Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84bd1f70-a34d-3c04-a045-12e9f7b06135.roa
File: 84bd1f70-a34d-3c04-a045-12e9f7b06135.roa (raw, json)
Hash identifier: 7TR4/cl8T9BtuXmy8sLDJ7cEk3sFDlnI7z5KUzVnEKk=
Subject key identifier: D4:33:9B:77:06:FE:3A:9B:A2:F6:AC:7A:1A:4A:4E:98:4A:B4:EC:83
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F43285848B1F62DE9BF2EEC8F2FB6B500
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84bd1f70-a34d-3c04-a045-12e9f7b06135.roa
Signing time: Tue 28 Jan 2025 14:00:52 +0000
ROA not before: Tue 28 Jan 2025 14:00:52 +0000
ROA not after: Mon 28 Apr 2025 13:00:52 +0000
asID: 1239
IP address blocks: 198.16.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b1:f6:2d:e9:bf:2e:ec:8f:2f:b6:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Jan 28 14:00:52 2025 GMT
Not After : Apr 28 13:00:52 2025 GMT
Subject: CN=24ba5d12-52e6-444e-a94b-9ce54fc9c471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:5f:b7:7d:cf:26:7e:1d:6d:46:ed:f1:22:
8d:70:48:2c:a0:26:1d:49:e2:fb:32:f0:06:16:6c:
83:98:55:7a:eb:d4:a3:ec:df:3d:00:f1:01:84:c7:
80:d1:32:d3:9b:10:b7:1d:a4:fd:d9:ea:9b:24:22:
11:28:7c:47:55:df:34:28:40:4b:81:b4:69:b7:53:
14:54:fd:30:66:a8:31:4e:08:d6:f2:54:21:a9:d0:
9e:bf:65:6a:51:dc:d2:d9:b5:83:12:a8:8c:bd:ec:
3e:b1:45:15:4e:00:19:a5:4b:a3:1b:31:01:8e:78:
39:02:a5:cd:0e:e0:f8:45:1d:f6:5b:6b:89:27:67:
fb:7f:f7:c7:cb:bc:3c:5d:b5:cd:53:cc:0b:c0:51:
c6:a6:d5:4c:0b:10:de:50:81:af:49:dc:8a:6e:d2:
06:97:21:4d:69:ed:93:1c:ca:d2:15:f2:9e:8c:4d:
88:69:a8:a8:7b:4e:76:7d:61:1b:0a:87:0e:92:51:
15:2e:5a:a8:80:90:f1:96:4d:a8:5d:e7:b3:fc:37:
72:42:57:c7:68:4a:42:67:00:d4:b7:0d:9b:e9:eb:
50:ea:d5:da:7d:86:a0:24:2d:41:7d:3d:af:ee:7a:
ee:c7:6e:7a:36:8e:56:ae:80:81:ae:b2:35:2a:66:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:33:9B:77:06:FE:3A:9B:A2:F6:AC:7A:1A:4A:4E:98:4A:B4:EC:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/84bd1f70-a34d-3c04-a045-12e9f7b06135.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
198.16.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:25:b2:1b:cb:b2:b5:1a:ab:ea:74:ee:5a:00:77:fe:f8:27:
cd:5a:ff:00:dd:c6:b5:74:94:8f:1b:78:ef:9e:b7:61:39:d8:
7e:c2:75:dd:4b:66:0a:08:80:88:f2:39:a8:bf:1e:59:51:ef:
81:c2:39:44:8b:f5:6c:fe:e2:d2:75:fb:7b:de:2f:93:e5:c1:
5b:43:4b:85:6e:a4:57:15:43:93:69:2c:2f:d2:7b:a2:6f:38:
c9:32:62:71:dc:da:a8:c8:5f:78:02:1f:9d:b3:4e:a6:50:43:
cc:b3:cb:8b:f9:52:f6:c3:66:d3:10:1b:4e:fe:a7:aa:b7:1e:
15:86:39:f6:8a:05:a6:1e:90:9e:fc:8d:bb:f3:16:07:bc:66:
08:64:78:0c:ab:05:24:9f:e7:a0:2b:da:39:44:98:39:33:4c:
a1:8b:5c:21:c0:88:f5:fb:b8:96:f5:f7:9f:87:9a:8c:b7:14:
20:38:45:be:b2:74:05:c0:f9:28:ea:d3:4e:25:c5:2d:d3:47:
4c:73:2c:cb:6a:7a:a8:99:d5:1c:63:7c:21:07:7a:24:b8:9c:
06:8a:f5:2b:e3:c5:be:9e:dc:4a:28:81:ce:bd:70:84:68:bb:
ea:9a:bd:39:9a:9a:e0:26:85:bb:cf:72:5e:4d:7b:8b:11:0b:
2f:f8:5c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:26:41 2025 by rpki-client