Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa
File: 44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa (raw, json)
Hash identifier: sloYm5xgsoJSVgThwFsoCrMB2YMZYl4CqIQ64HdOVs0=
Subject key identifier: 31:84:82:67:9B:17:E3:E1:93:B5:BD:D2:AB:8C:98:9B:32:BE:FB:62
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F432858493C0938BAFF40A1A4CBB43B00
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 2381
IP address blocks: 198.150.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:38:ba:ff:40:a1:a4:cb:b4:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=48d360ed-23b2-41ed-8e89-6af4af637daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:6c:27:68:71:fe:dc:fa:46:ce:cb:bb:57:
92:7e:e2:c4:28:1c:9e:26:ce:9a:40:37:ce:b3:04:
0f:a1:66:8c:a4:49:32:21:7e:76:d7:c8:83:41:d0:
ba:37:7c:e9:c1:3d:58:d5:44:47:ae:48:d7:87:b8:
2f:66:6c:6d:e8:74:a9:de:96:66:65:c5:db:88:20:
1a:b2:94:a6:77:cc:eb:74:07:9c:c5:5a:dc:3b:42:
4a:02:38:41:c9:4d:20:0a:cb:88:4f:25:97:48:72:
33:cf:47:85:e8:ee:40:3c:1e:65:8a:f9:04:93:95:
06:e1:78:e8:c1:a6:cb:38:5d:dd:08:62:1f:ab:5b:
99:21:09:25:31:47:c6:1e:e9:0e:da:3e:f4:5d:b6:
86:7c:78:8d:8b:13:2a:f6:74:32:c8:d4:be:78:ee:
1c:2d:aa:b9:7e:f5:60:67:84:79:be:41:14:0d:f9:
cd:3e:1d:b3:0f:50:8a:ed:38:06:5b:81:8f:b6:b2:
a2:ff:ac:ba:12:7e:3a:2f:33:56:f5:27:4c:b4:5e:
31:d4:a1:d1:e4:a0:ca:a0:21:bd:83:fd:86:23:97:
9b:5c:d9:4e:3d:95:0b:d7:8f:20:72:bc:dd:71:88:
16:4d:fe:2f:74:a1:d7:7e:34:40:20:29:02:d0:b5:
dd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:84:82:67:9B:17:E3:E1:93:B5:BD:D2:AB:8C:98:9B:32:BE:FB:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/44fc891d-1d63-38fe-ad22-c0eb2d2d9fc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
198.150.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:f1:3a:4b:18:64:2e:57:b2:2d:d9:4d:f6:b7:f2:7c:97:7e:
fb:11:ad:b2:51:d2:c4:c9:25:d3:0c:54:e0:5e:11:33:d1:ad:
e5:0e:c9:ae:1c:ce:37:18:17:f6:db:d9:94:b9:bf:95:39:18:
b7:8f:5e:9c:c4:08:5c:90:37:91:1f:64:f9:a9:a2:bc:7a:16:
cb:91:2a:f4:82:bb:ec:8b:9c:a4:47:ea:e1:25:cc:4d:ee:90:
f1:c6:d9:42:03:fd:57:db:d4:58:3f:fd:db:ee:e7:b4:86:51:
3b:44:c8:cd:90:ad:e5:d4:8e:2a:72:e4:64:86:48:2c:19:0f:
1c:c4:db:94:c9:34:cc:17:45:e3:19:76:38:1b:8c:63:c9:47:
ff:25:c0:5f:8c:f4:9d:1b:73:ab:4d:32:3a:d7:a6:b8:ae:b7:
17:b8:35:66:73:02:df:70:58:10:f0:c6:cf:96:d9:09:d8:44:
fe:11:3f:a9:12:5a:f1:ee:77:96:c9:23:9c:a1:65:2c:4e:05:
41:90:14:c5:3d:b2:08:db:d2:ba:2b:0f:01:74:13:11:da:71:
34:7d:d2:ec:73:51:47:b4:a2:f5:54:ee:82:55:b4:b2:80:a0:
ab:4e:1f:0c:51:d7:36:78:87:44:fb:e6:cb:62:4b:60:7e:74:
fb:df:38:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:41:33 2025 by rpki-client