f9b6-0e2d-4eb0-954d-dfdc933ee15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:fa:6d:df:a8:b3:c8:68:60:12:c8:c7:0c:
a6:c2:df:b8:d1:43:2e:4a:c7:90:33:3c:2f:78:7d:
6f:2e:0d:ba:ed:51:42:bd:9a:d9:f5:31:8b:96:7a:
b1:e5:9b:c1:65:30:e6:11:d9:8b:23:8f:e7:f6:34:
61:b4:3f:9b:49:d1:d5:78:e4:6d:a0:2c:46:2e:bf:
b4:ba:af:82:1e:72:c8:f2:67:dc:cd:07:0f:eb:08:
3a:48:76:ce:09:5b:c7:d8:d2:1b:54:80:03:8d:5b:
5d:06:3f:15:70:a5:6b:28:f0:f3:56:b4:a7:29:55:
4d:ba:88:56:f9:04:47:b3:fc:8f:ae:98:af:c3:54:
af:1e:8b:ac:c2:de:f9:29:5a:ee:e6:aa:74:2a:9e:
d2:39:a7:5d:f0:9b:e1:96:b3:bd:fc:ea:86:06:6c:
f3:bc:eb:56:b5:c6:85:b0:72:2f:67:36:2e:80:ec:
7a:49:31:04:5c:95:6a:af:40:2b:b8:3a:fd:be:58:
e6:30:2a:46:37:f8:cc:a6:1a:ad:8a:93:cd:6f:35:
54:e1:99:e3:50:09:6e:f2:8b:04:ec:16:96:60:f1:
10:fc:da:f0:ff:13:92:4e:b0:d9:d3:34:38:f5:49:
65:99:f0:f5:9b:42:d8:4d:f3:45:35:b6:70:8d:a6:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:28:95:0A:0D:90:80:BB:2B:A3:13:7C:B3:0B:3F:48:F0:97:5B:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/c43498db-1a52-317c-a01f-d3f059ca3df1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl
X509v3 Authority Key Identifier:
keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.148.0/24
IPv6:
2602:fd1e::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:c0:3e:70:b7:cd:15:43:b5:e6:00:8f:8f:26:d2:5a:95:ca:
b2:bd:83:7c:4b:c5:76:e1:dc:a1:00:1c:de:e7:89:82:54:4a:
f6:95:60:71:66:cf:23:94:52:03:8d:be:36:7b:d5:df:71:b2:
ea:11:bf:b7:98:6a:a9:2b:93:e1:e6:cf:79:de:2b:a5:6e:a7:
0a:04:a7:c0:7b:39:5e:90:25:3d:34:f7:cb:3e:0d:f1:70:a9:
94:59:49:91:94:ff:a5:93:42:53:c3:b6:a2:a5:2f:82:18:cb:
b3:38:3a:c9:81:62:0e:2e:a2:c3:e7:35:b9:fb:0b:fe:df:cd:
b5:f4:00:3a:41:6b:55:0e:e8:5c:0b:00:f3:87:47:b4:f2:fc:
96:63:02:1b:b4:66:7c:9b:43:93:ac:e0:a2:56:03:63:50:30:
2a:2d:32:f8:8f:3f:3c:58:dc:9a:6f:2b:ed:e6:a9:c3:c0:73:
de:e7:a2:6c:57:d0:23:b0:a6:34:79:a3:88:c0:24:8d:fe:98:
67:61:dc:77:09:db:30:d6:07:be:47:a5:d5:4a:d9:c1:13:3f:
38:10:ce:54:6a:d6:e3:0d:22:dd:74:24:51:90:63:5f:86:02:
1b:bc:ce:8d:4a:e8:20:0c:d6:8d:9c:d7:ef:64:df:25:bc:05:
15:fd:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:09:31 2025 by rpki-client