Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa
File: f0aee5d1-d44c-3566-b71f-05ca82efac32.roa (raw, json)
Hash identifier: zsmKEoD3LwCYpfox7+ODW9Pgx1cre3MH/WJdghFjNTg=
Subject key identifier: CC:0B:FA:2E:D5:5F:F0:88:91:10:15:3E:2F:F0:B1:42:1B:E9:54:6C
Certificate issuer: /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial: 010D0C9F4328584930DE634A99F317E38D3ABC40
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 30607
IP address blocks: 198.41.12.0/23 maxlen: 23
198.41.12.0/24 maxlen: 24
198.41.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:63:4a:99:f3:17:e3:8d:3a:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=2c21f56a-8206-4e0f-bbb4-f22532df5b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:a7:8e:53:4e:2c:fa:05:e0:f2:37:c4:ab:
56:28:c6:f6:78:8f:96:1a:7a:cb:ac:f0:4e:5a:2c:
c6:29:5d:78:c0:c1:12:23:6c:e7:9c:95:d5:dc:dd:
8c:d7:9b:a6:84:49:72:8f:69:a2:25:08:0e:1b:67:
8b:e9:5b:34:fa:74:4d:a8:02:a7:50:0e:c5:c9:9a:
1b:3a:80:99:5b:9c:7a:7d:4c:2e:03:84:54:b2:5e:
49:8a:ea:b7:80:da:0b:70:a6:1e:d9:57:0e:7b:30:
85:c7:24:38:9b:3c:23:9a:88:54:f9:fd:08:20:9a:
c0:30:b3:ca:a2:85:5a:79:58:a7:d9:d3:90:cc:20:
0a:85:bc:77:8e:c4:f0:ef:15:e4:6d:7a:49:57:f9:
22:49:97:88:2b:c1:6e:77:20:ed:0a:2e:f8:2f:5e:
c7:85:97:c4:47:3c:95:38:9f:b5:ef:d4:7b:f8:71:
6d:0d:79:32:bf:fe:7f:ad:b5:cf:de:74:dd:f5:7e:
a6:64:35:f5:ca:39:2b:3b:0e:0d:70:34:c1:af:a3:
90:b2:25:ee:82:1e:8f:0d:ba:66:d4:5b:27:a9:59:
a5:88:1c:d5:fb:2a:24:21:24:84:a3:df:8f:94:6d:
13:f7:2b:00:4c:7e:3e:e3:0b:1f:9f:33:a1:d2:3c:
ac:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0B:FA:2E:D5:5F:F0:88:91:10:15:3E:2F:F0:B1:42:1B:E9:54:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/f0aee5d1-d44c-3566-b71f-05ca82efac32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
X509v3 Authority Key Identifier:
keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.12.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:9b:72:0e:55:23:34:e2:a9:d9:56:3a:9a:8d:64:de:70:7f:
83:bf:7f:55:2b:1b:1c:45:ba:1e:fc:f9:c5:c8:c9:05:8c:f6:
68:1d:a0:f3:4b:14:ad:96:bf:93:90:70:5f:93:04:35:f4:61:
92:fe:b9:0a:eb:a1:25:47:94:4e:52:a2:07:7a:33:01:ca:d9:
0c:d2:23:0c:2d:c0:d4:07:72:85:9b:31:55:0a:24:89:92:e5:
ee:d1:0c:bd:a5:9f:ce:f9:42:80:96:13:ec:f6:54:b8:ef:75:
7c:d4:41:b4:4a:7a:fd:9b:34:a6:2b:e4:ec:33:94:23:0d:38:
3b:96:9d:97:e4:26:8b:60:59:0a:2f:50:49:00:01:18:1b:5c:
82:4e:1f:d1:53:54:cd:e2:5b:72:a6:8f:d5:8e:a2:de:0f:34:
36:f7:c6:cb:66:a7:bd:ed:83:22:94:c2:1a:0d:95:2d:61:12:
c7:31:a7:64:4b:b5:61:dc:07:a2:0d:b7:c5:2c:a9:24:f8:ae:
14:80:7b:80:22:b8:ae:71:6d:d7:3b:5f:3f:5a:86:cc:2d:d1:
b7:32:30:36:cf:2d:95:3f:db:45:fa:ce:26:40:d7:ae:0a:be:
34:b4:89:54:d8:23:07:ce:0e:62:20:37:03:95:0f:7d:48:37:
7b:ff:af:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:58 2025 by rpki-client