Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa
File: 8d7db746-35fb-3952-a4fe-73fd27f04735.roa (raw, json)
Hash identifier: r9Is0vt6m++s/77pcAn3NO94xjBpfrIlFoKjoG73bec=
Subject key identifier: 14:7C:17:DB:67:5C:83:99:58:D5:29:F0:CF:03:A2:1F:A5:81:4C:F4
Certificate issuer: /CN=f30a83fc-5753-4d94-85d1-26924afa8ea3
Certificate serial: 010D0C9F43285849218403192AF549B2D515ED40
Authority key identifier: F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 16652
IP address blocks: 198.252.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:03:19:2a:f5:49:b2:d5:15:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30a83fc-5753-4d94-85d1-26924afa8ea3
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=2c7755bc-d67c-4070-8ef9-63190ff238a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:bb:55:0a:70:1c:01:b7:f0:47:62:03:ea:
7f:51:ef:a7:55:b7:67:fa:6f:3f:e9:ea:1b:9c:8d:
02:04:4f:48:21:cb:be:24:ef:58:07:99:f8:1b:ee:
27:cc:f9:f9:2e:bc:6a:b2:2b:fc:1b:a5:15:6e:2a:
68:15:0f:cb:94:c3:d4:2d:0d:b5:a0:7d:f5:87:24:
eb:28:c2:df:60:0d:ce:b2:8c:68:c8:3d:4c:3e:aa:
f2:42:5f:36:24:53:77:0a:f4:24:fa:bd:9c:e5:89:
2d:82:77:d4:6d:4f:47:86:f8:75:89:b8:f3:47:be:
70:69:83:73:1b:e4:50:b9:17:06:52:0d:5f:81:2c:
77:cb:62:86:af:4d:22:07:eb:4a:8e:be:ec:13:49:
03:17:ef:3d:f0:1b:67:c7:7d:d8:de:c9:0e:f3:14:
22:f3:e0:99:ee:f5:0d:08:92:6f:41:13:92:7d:22:
99:ee:bb:fb:16:56:2d:df:09:25:fd:7e:bf:73:3a:
f4:15:78:30:df:b4:c3:01:0d:ca:46:31:ec:5d:e4:
8d:9c:44:41:cb:7f:c3:1a:b1:fd:83:b1:e2:9b:0a:
e1:54:3d:60:03:16:fe:94:29:34:82:4f:e0:da:17:
3a:55:34:f5:88:a6:f3:0b:a7:cf:bb:fa:2e:27:0f:
3c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7C:17:DB:67:5C:83:99:58:D5:29:F0:CF:03:A2:1F:A5:81:4C:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/8d7db746-35fb-3952-a4fe-73fd27f04735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.crl
X509v3 Authority Key Identifier:
keyid:F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer
sbgp-ipAddrBlock: critical
IPv4:
198.252.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:f3:1c:9f:7a:dc:c3:b2:df:8a:12:cc:9d:1d:57:c9:20:61:
8f:bd:17:77:e8:f2:2c:a7:bc:2c:7a:41:ee:ea:62:21:21:e5:
83:83:a0:bb:c9:4c:b4:d7:f5:b6:4d:68:cd:25:d0:49:01:fb:
17:48:35:31:6b:59:ae:4e:d4:5a:6a:35:cb:f9:ea:84:6d:72:
77:22:32:f3:c0:92:0b:74:33:81:0c:b1:3a:d7:fc:26:3c:4e:
99:04:b1:3b:e8:60:12:4a:43:b8:37:77:61:01:75:bd:f8:d1:
e5:bc:ef:3b:17:7d:98:b5:02:29:26:3a:00:62:6b:d5:49:75:
ff:1c:3d:6e:1d:26:a1:29:a8:b0:75:f0:1e:98:c0:32:8f:a1:
bc:c3:e8:72:cf:b1:ec:2c:81:c7:3a:ef:dd:49:19:e0:0c:03:
49:6e:e6:b3:02:e8:ef:4c:33:9a:64:d9:03:4e:74:5d:f6:d7:
9a:96:16:58:50:88:85:e2:de:90:e0:1a:12:22:8d:06:0b:78:
87:b2:82:f4:13:3f:21:b2:00:ae:b1:f3:aa:c0:9c:23:cb:a7:
87:ac:26:39:6d:99:b5:52:fc:e7:a0:08:94:9f:71:3c:65:12:
30:fe:3d:d6:60:9e:19:f0:fa:98:2f:47:e9:9e:d7:56:dd:62:
41:9d:4f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:22 2025 by rpki-client