Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/eeeea7e9-e34c-3509-8f8f-667785fef9d0.roa
File: eeeea7e9-e34c-3509-8f8f-667785fef9d0.roa (raw, json)
Hash identifier: qJ4MRoaesaeDYMrYETmd+eHWzhRmyXPrbm11Y5P3Nr8=
Subject key identifier: 30:6C:A5:83:2D:F9:8B:28:4C:35:D8:0F:6E:DD:FA:5D:0E:1C:42:E5
Certificate issuer: /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial: 010D0C9F432858494CC9437A7778BF1D5DF30E80
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/eeeea7e9-e34c-3509-8f8f-667785fef9d0.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 398797
IP address blocks: 199.255.148.0/24 maxlen: 25
2602:fd1e::/36 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:43:7a:77:78:bf:1d:5d:f3:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=0002b82b-a1c5-40cb-bc12-411974983131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:17:59:17:87:30:c7:f8:b4:06:8e:7b:e1:
ec:78:88:4e:78:84:04:c5:ea:a7:18:69:9c:a7:dc:
da:c5:df:83:10:6b:b7:ce:bb:7c:67:64:e2:3f:a6:
37:79:47:c8:4a:f5:74:79:69:ed:7e:67:93:2f:c4:
dc:a2:39:75:e8:47:2c:c8:ca:27:cd:4f:09:d1:f3:
5f:a3:0e:03:80:41:bc:17:7f:de:98:8f:9e:c2:96:
83:ba:d6:9d:07:6f:3e:b9:26:d1:ff:61:1c:03:30:
fe:63:2e:68:ba:d1:2e:c1:06:60:b6:0b:7e:2f:01:
34:c2:cc:89:61:c4:1c:34:8a:90:47:5d:44:7e:2a:
c7:83:30:56:96:48:9f:7e:8f:7a:92:a4:74:4c:79:
99:ae:f1:b6:ad:30:ff:4c:d3:8b:c8:07:be:ba:42:
6d:ae:8c:fd:9f:22:39:0e:67:76:b0:04:1c:08:9f:
a6:f2:19:25:35:01:5e:f0:44:f6:93:5d:67:9f:bb:
23:a5:cf:50:8f:08:0e:2f:83:9a:ea:84:45:b9:78:
0e:2d:62:66:63:af:09:38:60:4a:cd:bb:6c:d6:d1:
b9:f8:58:47:7f:4b:e2:10:63:9e:8b:8d:b6:04:55:
04:5a:7b:85:ce:1d:9c:27:19:96:29:f1:b4:a7:82:
72:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6C:A5:83:2D:F9:8B:28:4C:35:D8:0F:6E:DD:FA:5D:0E:1C:42:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/eeeea7e9-e34c-3509-8f8f-667785fef9d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl
X509v3 Authority Key Identifier:
keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.148.0/24
IPv6:
2602:fd1e::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:b3:9c:d7:e4:35:bd:0b:74:31:dc:91:63:13:29:ae:2b:b8:
16:08:c2:e9:02:01:e5:8c:93:ba:2e:63:a0:fd:22:6e:90:64:
0a:d7:22:83:f8:b9:e9:61:e2:85:b7:6f:0c:d1:f6:3d:fe:56:
bd:56:f7:a0:e6:60:9e:f8:80:0b:7a:4f:ad:34:7b:48:60:83:
eb:de:e9:79:23:85:54:28:f5:4c:e3:e4:b7:ce:e8:4c:02:46:
d6:76:6e:43:0c:b3:64:39:a4:de:44:b6:70:6d:87:50:02:fb:
c9:cd:83:ef:11:9a:79:ad:bb:78:14:f1:02:f1:f1:c3:60:7d:
c3:d7:1d:34:ed:00:4b:cd:4c:76:95:d9:7f:e1:2e:c1:fc:e6:
8c:79:db:de:75:0f:1f:0f:20:06:13:39:ad:94:fd:cb:b7:0e:
d7:b9:09:6e:04:e5:71:4f:dc:bc:2e:f0:e2:ed:fc:48:34:19:
0f:69:b7:72:62:16:ec:39:77:ce:8b:d5:7a:4f:9e:2b:d6:c7:
8f:a1:42:06:0c:a7:ef:12:c7:7a:4e:84:e1:73:9d:a1:2c:4b:
ac:0a:a6:6b:66:00:03:98:d2:8f:1c:96:e1:ed:5a:56:3f:cc:
d0:d3:c1:84:2d:d1:df:79:d0:bc:74:53:17:ba:cf:7b:fe:cb:
ed:eb:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:15:52 2025 by rpki-client