Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/9a9fe228-0c29-3c72-b8c4-fb20f31baca9.roa
File: 9a9fe228-0c29-3c72-b8c4-fb20f31baca9.roa (raw, json)
Hash identifier: fibYCNhJVG+La3bc3it0G5UtQPU89EMMRVh1Hz6eelY=
Subject key identifier: E3:6D:1A:9E:3C:5D:1F:12:98:81:B5:9A:25:17:90:12:18:E3:8E:86
Certificate issuer: /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial: 010D0C9F43285849203C194008708D3340534980
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/9a9fe228-0c29-3c72-b8c4-fb20f31baca9.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 54334
IP address blocks: 198.133.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:19:40:08:70:8d:33:40:53:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=41fabd7e-483f-494c-b1d6-9fb587543089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ec:fb:4e:10:0d:75:b0:49:86:d3:a8:04:fd:
00:ff:fa:fe:a4:47:b4:e3:7b:2f:70:16:91:9c:cf:
24:1f:f0:78:3a:c6:81:4d:5d:28:fc:b8:cf:3a:c7:
01:a0:05:51:5d:30:b3:f5:9c:43:cb:96:ce:7f:b8:
e8:73:96:da:51:ba:15:db:ed:e8:f7:5b:15:7b:77:
e1:96:04:8b:29:c7:a5:28:af:7a:b6:99:70:0b:47:
b2:fb:58:f4:e0:e3:4b:3d:f9:ce:07:90:e3:8c:1d:
35:4f:4a:eb:d0:92:7e:fb:b1:50:ff:d3:cc:9c:21:
77:8a:06:dc:35:78:4a:5b:2d:5f:71:43:02:eb:9d:
88:fa:d6:a3:9b:db:56:ed:09:e9:ce:f8:59:80:1c:
44:e9:17:06:b2:dd:ea:cd:cd:d7:1e:ff:42:f9:7c:
cc:ca:7a:d3:0d:24:3e:fb:3f:a8:42:c5:eb:01:0f:
34:dc:84:8b:f2:49:9a:a0:37:7c:75:65:b6:be:22:
e2:42:e0:98:b4:65:23:21:9d:aa:34:da:b0:80:2c:
bb:0c:30:ec:ba:b3:6c:92:24:23:51:b1:80:ae:c0:
a0:c7:4f:18:cc:48:b1:79:7c:dc:d2:a8:52:25:8f:
76:13:17:92:3a:65:cc:8f:a1:65:64:dc:06:8e:66:
ce:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6D:1A:9E:3C:5D:1F:12:98:81:B5:9A:25:17:90:12:18:E3:8E:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/9a9fe228-0c29-3c72-b8c4-fb20f31baca9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
X509v3 Authority Key Identifier:
keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
sbgp-ipAddrBlock: critical
IPv4:
198.133.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:ad:87:bb:16:3d:2c:64:9c:a0:aa:ee:cc:2d:65:d4:d1:1f:
5c:3b:64:5f:e2:61:2b:7e:e2:8e:dc:d0:c4:98:08:74:ec:2b:
76:f4:df:9a:a3:89:d9:36:8f:a8:be:6c:cc:42:31:ae:4b:65:
14:07:40:c3:9e:7e:49:8d:03:22:7a:3d:c0:9e:50:c2:14:05:
f7:44:aa:1d:a0:35:cc:09:3d:f6:67:7d:01:9c:41:f6:9b:5c:
48:ab:9c:6d:70:e9:33:98:46:62:49:84:ea:6b:b3:c3:76:be:
8a:aa:e7:a5:ac:e4:91:6a:6e:94:eb:ba:f7:a9:d9:06:9c:0b:
f5:3f:67:04:db:fd:c9:52:a5:19:cd:e8:06:0f:3a:37:37:7e:
51:d4:5b:10:42:0b:c0:34:a4:a8:9f:52:ed:e1:75:ab:a0:bc:
2d:5f:15:93:65:60:9c:e5:74:74:50:bd:98:1d:e6:40:43:af:
ee:f2:9d:82:3e:3a:7b:e2:de:0f:1d:2e:97:99:71:9c:2c:46:
fb:ba:d6:03:3c:51:c0:71:fc:15:59:d4:bb:9a:65:08:ed:31:
e7:57:0a:83:6d:01:88:a9:72:4c:19:a6:7f:e1:e7:f5:f9:df:
bf:6e:51:0c:ab:f8:bf:6b:b5:23:76:6a:3c:84:8f:57:40:af:
01:78:31:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:59:45 2025 by rpki-client