Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/a8529787-c060-33e4-86c6-8d72789c4686.roa
File: a8529787-c060-33e4-86c6-8d72789c4686.roa (raw, json)
Hash identifier: NRpBKRanbGbiZuboee4l1vC52xpQ1lGGruMB5rUeQMk=
Subject key identifier: 41:43:CB:6A:34:6F:7E:17:80:80:F9:35:85:65:2D:2C:F7:77:EB:12
Certificate issuer: /CN=cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a
Certificate serial: 010D0C9F432858489075F730B83D960EF9FB0680
Authority key identifier: 64:C5:42:8B:28:05:3F:18:7F:64:18:1B:B9:5D:1C:E5:52:2D:D0:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/a8529787-c060-33e4-86c6-8d72789c4686.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 62647
IP address blocks: 198.49.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f7:30:b8:3d:96:0e:f9:fb:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=3d4ad8ca-ebba-4b95-8740-e2df46624473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3b:82:91:9d:fa:fa:67:32:5b:2f:45:4d:54:
22:80:e6:83:24:e1:dd:55:48:ff:93:71:c5:ae:fe:
69:ad:41:02:e7:88:64:97:23:75:d7:57:17:cc:4a:
54:ff:a4:e5:d5:3c:dc:cc:64:db:9a:ed:75:63:22:
26:77:87:e8:79:9c:77:05:52:ad:ea:14:c6:3e:bd:
e5:3d:48:e9:04:6b:58:d5:4f:a3:a5:7c:cf:51:34:
7f:7b:33:f7:b1:f6:d9:3a:a4:6a:94:2f:f6:63:78:
24:c3:38:aa:c7:dd:7a:1f:05:17:2a:3f:81:d1:06:
f1:cd:fd:c6:da:6e:ef:e6:24:9e:ad:4b:e3:f8:23:
1c:fb:e5:84:0d:3d:24:1f:94:bd:b4:fa:99:9c:24:
d6:fb:73:99:57:fb:ee:59:9f:4c:b7:58:9a:4b:2c:
8f:08:48:0d:27:a3:73:76:90:40:68:e7:ba:80:6d:
61:f3:17:c3:c9:ce:74:ef:64:10:0d:b3:04:97:71:
f7:54:13:08:5b:f6:20:5e:65:a0:a6:ee:24:4a:c5:
fb:0f:b9:46:5f:52:f2:f3:56:c6:09:57:e6:f0:94:
4f:59:b9:4b:06:24:e4:d6:ea:5a:fa:df:c1:2f:37:
57:85:cc:d4:87:65:41:4d:04:a6:6e:4f:1c:73:08:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:43:CB:6A:34:6F:7E:17:80:80:F9:35:85:65:2D:2C:F7:77:EB:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/a8529787-c060-33e4-86c6-8d72789c4686.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.crl
X509v3 Authority Key Identifier:
keyid:64:C5:42:8B:28:05:3F:18:7F:64:18:1B:B9:5D:1C:E5:52:2D:D0:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc1b1a4c-dbc7-4036-b39e-a4c845fb7b1a.cer
sbgp-ipAddrBlock: critical
IPv4:
198.49.46.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:4c:d6:f7:79:3e:2c:1e:f1:6e:54:fa:c9:7b:d7:88:46:bf:
88:d1:f2:b5:5e:b3:a3:1b:93:8f:2d:d2:a6:6f:c7:5a:9f:c5:
80:c4:98:a4:a1:94:bb:45:3e:a6:73:0b:d2:a7:df:f8:17:82:
59:6e:7e:37:06:ef:c5:d2:7c:9c:8e:46:b3:6c:ba:be:be:92:
69:a8:34:b4:2e:46:e1:02:0d:ee:a0:50:64:c2:32:6f:29:c0:
b4:a4:64:54:d4:f1:45:a3:41:78:d5:0c:8a:c1:06:4d:be:82:
b2:43:e5:a6:c4:6f:e7:5d:d0:d9:ce:98:38:52:cb:81:c4:6c:
c5:41:86:b6:97:b8:08:39:6e:2b:6a:5c:6b:4b:a1:d9:5c:8d:
f2:43:14:5c:1c:0b:a1:e0:65:0c:a9:23:70:c8:b8:29:c5:94:
19:d5:f1:8a:15:a0:9d:3c:75:d0:a4:c5:fb:a8:07:ba:74:8d:
96:48:9d:d7:aa:c1:2f:5f:b8:55:08:01:f0:00:c1:5e:de:59:
25:e8:9a:13:c1:21:05:5c:8f:d0:11:95:8d:2f:bd:e5:96:91:
59:39:ae:e8:ce:52:c2:e5:01:d0:fd:66:17:f9:f8:c5:93:72:
95:f2:9a:a5:d3:83:dc:e6:e9:5e:16:59:1b:04:e7:1b:f4:7f:
df:79:fd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:05 2025 by rpki-client