Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa
File: 328e6c00-d857-3fdd-bf11-e5ff675483b4.roa (raw, json)
Hash identifier: S6QlAyVtMS+KcWxS+P1px+WCey5ADYgz1jLPIX47Q2s=
Subject key identifier: 66:83:87:03:C1:6A:01:BB:4E:10:4C:BE:AD:E7:06:AE:65:52:38:00
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F4328584929E3CE928302D2BCCA0B1B80
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 3136
IP address blocks: 198.150.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:ce:92:83:02:d2:bc:ca:0b:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=bb8bbb8a-c1e2-4560-b049-e4c26b22437d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:60:ce:e7:f0:bd:4c:e4:9d:78:65:5c:b8:
b0:c8:65:22:dd:04:24:91:ad:16:4b:fd:88:93:fc:
77:b1:82:ce:fb:f5:ee:27:ea:c8:c0:22:a7:e9:af:
d7:e0:81:b5:7f:90:0e:99:36:9c:0d:36:d5:8a:ca:
e3:40:e2:f2:27:7f:04:a2:1a:56:4a:98:de:65:cc:
61:8a:ed:ca:7b:31:c8:4f:7e:db:9f:1f:0a:7f:d5:
ae:6b:1d:42:55:d1:b9:b7:37:b4:d9:d7:bf:ea:7c:
1d:fd:cb:bc:ec:da:3d:3f:6a:19:06:3e:e5:4f:12:
68:9d:4f:d7:7d:21:91:82:fa:57:78:3a:39:99:1b:
f4:cf:b8:df:32:18:e4:4e:9b:4c:e8:13:4d:e6:62:
ff:ff:f9:c1:43:03:07:29:9d:71:6d:d5:15:2b:22:
cc:82:a0:52:53:02:5c:d8:99:67:ab:2d:8d:aa:41:
55:76:b8:3b:07:73:21:4b:02:df:75:ac:3d:69:3d:
29:87:b4:26:ec:05:2b:f1:0d:20:23:54:fa:a8:3b:
ee:a7:0a:36:ef:32:ec:92:fc:83:55:9e:78:f5:9f:
19:ae:e2:ae:06:c0:84:32:52:af:56:ca:2b:7d:97:
86:7c:4e:8a:53:0f:55:ae:04:f7:35:18:83:cb:78:
51:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:83:87:03:C1:6A:01:BB:4E:10:4C:BE:AD:E7:06:AE:65:52:38:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
198.150.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:5e:1f:91:da:7a:fb:b1:ba:b6:e0:9e:71:e8:27:ba:67:ed:
6f:61:17:a0:f9:01:3a:fc:ea:f9:b8:57:07:65:94:fc:d5:3b:
00:47:f5:13:97:26:07:b8:ad:80:57:51:59:86:9f:09:2e:52:
32:eb:5e:d7:4b:ac:d7:c7:0e:2e:2a:49:64:55:ba:d6:a1:09:
fd:d7:54:7f:a4:dd:09:46:9d:01:39:26:64:44:2f:cc:d6:52:
54:50:22:f8:61:b0:b0:9f:99:8a:94:90:5e:1c:00:b8:3b:05:
d9:77:d8:88:62:a7:62:63:cb:f6:9f:92:ba:15:e4:2d:31:d0:
c0:ff:a9:76:4e:0a:9a:75:86:98:19:6e:85:c1:1b:eb:e9:31:
a7:a6:d4:0a:b0:ab:2f:c4:90:0d:a3:2a:47:e6:a4:fe:99:d1:
81:3e:e3:a9:10:da:97:25:69:36:28:9f:75:ee:a5:61:02:1b:
db:29:e3:e3:29:d5:13:f6:3c:e3:ab:90:4d:f8:e9:0e:ad:0f:
ac:18:cd:d4:e5:c1:c8:51:09:20:aa:3e:04:3f:15:fc:80:20:
9c:76:2a:5a:90:a1:7d:fb:16:15:03:d4:35:f4:0b:75:cc:d7:
f0:ff:cb:93:b1:95:70:85:08:d2:66:03:8f:9e:e6:c8:4d:6e:
19:f5:86:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:56 2025 by rpki-client