Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd895d36-9a69-3002-8f53-5c6ba38acca8.roa
File: fd895d36-9a69-3002-8f53-5c6ba38acca8.roa (raw, json)
Hash identifier: xoxq3LT3VaAloH2IRq1uOwOOAvXRejDz9v2d66UdADQ=
Subject key identifier: BF:F2:A3:A2:39:79:A0:04:25:F5:23:3F:FF:01:32:04:8B:03:BE:95
Certificate issuer: /CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Certificate serial: 010D0C9F43285848A412026A1F77B3BD984A1A20
Authority key identifier: 0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd895d36-9a69-3002-8f53-5c6ba38acca8.roa
Signing time: Thu 23 Jan 2025 14:35:45 +0000
ROA not before: Thu 23 Jan 2025 14:35:45 +0000
ROA not after: Wed 23 Apr 2025 13:35:45 +0000
asID: 14618
IP address blocks: 198.145.124.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:12:02:6a:1f:77:b3:bd:98:4a:1a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd722b20-f288-4bd8-bfc7-4eb7ead9d170
Validity
Not Before: Jan 23 14:35:45 2025 GMT
Not After : Apr 23 13:35:45 2025 GMT
Subject: CN=175e49a3-76b1-44d0-b0c0-fd8edb765d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:27:c9:a1:bf:2e:1e:4d:75:da:bf:eb:ca:48:
bb:51:44:42:a0:35:4e:29:af:18:0e:e1:5d:a2:00:
1f:e2:4e:04:19:8b:ee:84:09:a4:c5:88:6e:66:df:
0f:67:cc:6d:e1:8a:15:6d:54:e6:f2:93:d1:84:c0:
03:d7:a1:e3:2a:59:6a:3d:66:71:1d:94:4b:e7:f0:
0e:71:19:24:9b:c8:2b:d0:a4:95:6f:c2:db:ea:b3:
46:2d:68:03:44:9c:01:ac:e0:30:9a:5a:2e:20:15:
37:2f:a7:ec:bb:5f:ff:7c:05:9d:38:20:31:2e:50:
d2:8b:7f:e0:dc:68:cd:d8:cb:0c:78:a8:34:ad:33:
b0:77:22:cf:d9:ba:d4:ce:70:45:fc:04:dd:f5:9f:
fa:1b:af:64:39:1d:07:63:00:aa:f8:2a:fa:6d:f8:
06:fe:53:ce:06:4c:57:39:53:85:f3:67:0a:92:e6:
62:12:0e:3b:f8:41:6b:eb:c7:af:3a:d4:fc:69:2c:
84:02:9d:04:83:d9:c6:80:d3:ea:9a:29:4c:38:17:
d9:a8:58:f9:01:79:75:19:87:aa:bb:72:b6:2f:3f:
87:3f:e8:95:a9:89:ab:8b:84:dc:90:ff:6d:2e:8e:
44:f9:1a:eb:03:d3:36:6a:6e:27:3a:53:83:60:4c:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:A3:A2:39:79:A0:04:25:F5:23:3F:FF:01:32:04:8B:03:BE:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd895d36-9a69-3002-8f53-5c6ba38acca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.crl
X509v3 Authority Key Identifier:
keyid:0F:A1:F6:49:10:0B:B6:FD:7D:59:BF:ED:71:F1:AC:0B:4F:54:CB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fd722b20-f288-4bd8-bfc7-4eb7ead9d170.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:95:ca:9c:35:65:6f:7f:e6:3d:49:da:7d:63:4b:f0:34:57:
ef:8b:2a:a3:8a:9c:3f:83:ea:bc:43:92:99:7f:17:a2:21:cc:
8c:a1:eb:7d:94:00:1d:a5:04:cd:20:b2:36:fa:fa:07:be:6c:
55:7d:50:c3:bd:74:93:20:1a:e4:09:5a:3c:2a:0c:b6:87:57:
6b:b5:88:54:5a:37:36:f3:fc:ba:17:8e:d6:07:40:18:21:ac:
f6:da:2f:ec:96:69:5e:0c:ae:c9:79:78:2b:a1:fa:93:82:3d:
32:a7:5e:67:db:36:32:d5:97:46:07:f6:10:6f:3c:9c:38:1d:
a8:f3:42:24:60:cc:b5:8a:88:5e:d6:fa:e7:96:40:7c:ab:fe:
19:36:0e:92:a6:4e:8c:36:6d:ba:26:f6:27:7b:f7:af:e7:65:
12:4d:11:af:a4:07:ef:bb:ee:67:17:f0:39:54:d4:c7:d4:58:
7b:a0:b4:e4:46:6d:f0:d4:08:22:f1:33:59:02:2a:5e:93:d1:
c3:10:60:27:9d:fc:5d:e1:c5:85:b4:52:c7:5a:c7:78:1e:e7:
a3:fc:e4:e4:b3:86:86:7c:2f:2a:e7:89:67:7a:9d:d4:33:3c:
1c:4a:8d:a0:c5:3a:1d:5b:96:c4:18:7d:7f:df:9a:46:ba:7e:
48:5c:ff:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:15 2025 by rpki-client