Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/f6528c78-f01c-3b9e-baca-925db5229fe4.roa
File: f6528c78-f01c-3b9e-baca-925db5229fe4.roa (raw, json)
Hash identifier: Gm3NyVjBwvbiuzsxfLkKlMs71OhvcQW+J+5NHgz3Tvk=
Subject key identifier: 7D:18:97:E3:1F:EA:03:68:3C:F9:E4:51:EF:A1:74:F1:F6:48:15:D5
Certificate issuer: /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
Certificate serial: 010D0C9F43285848A29B4CFC5BF14E2B4F70C680
Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/f6528c78-f01c-3b9e-baca-925db5229fe4.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 397984
IP address blocks: 198.184.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:4c:fc:5b:f1:4e:2b:4f:70:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=6fd71ab6-0d80-423f-b24b-c2c0581ffaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:35:8d:b4:54:af:9b:5c:c7:17:18:a5:ee:a6:
31:03:3c:de:cb:ff:06:54:8a:12:4c:cb:97:91:e6:
bf:ff:7c:43:8f:2b:4b:9f:89:84:ec:3f:d3:ee:f6:
04:2a:1c:21:bd:32:2f:63:e8:52:a5:b3:16:5a:74:
c4:ea:99:35:29:9b:02:3f:a5:1e:5a:54:f2:9a:1d:
23:e8:d3:20:60:0b:bf:c4:59:38:85:a3:b2:0d:3d:
62:46:53:04:2a:75:57:ec:5d:2e:66:f0:d6:b9:fc:
6e:0a:06:7c:68:7e:27:b7:0f:e0:e7:bf:5a:78:c4:
69:ab:6e:1f:bf:20:b6:78:9c:06:f8:e8:27:4d:66:
fd:9c:05:df:37:f1:af:82:53:f4:ac:55:cd:14:8c:
29:58:b3:01:71:10:42:5b:af:c0:77:73:61:43:72:
b8:d4:80:6f:97:77:8f:01:23:db:bb:ea:43:c0:eb:
6e:ff:5a:a0:ac:3e:50:6a:54:3d:84:00:07:ed:93:
0c:fd:de:d8:1e:42:d0:a8:48:70:2f:67:cb:48:01:
09:93:a5:2c:d0:5c:81:4a:ab:b4:0c:8e:02:64:7f:
31:3d:c1:74:a9:7e:fe:c3:a9:b0:2e:46:f2:67:73:
6d:cb:d0:aa:97:b6:e0:71:22:a5:9a:2f:3b:9c:32:
39:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:18:97:E3:1F:EA:03:68:3C:F9:E4:51:EF:A1:74:F1:F6:48:15:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/f6528c78-f01c-3b9e-baca-925db5229fe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl
X509v3 Authority Key Identifier:
keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
sbgp-ipAddrBlock: critical
IPv4:
198.184.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:71:5c:dd:49:80:ab:bd:1a:55:4c:11:2c:49:31:87:8c:18:
de:c5:e0:6d:9c:34:da:56:59:eb:7b:aa:6d:d0:30:00:f1:ae:
82:79:4c:26:87:59:89:eb:87:3e:28:7c:c8:22:8e:90:03:6c:
e2:5e:a0:24:cd:48:75:51:77:5e:74:eb:ee:41:99:e6:2c:1a:
47:f8:97:6d:31:5e:ea:bb:83:df:3f:d2:62:e8:74:71:70:21:
2a:73:1c:6a:d1:b3:59:87:44:ec:11:ed:f5:67:48:01:d1:c6:
d6:d4:6e:7f:4b:cd:9e:2b:14:4c:6b:e8:0d:76:74:be:5d:58:
ae:9b:24:0a:90:bb:1b:1a:af:b1:bf:73:92:f7:62:2a:40:f6:
68:dc:90:a4:cc:a2:01:91:a5:7e:1a:e2:da:b8:39:20:7f:ed:
86:79:86:57:fb:65:0d:dd:dd:e4:0e:a1:1d:2e:cd:4a:f4:16:
10:d5:da:a5:6b:d1:39:98:bd:60:2e:60:87:5b:df:9f:8f:84:
01:42:80:66:39:27:8c:8c:b0:7e:39:ad:e2:92:79:60:a6:66:
5c:e7:b5:26:e0:c5:1d:a6:9f:30:67:fe:8d:85:12:e2:99:86:
69:8c:50:26:66:f1:85:28:57:97:eb:b9:b0:83:3d:c1:fc:0c:
c8:15:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:45 2025 by rpki-client