Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe5d0cca-7abd-4a87-9adc-3fdd7cf8eadb/0623c347-54aa-3bf8-bc9d-e2b5aad7d63e.roa
File: 0623c347-54aa-3bf8-bc9d-e2b5aad7d63e.roa (raw, json)
Hash identifier: pxd5pv2WlnBrjb0o4FEnZiVIFkwGc4wkKYQPlzl2tiI=
Subject key identifier: D7:56:4A:A5:4F:52:C0:08:61:E8:69:53:DE:E4:80:D8:B3:2A:81:B3
Certificate issuer: /CN=fe5d0cca-7abd-4a87-9adc-3fdd7cf8eadb
Certificate serial: 010D0C9F43285848B8F0C8223123C3C5665D78E0
Authority key identifier: 61:57:07:F9:4A:13:79:D8:3B:82:E1:B2:69:E2:F9:DE:FE:8D:99:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe5d0cca-7abd-4a87-9adc-3fdd7cf8eadb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe5d0cca-7abd-4a87-9adc-3fdd7cf8eadb/0623c347-54aa-3bf8-bc9d-e2b5aad7d63e.roa
Signing time: Fri 31 Jan 2025 02:00:39 +0000
ROA not before: Fri 31 Jan 2025 02:00:39 +0000
ROA not after: Thu 01 May 2025 01:00:39 +0000
asID: 394446
IP address blocks: 198.245.193.0/24 maxlen: 24
198.245.194.0/23 maxlen: 24
198.245.196.0/23 maxlen: 24
198.245.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b8:f0:c8:22:31:23:c3:c5:66:5d:78:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d0cca-7abd-4a87-9adc-3fdd7cf8eadb
Validity
Not Before: Jan 31 02:00:39 2025 GMT
Not After : May 1 01:00:39 2025 GMT
Subject: CN=8c1f21bc-e427-4494-b58a-3d70db608af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:16:29:3c:0d:e6:4e:98:70:9e:a3:f5:3a:a0:
57:68:3e:75:4b:80:8a:fe:ff:9b:09:94:ce:b4:61:
5a:7e:c2:32:be:d5:45:4f:80:d8:c0:6f:cf:d0:71:
eb:9a:e6:13:40:f4:2a:54:ae:75:12:e1:97:84:87:
58:63:1a:be:dc:9a:cc:b8:5a:fc:45:a3:65:77:4e:
20:8f:a8:97:04:b2:72:df:21:a6:c4:c1:47:51:fa:
7e:51:c2:9b:9c:75:91:84:9e:7e:60:d8:55:d7:c6:
41:77:a6:1a:12:39:de:b5:9c:54:39:7f:84:9a:e0:
8f:7b:c2:31:c7:34:75:e7:92:5d:ff:fa:24:cf:ef:
95:14:2f:52:db:18:e7:bb:5f:f8:cc:88:20:ed:24:
23:77:17:b7:75:30:06:bd:88:ba:b5:5d:cf:c4:ae:
53:c4:f8:97:7a:71:cc:05:69:db:52:8a:82:a1:46:
a0:26:d4:43:9c:cf:50:37:dc:94:22:41:18:2e:fd:
40:b9:db:49:cc:3a:0d:c6:ab:21:28:19:0a:a3:fa:
4a:22:ee:49:1b:b6:5e:93:27:eb:95:dc:eb:53:26:
5f:8d:b2:02:d9:38:f8:06:c5:0c:25:61:b1:7c:12:
08:19:93:85:e6:a0:95:7d:6c:0c:0c:0b:79:1f:66:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:56:4A:A5:4F:52:C0:08:61:E8:69:53:DE:E4:80:D8:B3:2A:81:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe5d0cca-7abd-4a87-9adc-3fdd7cf8eadb/0623c347-54aa-3bf8-bc9d-e2b5aad7d63e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe5d0cca-7abd-4a87-9adc-3fdd7cf8eadb/fe5d0cca-7abd-4a87-9adc-3fdd7cf8eadb.crl
X509v3 Authority Key Identifier:
keyid:61:57:07:F9:4A:13:79:D8:3B:82:E1:B2:69:E2:F9:DE:FE:8D:99:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe5d0cca-7abd-4a87-9adc-3fdd7cf8eadb.cer
sbgp-ipAddrBlock: critical
IPv4:
198.245.193.0-198.245.198.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:0a:0b:2e:49:24:a3:7c:39:5d:19:40:74:00:a7:c8:8e:cb:
a2:e7:31:5c:da:86:76:fb:67:e1:26:7a:ec:d7:b9:ee:ee:98:
f0:c4:b7:62:c3:e8:c3:2a:d2:76:33:2d:86:bc:ed:71:c0:ed:
d9:fb:d3:d3:35:fa:27:53:9b:1d:8f:ed:f5:3e:f3:d6:10:f0:
b9:9f:f7:ef:f6:fe:48:32:14:5c:85:e3:7b:4d:d9:8f:38:1d:
87:ef:ba:53:ab:54:db:b1:9d:75:d9:38:9d:61:9d:14:c9:81:
aa:ec:54:9b:fb:1a:01:94:f6:dd:37:f2:57:c6:cb:34:10:cb:
22:8a:c8:27:b5:f1:16:eb:51:57:7a:65:8f:43:89:ca:dc:e8:
7f:e0:78:16:e2:58:cf:8c:bb:a8:0f:16:5c:30:da:4e:49:57:
4b:6c:fc:c9:84:26:fe:41:9e:59:53:8b:ba:ef:cf:37:f2:9d:
24:2b:be:96:95:19:a7:d5:67:f6:13:e1:57:01:a6:52:5a:42:
15:3f:3e:df:0e:99:9b:b9:82:90:27:81:e3:da:ff:33:52:61:
d7:5a:f8:4b:28:a4:0f:e0:92:60:83:d9:c6:22:c8:e5:b1:e4:
ee:53:28:0f:db:96:fe:f7:12:ad:ef:13:40:6b:08:a2:a8:da:
00:9e:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:13 2025 by rpki-client