Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/562ca4bb-e9f3-3bae-b2f8-807e63ef4ea3.roa
File: 562ca4bb-e9f3-3bae-b2f8-807e63ef4ea3.roa (raw, json)
Hash identifier: lCg7EuR7yilZrz+fGCkHWl4jt5SVx2GEusqxjFRcAuA=
Subject key identifier: 46:1F:44:39:4E:36:96:E2:E0:96:77:4E:D0:7D:00:80:9C:4F:6E:4F
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F432858490E16CB27FDC27B6B14866500
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/562ca4bb-e9f3-3bae-b2f8-807e63ef4ea3.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 20303
IP address blocks: 198.145.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:cb:27:fd:c2:7b:6b:14:86:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=bffb2a32-f514-4f0e-9104-3fe1a05f4620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:9d:ed:e3:a3:fc:38:03:24:70:40:2d:2b:
e9:6c:40:46:f4:13:10:d5:20:5d:ad:89:d6:d5:8a:
d3:dd:75:1f:76:53:1a:88:e1:b7:e3:50:95:03:3c:
ff:fa:4a:1c:f4:83:a4:d8:8a:14:4e:98:f2:16:80:
02:c8:23:f8:25:29:b4:c2:34:b8:f0:4b:d3:05:be:
45:7f:ee:be:42:df:b4:67:e9:20:8f:ca:f5:c3:91:
0c:01:0f:61:96:ae:cd:ba:5f:3f:2f:ae:ef:7b:52:
31:42:ff:d8:7e:fa:14:6d:fe:d4:1c:9f:7d:f8:73:
13:b7:0c:8b:ed:14:11:a4:78:db:1f:c2:11:ff:12:
72:cc:8c:f0:ce:a7:72:d1:20:cc:d4:8a:af:ce:d0:
2d:d5:20:a6:2c:7f:29:ef:9b:0e:f5:40:e0:a7:a3:
bc:6f:86:3d:29:d9:c3:d8:70:a3:cb:86:21:79:69:
e3:38:94:8d:83:e8:53:dc:4e:db:4c:96:9c:49:f7:
f9:52:09:22:cc:24:6a:4d:08:35:98:84:ab:05:a1:
2b:ae:2e:02:e2:dd:31:fd:e0:30:88:cc:f9:08:ab:
86:96:5e:b5:45:20:01:1c:cd:3a:17:0e:a7:1a:21:
79:08:72:8b:34:82:ed:b1:e4:c3:e1:2d:50:5c:85:
bb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1F:44:39:4E:36:96:E2:E0:96:77:4E:D0:7D:00:80:9C:4F:6E:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/562ca4bb-e9f3-3bae-b2f8-807e63ef4ea3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:10:7e:4a:81:16:09:db:01:f1:0c:51:66:4e:7c:b6:db:72:
97:2e:ae:c3:ea:02:aa:f8:b5:ff:65:5a:ab:21:5e:8b:a1:d9:
bb:af:a2:b9:86:e2:3a:b1:d7:c2:8e:f1:2a:15:18:42:3b:b5:
00:55:25:60:33:33:a6:5d:62:5e:e9:8c:d2:88:98:c6:6c:75:
06:26:36:47:d9:89:cc:57:db:fb:22:53:ae:1a:00:93:b6:24:
48:2d:1e:86:e7:69:1b:7f:1a:f8:12:70:0a:d5:4b:08:b4:47:
2b:bf:30:cb:1d:39:65:ec:f8:a6:d2:34:1a:0b:e9:a2:59:d3:
12:8b:24:74:f6:ce:d5:ff:0b:83:dc:69:00:69:9f:e8:0f:d0:
0a:89:41:b3:3b:12:1d:ec:0c:65:99:2e:98:f9:dc:82:e4:98:
68:0a:2e:0d:cc:27:0a:96:6d:5a:9d:0f:fd:0e:37:59:d4:6f:
0f:d0:b8:a4:d5:9a:9a:48:a5:76:40:99:59:38:23:c3:4d:01:
46:99:91:a4:5f:0a:3b:d1:ee:ef:7c:51:f5:55:5d:ef:7e:41:
67:a7:7d:af:81:3e:47:65:79:0c:e2:3b:34:a9:0c:5f:43:f6:
9e:eb:b2:ef:1a:51:07:4e:d5:85:44:42:79:92:da:cf:2c:c7:
84:eb:4b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:22:18 2025 by rpki-client