Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/d833a937-fd68-3b12-a552-2d99af1447a0.roa
File: d833a937-fd68-3b12-a552-2d99af1447a0.roa (raw, json)
Hash identifier: MAQliY2GffC1RnCc9ZTB8Kbn6KSHO6vCf6Op/JqIbAE=
Subject key identifier: 3A:21:B2:EE:1D:1D:BD:19:95:28:79:E9:CB:CE:FC:71:6F:EF:F9:8D
Certificate issuer: /CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc
Certificate serial: 010D0C9F432858494B640D3813AFA7A25A5FEE00
Authority key identifier: A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/d833a937-fd68-3b12-a552-2d99af1447a0.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 198949
IP address blocks: 198.180.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:0d:38:13:af:a7:a2:5a:5f:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153b1b20-0859-4b1b-9ffe-37e90041a8cc
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=77f0272a-eb8f-4421-adf6-3fce034c4d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:76:ff:a1:1c:cf:b4:5c:44:20:4e:62:47:
99:c7:fa:0a:20:e2:64:85:6b:bd:dc:13:07:6b:ca:
14:90:b7:b0:15:b3:20:61:58:17:1f:d3:56:10:ce:
09:8b:7a:c6:b3:ef:d6:67:1b:3a:c2:07:af:1b:ec:
8c:89:d9:e8:39:d5:07:38:51:09:77:97:ce:3e:7a:
f3:7e:70:3e:4c:fd:41:1a:63:d4:2a:f0:6d:ef:d6:
0c:3b:ef:f1:07:17:9a:1f:75:0c:98:06:25:b1:64:
f3:d3:d7:06:3e:45:a7:a1:1d:8f:5f:d3:08:b9:91:
82:ea:cd:85:68:ea:0e:40:b1:f3:8a:b6:01:0b:e1:
01:06:dc:ee:e0:89:79:fa:3d:82:2e:95:10:88:28:
cc:c6:24:e1:44:f0:25:c6:39:16:32:e9:dd:12:4a:
a8:96:00:d6:69:c6:47:63:04:2c:0c:84:83:79:f9:
96:5e:b6:78:ed:8f:cd:39:c1:e0:e8:21:a7:bb:94:
75:8a:63:99:e3:52:8e:23:b3:d9:50:c6:83:46:11:
03:25:24:8a:e2:ef:e4:c0:5b:8e:da:06:93:a7:ad:
48:d4:15:52:9c:37:5b:f2:63:50:b5:06:3b:99:82:
c7:c9:9e:67:34:b2:94:eb:ea:29:50:20:cd:78:d2:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:21:B2:EE:1D:1D:BD:19:95:28:79:E9:CB:CE:FC:71:6F:EF:F9:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/d833a937-fd68-3b12-a552-2d99af1447a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc/153b1b20-0859-4b1b-9ffe-37e90041a8cc.crl
X509v3 Authority Key Identifier:
keyid:A5:FC:2C:AC:D1:55:F0:F7:FE:C9:19:C9:B6:F3:DF:50:B2:8C:76:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/153b1b20-0859-4b1b-9ffe-37e90041a8cc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.180.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d1:42:67:ff:af:c4:92:af:3e:e8:af:1f:57:49:ee:0b:f6:e8:
0a:e9:b7:28:85:ce:c3:a2:95:b0:16:b1:b2:48:5e:64:68:75:
43:24:1d:58:b7:d8:10:2a:e2:a9:09:75:7b:f2:07:26:77:dc:
08:65:89:4b:54:5b:3b:9a:ae:df:01:2b:d2:ef:43:fb:db:8b:
97:17:cc:a0:b4:01:7d:b9:dc:25:18:3f:58:7b:af:18:f0:4d:
1b:0e:33:2a:73:ce:21:a0:87:cf:19:fe:10:85:13:b3:c7:7c:
ad:a5:52:8d:e3:b1:2d:3f:3f:cf:14:aa:b1:3f:1b:b1:a3:07:
fb:36:b8:5b:25:a2:45:e1:cd:bb:ac:42:59:9b:2f:15:06:ca:
7a:aa:dc:7d:20:36:f8:62:95:de:2a:47:b8:49:6c:13:6c:e8:
36:b8:3d:6e:06:5d:92:10:02:35:e9:49:ea:7b:d4:29:ca:46:
d0:cb:7a:30:ee:45:cd:13:41:61:dd:d9:0a:5e:14:c1:02:06:
85:e9:38:b0:08:4f:36:6f:3d:55:70:c2:d3:52:87:5d:af:8b:
b2:1a:e1:24:77:cb:72:5b:36:11:ec:2c:f5:78:9a:cf:e9:37:
72:2b:47:26:92:58:19:3a:9f:df:4c:59:94:e7:ec:88:db:42:
89:b0:74:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:39 2025 by rpki-client