Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa
File: 8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa (raw, json)
Hash identifier: q7JBOkn2C+0ScaRmpPVoemFZqi7awaGaMK3f9IxbC7w=
Subject key identifier: CB:B4:CB:F3:22:86:13:09:EE:05:E7:E5:4C:89:BD:EE:A2:F3:55:7D
Certificate issuer: /CN=7cfe4957-5dcc-4e3d-8c92-31413817894b
Certificate serial: 010D0C9F432858489A3B42E25D4BE43B5B3CA780
Authority key identifier: D0:12:35:01:BC:61:EE:F8:28:4E:16:FF:DF:A0:28:75:E0:DB:63:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 31898
IP address blocks: 198.49.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:42:e2:5d:4b:e4:3b:5b:3c:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfe4957-5dcc-4e3d-8c92-31413817894b
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=8526dfa8-ddf0-46fe-a734-ffbc69134887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:31:66:ba:fb:bd:4f:db:24:80:59:41:5a:
aa:c4:7e:37:dc:5d:36:48:3c:cc:27:95:8a:74:26:
b3:7f:43:73:20:da:4c:00:0d:13:27:3f:13:18:fa:
3a:3b:68:7f:77:c7:a9:ca:f9:90:93:3a:d3:0e:9c:
14:46:65:82:5b:85:72:da:37:c1:e2:c5:e8:e7:99:
63:ef:28:4c:ab:8f:0e:34:75:40:aa:42:47:83:6a:
5b:6b:e5:75:cc:49:88:1e:83:ae:90:5f:48:49:13:
10:c4:52:51:38:20:2d:0a:50:bf:32:a1:9e:76:ce:
93:9b:aa:29:17:d4:a6:a8:69:c4:be:bd:25:c3:c5:
b0:71:f6:60:f3:ec:86:9c:b6:72:72:9a:e1:be:de:
35:f1:f9:9a:5e:d1:9a:c6:5b:09:b8:aa:db:1b:9c:
fc:85:e2:8b:2b:67:89:82:9c:49:d3:e6:53:57:ae:
88:34:44:a5:6c:df:aa:05:2c:97:d9:a0:6c:ec:92:
b8:8f:fd:99:97:c5:de:ed:51:a5:b3:f8:d5:b6:82:
ab:fc:20:89:65:5c:60:20:39:d2:f1:db:34:1e:9c:
e1:e6:49:ff:3f:8e:f1:1f:cc:1b:ed:b3:d7:48:79:
c9:37:b5:64:e0:62:ca:f4:98:f8:f6:b8:92:58:59:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B4:CB:F3:22:86:13:09:EE:05:E7:E5:4C:89:BD:EE:A2:F3:55:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/8bb299e1-dc1c-3f3e-9ee6-1035ce9a1954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b/7cfe4957-5dcc-4e3d-8c92-31413817894b.crl
X509v3 Authority Key Identifier:
keyid:D0:12:35:01:BC:61:EE:F8:28:4E:16:FF:DF:A0:28:75:E0:DB:63:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7cfe4957-5dcc-4e3d-8c92-31413817894b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.49.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:ad:b8:1d:5e:8d:b9:d4:d2:c0:e6:e8:20:19:f5:62:2a:f5:
6d:ec:12:eb:51:e0:f3:99:d1:58:ea:21:b9:f5:90:51:ab:1f:
c5:09:ca:2e:0d:4e:e2:61:83:84:0c:f1:6d:29:b9:f5:85:34:
3f:aa:40:23:ec:30:cd:be:a2:7a:bb:9d:98:53:b2:dc:03:b0:
9e:3b:82:61:07:d3:0f:96:85:b4:4e:99:31:65:79:7e:45:e7:
e2:7d:58:e2:d0:09:b0:d8:22:4b:e9:e2:61:b8:de:f9:dd:20:
33:54:23:24:9c:60:11:40:56:90:2b:1b:ac:8a:eb:9f:64:34:
16:ff:3a:06:9e:97:ef:d6:73:57:f8:57:3d:e9:03:c6:82:60:
5c:e9:85:fa:10:fd:70:85:fd:aa:f8:b9:9a:f6:3f:07:9e:50:
6f:89:64:25:02:2f:6c:c0:ad:71:6e:64:15:4a:a9:da:14:dc:
85:af:ff:7c:0c:4e:fd:15:d8:c1:d3:72:74:63:9d:55:29:1c:
47:6e:9b:b4:20:62:41:24:70:ad:96:82:b2:da:74:2a:3b:9b:
c1:65:be:da:89:d5:ef:35:58:42:af:f3:20:1c:13:a7:16:fa:
ea:25:df:1c:55:dd:a7:1c:37:fa:37:eb:e8:ac:0e:d4:be:dc:
24:0c:06:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:42 2025 by rpki-client