Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/35a79ebf-4eb2-383e-9290-9d804567c62e.roa
File: 35a79ebf-4eb2-383e-9290-9d804567c62e.roa (raw, json)
Hash identifier: 6tnxz6y52Ykt1Z7kFIZgXYcMGyLfWmdiCuTtlsIi3CA=
Subject key identifier: A9:20:69:77:B0:02:AF:DB:18:62:E0:46:D3:57:92:B4:68:CB:FB:60
Certificate issuer: /CN=83588ae3-b763-413d-9823-3d3c20081120
Certificate serial: 010D0C9F43285848D3765ADC70ACE5B6D17F6E00
Authority key identifier: 3A:49:26:96:EF:02:4B:DB:23:E4:53:05:7B:77:A5:A8:B1:78:19:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/35a79ebf-4eb2-383e-9290-9d804567c62e.roa
Signing time: Sun 09 Feb 2025 14:00:51 +0000
ROA not before: Sun 09 Feb 2025 14:00:51 +0000
ROA not after: Sat 10 May 2025 13:00:51 +0000
asID: 13866
IP address blocks: 198.251.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d3:76:5a:dc:70:ac:e5:b6:d1:7f:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83588ae3-b763-413d-9823-3d3c20081120
Validity
Not Before: Feb 9 14:00:51 2025 GMT
Not After : May 10 13:00:51 2025 GMT
Subject: CN=ebbc14b9-6d59-4fb4-9d95-9507a7041aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:92:33:3f:48:a2:b7:b2:be:40:87:56:16:
56:74:aa:9c:b9:da:ad:cc:e8:47:42:90:9a:4d:51:
66:4e:1f:f0:23:b7:50:b3:34:51:69:e5:68:d9:a7:
f0:ca:f1:d3:89:28:33:76:2a:c5:0f:03:a0:4b:2d:
cb:2a:c0:d4:6a:ab:d0:98:f0:d9:ed:0f:25:0f:24:
95:0f:a2:a4:45:3f:75:f4:a1:99:3d:f5:8a:13:51:
c9:19:39:ba:4c:a6:63:f8:ca:ea:7f:87:e8:30:b6:
9b:78:92:8e:d8:e9:d0:d4:8a:3c:1d:95:b2:fc:e7:
24:8a:54:11:06:d2:9a:66:95:43:79:78:64:79:ca:
9f:df:55:be:f5:d7:e4:a4:08:5a:9e:d8:29:1f:46:
64:62:c1:d7:ac:1f:62:93:2b:66:93:7c:8c:12:bd:
35:0d:94:c5:b3:47:98:24:02:b5:3c:ca:f8:20:ac:
09:9c:b5:96:b9:1a:bf:6a:fd:6c:24:1e:28:89:d7:
57:6d:f3:bc:a6:e5:e0:e1:23:d4:39:b5:2a:74:bc:
8e:5c:84:b8:c2:d8:eb:0f:af:56:bd:e2:76:92:84:
ee:7f:c4:a1:05:ae:d5:4a:18:f3:a4:06:e5:b7:d8:
86:e0:1e:50:1b:22:70:92:e4:ed:97:6e:43:38:2b:
0a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:20:69:77:B0:02:AF:DB:18:62:E0:46:D3:57:92:B4:68:CB:FB:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/35a79ebf-4eb2-383e-9290-9d804567c62e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120/83588ae3-b763-413d-9823-3d3c20081120.crl
X509v3 Authority Key Identifier:
keyid:3A:49:26:96:EF:02:4B:DB:23:E4:53:05:7B:77:A5:A8:B1:78:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/83588ae3-b763-413d-9823-3d3c20081120.cer
sbgp-ipAddrBlock: critical
IPv4:
198.251.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:e2:6f:1c:c7:ec:aa:05:ab:dd:ae:60:4d:94:22:4b:0e:e3:
76:87:06:8f:9a:90:16:af:e9:8f:32:8e:80:a9:e9:db:ee:8c:
1b:62:d4:ac:cf:9b:8f:95:0c:ad:2d:a3:1a:d0:a0:c9:e0:70:
0e:c9:54:33:8c:67:30:6c:f6:1d:54:7b:b9:6f:a3:80:48:ad:
2d:d8:01:96:3f:bd:83:2e:38:bc:17:2e:2c:27:dd:65:f9:0c:
c1:95:00:f0:c0:a3:cd:47:03:8b:a2:27:5f:71:48:f5:fc:de:
1d:33:6e:7e:26:e6:d6:b6:c5:cc:d7:29:74:78:e1:73:9d:b8:
03:a8:97:b8:b9:42:d1:59:53:ff:28:df:2b:f6:10:89:22:bd:
4e:84:bb:ce:03:d8:11:b8:0a:8f:c9:49:a0:d9:ee:2a:48:db:
bc:66:41:fb:21:b9:76:c6:63:1a:1a:f1:9f:5f:5d:02:fd:31:
e4:d3:17:2d:0c:f3:04:fb:12:f9:a4:cf:22:81:75:52:eb:3c:
e3:57:ce:c3:d6:5c:3b:31:fb:56:45:74:f1:d4:c7:21:8d:78:
cd:38:82:22:c9:d6:a9:00:68:33:a6:78:c2:9b:aa:a2:fd:94:
58:df:4e:19:6f:7d:f2:02:40:6b:95:16:d4:10:ba:61:cd:f6:
f2:4f:e4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:08:21 2025 by rpki-client