Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/633b9541-72dd-3fc2-9037-a3ec32e55320.roa
File: 633b9541-72dd-3fc2-9037-a3ec32e55320.roa (raw, json)
Hash identifier: C0oBRP/4WvXd4ISVES0dHIEupXEqHL/TtxCkvw+h+EY=
Subject key identifier: 96:8A:43:6C:CD:70:25:8A:7F:E2:F7:9C:79:0B:09:F5:A0:2D:7F:44
Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial: 010D0C9F432858482C12804804E3B9E3214E1580
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/633b9541-72dd-3fc2-9037-a3ec32e55320.roa
Signing time: Wed 11 Dec 2024 14:59:44 +0000
ROA not before: Wed 11 Dec 2024 14:59:44 +0000
ROA not after: Tue 11 Mar 2025 13:59:44 +0000
asID: 16591
IP address blocks: 99.198.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2c:12:80:48:04:e3:b9:e3:21:4e:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Validity
Not Before: Dec 11 14:59:44 2024 GMT
Not After : Mar 11 13:59:44 2025 GMT
Subject: CN=79d3ef2d-4f98-4587-a8e7-e83b450b2121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:41:6a:94:77:01:72:34:c8:80:6d:67:89:
c8:f5:22:62:69:dc:2b:00:94:3b:22:47:41:8f:27:
d9:46:ae:be:a6:1b:93:a4:96:2c:f5:56:17:45:61:
54:94:a4:56:e2:c2:62:82:4c:fb:cd:36:17:c6:89:
07:a6:af:bf:60:ce:e2:e4:02:70:de:f2:8a:ff:4e:
6a:c7:1f:a4:77:7b:44:47:28:40:06:80:67:91:aa:
d6:8e:6f:dd:4c:3c:27:ae:77:f7:e2:c0:71:2b:f2:
f9:ca:d8:f4:b6:19:fe:9f:88:08:7a:39:c0:f5:0c:
e9:4b:ab:f6:6d:43:09:e9:a6:e9:c4:4f:4a:44:28:
83:7c:a1:3c:2d:06:a0:14:4a:87:65:9d:ea:a9:fe:
3c:6d:3b:0b:5a:ae:0f:cb:00:87:12:30:a0:72:d2:
d5:58:d5:35:71:61:a6:f6:79:50:c0:6b:07:34:7c:
52:3f:ae:c6:1f:7e:ff:d9:a3:d0:68:f7:62:f0:11:
fc:5d:2c:da:95:9a:fe:5e:21:b1:ef:78:42:32:ff:
38:82:95:32:52:3b:7a:e0:a1:8b:83:58:ac:56:6a:
1e:89:7f:5e:99:88:13:62:2a:dd:c1:98:d8:86:29:
32:16:5c:c9:ce:c5:58:ff:b0:eb:30:63:8f:d6:6e:
d3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8A:43:6C:CD:70:25:8A:7F:E2:F7:9C:79:0B:09:F5:A0:2D:7F:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/633b9541-72dd-3fc2-9037-a3ec32e55320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
X509v3 Authority Key Identifier:
keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
sbgp-ipAddrBlock: critical
IPv4:
99.198.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:4e:67:f0:31:7e:31:31:47:78:85:60:e8:d9:15:fd:63:17:
95:fb:76:9e:72:91:9b:61:5f:39:46:3e:c5:b5:11:56:46:e7:
d4:6b:4e:f7:c6:1f:04:2c:07:aa:ed:08:ce:47:a5:d2:28:48:
70:b7:a4:5c:54:d6:d3:6a:03:37:86:54:eb:2f:ca:a8:02:b7:
0e:19:a1:00:93:00:69:6b:b0:38:36:f6:83:d1:f8:f5:b6:e2:
8c:f7:62:1f:9a:9f:eb:84:1d:f7:f0:2f:b9:e6:e1:4a:20:96:
1d:53:c5:3f:a4:be:8e:dd:91:2b:08:40:ba:2b:af:0f:fc:38:
3c:d3:05:02:48:25:59:56:64:52:cb:21:59:69:fa:60:3a:8f:
01:2c:2d:66:ac:02:60:be:ab:7c:fc:6e:2c:59:df:58:b6:53:
10:21:cb:6d:82:12:78:ec:f5:58:7c:1e:ec:1c:58:69:4f:15:
34:de:ca:a4:83:e4:95:53:d2:2e:32:f8:4e:fe:7d:f5:17:43:
49:91:a4:51:46:d4:53:d6:05:15:f2:33:b0:56:4c:22:1a:a7:
81:d7:a3:b6:f4:f2:96:97:33:34:3b:88:8b:5f:ba:ea:1e:a7:
24:65:50:cf:c8:85:dd:9b:34:5d:f9:b8:67:36:66:52:f7:83:
30:73:09:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:18 2025 by rpki-client