Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d3face62-98f6-3bc7-a5e8-ceddd4425a84.roa
File: d3face62-98f6-3bc7-a5e8-ceddd4425a84.roa (raw, json)
Hash identifier: GZCv3UAyaC4AlvdTZs3Gk/cDXOq/kEqZNLXqGbksv2c=
Subject key identifier: 8D:B0:07:F3:CC:E0:FE:EF:7C:58:A8:3C:49:3F:27:96:BA:11:4A:B1
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584937D9341FD62ADA65739D62A8
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d3face62-98f6-3bc7-a5e8-ceddd4425a84.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 46450
IP address blocks: 198.145.96.0/24 maxlen: 24
198.145.101.0/24 maxlen: 24
198.145.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:34:1f:d6:2a:da:65:73:9d:62:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=6a455656-cc26-401b-b817-8d8f665291cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:09:7e:21:2c:65:f1:b4:17:2f:fd:b3:1e:56:
e4:b6:19:8f:23:0d:2d:4c:eb:e8:d2:56:ae:23:79:
bf:a7:26:23:96:b7:4e:5c:83:6e:9f:4c:78:3e:aa:
8f:ba:8c:d8:fd:01:e5:f5:45:21:59:da:f4:ea:7c:
25:7c:bd:b7:c8:81:ae:03:9b:35:48:6f:8d:ce:be:
b4:56:bc:ad:84:82:68:6c:e0:8b:5b:71:49:c3:14:
2e:d9:c0:0e:56:74:52:84:f3:58:2e:f2:57:a6:20:
ec:13:37:b3:91:53:cb:a9:2d:e7:29:73:de:96:f0:
9c:f5:af:37:14:5d:5f:e0:b1:08:cf:7b:73:0d:86:
fc:06:df:ce:c0:98:b7:2a:9c:c4:91:9c:92:bf:75:
29:95:6a:f0:0e:38:69:2d:a1:3f:64:ed:28:e8:92:
d4:7a:ae:f6:b3:76:25:35:de:db:76:f8:21:99:71:
60:9c:c2:34:99:20:c2:b3:f3:ce:12:56:a1:d7:e4:
e7:0d:04:cf:2c:36:e6:d3:2b:43:6f:a1:ed:26:f1:
ce:43:e9:59:40:92:67:07:70:0e:3c:93:f8:5e:03:
e4:22:19:fe:6c:9e:1e:cf:c0:e2:86:05:a0:91:d6:
0e:d3:e8:f1:55:e4:3e:30:00:44:31:85:91:54:51:
95:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B0:07:F3:CC:E0:FE:EF:7C:58:A8:3C:49:3F:27:96:BA:11:4A:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/d3face62-98f6-3bc7-a5e8-ceddd4425a84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.96.0/24
198.145.101.0/24
198.145.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:85:32:43:c0:37:62:b9:10:f7:67:6a:29:d1:86:de:9d:c7:
1f:ec:2f:5e:0f:bd:25:d5:2e:ed:7f:60:c8:86:d5:04:72:83:
3b:c4:0f:59:ab:a3:e5:45:b3:e9:86:7e:f5:c7:bc:84:25:5f:
f6:93:84:86:38:1b:28:27:79:e3:88:e8:6d:db:ba:00:e3:be:
93:54:a7:58:82:fb:36:13:25:41:06:9a:ae:b3:8e:10:d6:99:
60:58:58:5f:d4:bb:3e:91:b3:39:84:ad:1e:74:c4:44:5c:aa:
8e:d2:01:42:6c:f9:e7:fb:cc:09:ca:a3:87:6c:10:2b:bd:12:
07:e9:46:5f:b9:4d:ed:32:54:7c:70:ec:b3:cd:c3:2b:8e:51:
30:dc:64:a5:79:c2:c9:8f:f6:38:23:33:86:e5:30:2c:6c:0b:
91:9e:75:28:cc:13:3d:b2:68:d0:f5:6a:bd:8f:f6:e1:dd:6b:
08:80:f2:fb:12:94:e1:7c:5e:d1:e6:1d:2c:8c:62:75:53:d2:
7d:e7:e9:b7:50:32:d4:77:76:78:1e:bc:6f:b7:e7:f6:37:78:
eb:de:5e:1d:2f:98:90:3e:b0:1f:2a:31:60:e0:3b:c5:66:ff:
cf:c1:32:96:fe:0d:45:69:cc:20:fd:b0:49:66:4e:41:6f:20:
3e:2b:35:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:20:02 2025 by rpki-client