Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/25c41bce-b5c1-3b2a-b684-645e9a83a595.roa
File: 25c41bce-b5c1-3b2a-b684-645e9a83a595.roa (raw, json)
Hash identifier: wIWqlfJN8F/8QoDQuJfd+5PWq6XXd233ojvq0CranBE=
Subject key identifier: EF:48:32:46:8F:C2:5B:C5:9E:B2:F4:CB:63:F1:0B:BB:38:E6:CA:7E
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F432858492CB22A3C88EDF1C0E2B8B580
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/25c41bce-b5c1-3b2a-b684-645e9a83a595.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 4181
IP address blocks: 198.150.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:2a:3c:88:ed:f1:c0:e2:b8:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=52bf41f4-87ba-4c70-b13d-63e46e487b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6a:7a:96:e6:39:ee:6c:2c:cf:2a:68:a2:c7:
5f:5e:4e:03:fd:0e:58:51:e1:44:9a:39:df:38:07:
7c:f1:bf:d3:49:66:ad:b6:3a:4a:30:31:a7:91:00:
6c:45:28:48:8c:e5:24:c9:22:76:cf:4d:3b:e0:6c:
f1:e3:1e:64:75:b4:40:1e:63:44:56:df:ff:24:b1:
25:b9:ae:5a:38:85:81:a9:36:be:31:e9:a8:b3:11:
46:62:f2:bd:2f:55:30:95:a6:df:0e:1b:b5:7e:bf:
fd:d7:37:7b:6d:be:61:17:e4:3f:b9:99:1b:46:c3:
5b:44:ea:c4:9e:d4:78:ad:74:8b:91:37:77:af:9d:
c6:bb:0b:e7:a9:a6:d4:ea:4b:c6:7b:f8:c8:08:ab:
ce:90:76:32:7d:d9:8a:97:0b:aa:28:e1:db:b7:05:
eb:88:a9:14:08:f3:0a:33:e1:bf:f1:a7:5b:3b:9f:
97:40:57:b6:c0:49:95:85:80:d1:b9:76:2e:65:0f:
9c:ae:76:5f:25:13:6e:ba:c9:18:3d:fb:34:55:87:
49:fe:a5:a1:8f:19:de:c0:e2:dc:44:70:65:44:b6:
59:d9:d8:54:dd:47:ac:40:47:26:0d:06:1f:6c:d5:
d5:ff:e5:a7:40:14:4e:17:ee:99:41:04:e0:84:ca:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:48:32:46:8F:C2:5B:C5:9E:B2:F4:CB:63:F1:0B:BB:38:E6:CA:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/25c41bce-b5c1-3b2a-b684-645e9a83a595.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
198.150.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:2f:7a:f8:27:6e:c8:0d:90:a0:a0:cb:f5:96:8f:9c:bc:61:
37:e6:07:83:9d:e8:5e:6c:78:04:6a:ac:95:8a:59:82:41:32:
df:b6:82:b3:2a:7f:9d:8a:4b:30:30:3a:b1:46:86:36:2a:0b:
05:e4:0a:25:31:0f:43:d5:e5:7d:62:61:e7:d8:1c:d7:54:83:
79:3d:54:fc:b0:12:b6:18:4a:38:f0:f2:8c:f1:3e:51:df:93:
63:32:49:89:05:04:50:78:b7:11:67:a7:47:40:50:9c:54:30:
bb:29:0f:65:0b:90:b6:9e:e0:3c:db:47:e2:2b:d9:4f:5a:4b:
4e:0b:38:26:90:53:41:a3:1d:85:24:11:b3:ed:2c:e1:f2:69:
cf:f1:f3:fe:fd:40:41:a1:7f:f0:00:f3:d3:ba:06:66:0a:2f:
fe:aa:67:a2:f7:2c:df:89:51:d1:c4:8d:c7:62:a7:25:bf:59:
a0:9e:7f:03:7c:d8:79:7b:9d:4b:e6:8a:8f:1f:87:58:2d:6a:
ce:0e:66:53:ad:50:b5:07:bc:8c:b4:72:f9:33:61:0c:7e:9e:
dd:a6:fd:fe:0b:c8:6e:43:b1:a2:9b:79:08:55:87:2b:1d:36:
d8:f8:aa:77:f0:0a:16:ff:34:90:2d:8b:d4:db:34:23:20:6a:
39:47:09:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:32 2025 by rpki-client