Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/3be2f94e-6696-38e8-ae53-405000ea496b.roa
File: 3be2f94e-6696-38e8-ae53-405000ea496b.roa (raw, json)
Hash identifier: 8c+IvqQ+kwdb8H3B1FhqUK9aB/tFkmR6Yzaw/pRazWk=
Subject key identifier: 4B:F8:06:07:40:79:51:0B:BB:8C:B0:BA:AC:2E:A4:3C:2A:B0:E6:D9
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F4328584929E3C5EDA1589C289F2EBC20
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/3be2f94e-6696-38e8-ae53-405000ea496b.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 395963
IP address blocks: 198.150.188.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:c5:ed:a1:58:9c:28:9f:2e:bc:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=67900e7a-1805-4ca9-8330-26bff18e2184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1d:3d:26:02:f5:08:af:af:c4:f1:0f:eb:60:
2a:ee:ef:aa:f6:f3:ed:83:84:2e:b1:52:5a:be:29:
2b:74:4e:b9:e9:d2:d9:cb:6f:3b:16:4b:ec:1e:44:
8d:3b:8e:f5:d2:83:d2:60:76:2c:7b:05:8e:24:81:
23:1d:a3:48:3f:42:2a:c7:de:38:25:35:f1:dc:f2:
52:db:f8:66:42:6f:c6:12:42:62:e7:06:ae:b5:1d:
4c:42:05:65:6c:4a:87:d3:71:65:28:d4:3d:2a:17:
2f:0f:d6:e3:88:44:ef:26:a6:1e:1d:97:b3:1a:67:
0f:4d:c8:96:44:8a:b1:f9:5a:36:3b:ad:10:7a:35:
c5:f3:e9:48:54:0a:c3:eb:6b:81:84:16:ca:10:0c:
a8:85:d9:23:80:d6:9a:07:cc:61:5b:a4:67:4d:4e:
43:5e:81:99:f8:68:64:ef:64:d1:86:9f:7e:9b:76:
03:d0:59:17:57:1c:a5:68:7f:e7:4f:87:7a:7a:8c:
18:e2:22:14:ee:68:bd:49:32:c3:de:bd:76:69:98:
94:62:9b:19:c1:d1:5b:a4:87:36:d4:2e:f8:4c:d2:
72:61:64:5b:84:c6:29:a7:4d:a1:36:fe:60:91:bf:
c8:f0:95:b5:46:7a:36:38:6d:47:de:43:d0:58:cb:
79:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:06:07:40:79:51:0B:BB:8C:B0:BA:AC:2E:A4:3C:2A:B0:E6:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/3be2f94e-6696-38e8-ae53-405000ea496b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
198.150.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:e6:8b:7b:58:9b:5f:53:b1:bb:3e:91:cb:5d:32:a8:84:6a:
0c:89:59:e1:f7:7e:33:49:e5:30:d4:b7:d3:94:e6:59:a8:6a:
f6:68:d8:de:1d:d2:c6:2b:ef:b0:7e:5f:3d:40:bd:58:6b:0c:
f5:5a:35:71:c3:98:1e:fa:4d:e1:ad:b9:6b:ca:e9:22:ef:97:
fe:e2:a9:a4:3d:68:12:85:92:51:24:be:0c:bc:7d:d9:d6:19:
cb:c3:f4:c7:3b:e1:d9:b5:a9:bf:3e:7b:8e:c6:81:33:3e:d9:
04:f3:27:fd:29:e3:bc:d0:61:95:05:58:a5:40:4a:89:b6:6d:
71:be:96:77:16:d5:95:77:03:fd:45:7e:15:9e:c3:bb:12:7d:
56:87:15:94:a2:68:da:16:5e:e0:5f:8f:e6:a8:e4:bf:13:2e:
41:28:8e:43:19:5d:11:04:98:10:a9:b3:76:1b:55:19:08:c1:
1a:1b:49:dd:ff:70:0f:70:fc:c7:60:e2:95:2f:86:a5:c9:a3:
75:24:78:63:f6:43:a3:4b:cd:d7:9e:d2:c6:d1:93:8d:00:10:
05:6a:b6:97:ec:e3:2a:f8:fd:4e:ae:bd:4d:a2:23:06:4a:e8:
03:b7:16:a2:4c:8f:33:98:a0:51:a2:fd:09:1d:50:45:41:1b:
1a:5b:8d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:25 2025 by rpki-client