Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/04e5ec82-b68a-371b-9f9e-b6e764e7826c.roa
File: 04e5ec82-b68a-371b-9f9e-b6e764e7826c.roa (raw, json)
Hash identifier: VlA6L74ZS+XLoZpjuor9czNFwCzCmqW8uw1z4TlXJ20=
Subject key identifier: 3A:75:D9:DF:09:D1:22:91:12:A4:F4:D0:A6:C0:0C:25:CE:45:30:92
Certificate issuer: /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial: 010D0C9F4328584953C44B1A9CC91E40E52C6180
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/04e5ec82-b68a-371b-9f9e-b6e764e7826c.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 395657
IP address blocks: 198.60.113.0/24 maxlen: 24
198.60.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4b:1a:9c:c9:1e:40:e5:2c:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=00112b2b-52c3-4724-94ce-7172dbeba7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:36:52:d9:e2:9f:81:d2:26:5c:fd:93:66:8e:
9f:4c:ed:04:f1:00:97:dc:05:8d:29:9a:27:6b:e1:
0f:92:cf:a2:d4:52:50:2f:f8:a0:68:4b:ad:62:9e:
53:e2:58:1c:e7:f0:1d:d2:56:08:2f:55:a4:75:2d:
8d:27:5d:f9:5b:ee:50:83:8a:ef:f2:d0:2d:5e:e9:
4c:dd:ff:d1:7d:f2:9d:6e:87:10:33:8c:dc:03:97:
4d:2d:bd:c3:72:bc:be:cf:02:27:d9:8f:a0:11:5c:
af:f1:45:ba:b7:36:e8:de:35:bc:5c:05:4b:5e:3c:
81:30:2e:16:47:d4:a1:3e:ac:7e:19:32:a0:06:1d:
fd:76:4d:be:a6:56:76:4b:4f:e3:f5:4c:e7:be:d7:
80:2b:ca:ba:d0:14:73:00:d3:56:49:cf:47:dc:87:
25:4f:3d:95:a9:b6:0c:bd:dc:b1:3e:32:21:08:0a:
8a:41:4f:46:6d:24:c7:0c:5e:1a:30:96:10:98:39:
68:9e:f1:81:5c:d1:a7:75:68:3f:46:ce:fe:32:8a:
d1:50:6d:c8:3e:4f:b3:73:b6:dd:47:6b:14:e4:07:
4e:17:8e:d3:c6:28:ea:37:c1:98:ec:12:a6:44:c1:
c2:56:9c:5b:3c:dc:62:f8:68:eb:dc:ee:52:ac:b1:
1d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:D9:DF:09:D1:22:91:12:A4:F4:D0:A6:C0:0C:25:CE:45:30:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/04e5ec82-b68a-371b-9f9e-b6e764e7826c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
X509v3 Authority Key Identifier:
keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
sbgp-ipAddrBlock: critical
IPv4:
198.60.113.0-198.60.114.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:b8:85:2d:68:a0:8c:9c:a7:73:a0:d3:34:ee:0e:38:5a:78:
1e:3a:ce:e1:c9:1b:49:e7:55:28:e4:1d:5c:ee:4f:74:d3:7e:
b6:55:f4:b4:0c:8c:2c:65:de:ab:7d:57:de:d3:ef:16:17:cd:
c7:e4:27:fa:8e:91:56:ca:48:4e:14:40:79:18:d4:be:36:0b:
40:fb:a4:71:4c:b8:8b:15:0e:3a:65:9d:e2:5e:03:b5:46:0b:
b8:76:e2:42:28:df:13:8a:2b:c9:2d:97:b1:27:b1:f2:e6:b1:
e5:72:ba:04:18:bf:92:3d:b7:9c:0a:dd:71:0b:2a:f8:1a:e8:
34:c9:a0:19:b7:5b:fa:e3:b1:81:98:2b:fc:f8:05:cf:b2:67:
e5:8e:a9:1e:fd:83:df:1a:18:3e:95:87:6e:78:08:2e:c2:d3:
85:fc:9f:12:22:7a:73:c2:ba:9a:f7:d0:8a:70:a4:55:98:ce:
cb:1d:0f:74:a6:f9:08:57:ff:51:2d:19:65:bb:03:c8:0a:58:
3d:bf:98:32:83:43:ee:30:77:3f:70:d1:f2:e2:7c:01:86:2a:
92:7c:0d:ed:16:bc:78:3f:ae:6f:9e:d6:f1:2f:af:a2:a9:15:
5b:ce:6d:61:22:44:35:4a:fa:30:ac:7d:13:a7:59:0f:c9:83:
44:fc:09:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:53:02 2025 by rpki-client