Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0ad980ea-07eb-30db-af9e-a8dc2a043933.roa
File: 0ad980ea-07eb-30db-af9e-a8dc2a043933.roa (raw, json)
Hash identifier: 9oSZY4cIygakgAL9lapI9s0rjze80Fwxao2bvOpW47Y=
Subject key identifier: 85:F7:D7:39:E9:93:9B:6E:7E:2F:C4:4B:7E:38:76:E2:7C:51:5B:26
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F43285847FF4A3F572B9A65CAB0EEAAC0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0ad980ea-07eb-30db-af9e-a8dc2a043933.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 142032
IP address blocks: 198.44.160.0/24 maxlen: 24
198.44.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:3f:57:2b:9a:65:ca:b0:ee:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=d85aaa9a-0ed2-45e8-b915-707294f9051a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:0c:69:64:ac:6d:88:7a:ef:ed:6a:91:0b:
88:98:da:a7:85:be:ff:91:1c:01:bf:0a:9b:f7:e6:
2b:2d:1b:2a:5b:1a:e6:3f:25:b4:b0:e0:d3:33:90:
66:31:18:89:cc:4d:d8:8b:5a:03:da:43:5e:07:d9:
2f:ec:1e:8c:6b:55:a1:2e:a0:10:06:37:88:1c:c6:
92:7f:dc:52:c1:5e:7e:44:e2:15:23:d4:46:62:4b:
50:e8:62:6e:1c:ec:d8:02:d5:99:8e:ae:7e:a2:ad:
14:7c:03:fa:91:c6:73:2e:b5:db:6b:6c:72:5c:b5:
ca:99:b2:5a:fe:d2:d3:a9:b7:75:46:34:ef:05:9f:
fb:9d:f6:45:49:5e:f6:89:60:bc:0c:12:eb:f2:8f:
00:3b:ae:45:76:b9:18:83:d4:55:74:7a:46:04:23:
3a:33:0e:02:c9:25:3d:4a:cb:1c:f4:ec:d8:fe:74:
a1:1b:25:66:10:9c:2c:cc:75:b8:ca:81:95:57:96:
29:79:0e:ae:6f:65:2e:ab:76:ae:6e:9b:41:f2:e6:
77:47:81:27:fc:53:16:98:1b:1f:72:b7:fe:d8:d0:
56:86:a1:cf:ac:35:3b:7c:60:21:d8:f5:0e:1b:5b:
0d:bf:07:1c:ae:a0:f9:8b:d2:66:20:f9:e5:48:c5:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F7:D7:39:E9:93:9B:6E:7E:2F:C4:4B:7E:38:76:E2:7C:51:5B:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/0ad980ea-07eb-30db-af9e-a8dc2a043933.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
198.44.160.0/24
198.44.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:4b:3e:6f:d4:3b:a4:01:77:d1:2a:56:16:7f:ce:8c:cb:06:
73:49:0e:74:6c:ab:a1:54:cc:ec:00:24:8e:44:2a:5c:c1:5d:
2a:f9:02:6c:41:45:72:8f:94:b0:b4:4a:f8:cd:70:62:21:1d:
ae:e0:fe:c5:35:4f:b2:b4:ab:1f:88:4a:08:2e:b9:3d:98:2a:
b4:88:ce:72:a6:32:7e:c8:65:53:c4:64:6f:8a:1d:a7:76:0b:
04:5c:ec:d4:97:10:ae:8d:04:a2:f9:68:a3:fc:86:98:11:ad:
74:dc:f6:8f:9e:05:9a:56:9f:16:08:4d:d4:a4:30:1d:1b:d9:
b0:28:01:b9:aa:bf:00:91:1e:69:54:5f:3d:9f:e0:69:22:58:
0f:71:50:03:5b:b0:26:3f:ea:25:0c:90:26:54:bc:57:e4:70:
7a:4c:43:7c:33:7a:eb:af:e5:a3:cf:cc:f7:e6:01:66:58:6f:
a5:10:fa:2f:7b:46:08:87:21:4a:be:16:26:e4:6d:28:eb:41:
84:6d:70:33:51:a8:05:ce:5f:b8:ca:c1:3c:81:5a:70:55:f4:
49:03:52:eb:ff:c2:6f:8f:49:12:a8:24:11:09:d8:10:cf:b3:
66:a2:ba:11:88:b5:8e:cb:9f:3a:97:9d:63:6b:09:05:08:a9:
3e:6f:39:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:02 2025 by rpki-client