Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/538eaa57-d298-3f25-8222-de9e3819f175.roa
File: 538eaa57-d298-3f25-8222-de9e3819f175.roa (raw, json)
Hash identifier: P+AeafJO5jV+aXV2xuJz5FUmqqgizXIT2tWiTlVkMF8=
Subject key identifier: 8B:2F:AD:41:46:08:DC:A9:F6:1F:49:B7:5D:C0:A4:F0:9F:7C:CC:A6
Certificate issuer: /CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Certificate serial: 010D0C9F432858494E2EA6D3C9B285DCC847AA00
Authority key identifier: DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/538eaa57-d298-3f25-8222-de9e3819f175.roa
Signing time: Tue 25 Mar 2025 13:00:51 +0000
ROA not before: Tue 25 Mar 2025 13:00:51 +0000
ROA not after: Mon 23 Jun 2025 13:00:51 +0000
asID: 16796
IP address blocks: 198.169.129.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4e:2e:a6:d3:c9:b2:85:dc:c8:47:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4b04b20-09d3-4cf9-8dd0-c45ce59899d8
Validity
Not Before: Mar 25 13:00:51 2025 GMT
Not After : Jun 23 13:00:51 2025 GMT
Subject: CN=72feb4b2-f8aa-4945-928e-59d903fb21d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:21:02:36:d2:04:de:3a:9f:5c:db:fe:05:
1c:77:f4:28:d5:47:ea:44:86:08:a8:3b:16:a1:21:
05:0b:70:53:4f:32:ec:70:5c:77:3b:c5:59:9b:62:
66:92:ed:a1:fe:ca:d9:60:76:f4:ee:1e:f0:53:7f:
f6:b6:09:8d:54:f6:dc:54:72:93:b2:e2:8a:07:6e:
60:73:9e:76:cb:4e:b8:e8:41:8e:d7:17:9d:12:f9:
8c:bc:6d:77:ea:8a:a1:f8:5a:bd:0f:c2:f9:6b:3a:
1a:37:31:49:3f:92:87:10:68:f5:71:fb:0d:22:cb:
2b:fa:49:a1:b7:ea:9f:28:74:19:4b:71:f4:8a:c8:
63:6d:bf:67:12:8c:b3:2f:5a:e6:23:71:10:2a:df:
89:d0:af:ba:05:17:62:d2:8e:27:da:b1:ad:ee:9c:
da:37:3c:5f:61:3a:0d:e3:ca:1e:8a:42:4f:a8:a6:
79:9f:ea:66:fd:22:79:49:45:1b:2e:5f:52:a4:d5:
82:7d:29:e9:0b:e4:4d:58:5a:8d:a6:80:0e:25:fd:
f1:d9:5c:3d:ae:50:26:82:c6:76:d3:b9:b4:05:b2:
b7:72:87:8e:e8:93:4d:74:4a:9d:8d:3d:af:46:1d:
aa:d7:43:41:70:9d:3b:32:81:22:b0:2b:8d:ca:c1:
28:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2F:AD:41:46:08:DC:A9:F6:1F:49:B7:5D:C0:A4:F0:9F:7C:CC:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/538eaa57-d298-3f25-8222-de9e3819f175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.crl
X509v3 Authority Key Identifier:
keyid:DA:96:82:D6:51:FE:D3:B5:E0:41:CF:71:D6:E6:9F:AC:E0:2E:99:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4b04b20-09d3-4cf9-8dd0-c45ce59899d8.cer
sbgp-ipAddrBlock: critical
IPv4:
198.169.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:a8:9f:47:ce:49:75:bd:1f:c6:9a:57:04:e5:f4:fa:20:e9:
e9:9e:ae:c1:9a:e8:96:4e:c9:c1:34:4c:d2:5b:0b:53:e8:7d:
0a:58:f1:b3:1c:04:9e:ec:b3:cb:ef:99:9d:7a:73:04:9c:2a:
0d:c4:59:54:2e:e6:c1:1a:c9:a1:2a:9a:76:7c:ee:9f:de:8a:
42:3d:35:91:4b:06:45:dd:85:e3:92:c8:3d:c5:03:b4:f7:11:
88:e0:95:2f:4c:24:52:cc:07:cb:47:08:1c:02:df:2a:7b:e0:
9e:1e:cd:ed:14:06:c4:b7:d9:54:19:44:fd:a9:94:92:83:f9:
63:fe:ce:94:be:82:54:c6:38:53:74:e0:05:71:31:90:85:b5:
23:bd:0c:08:cb:cf:0e:91:e4:59:f2:74:d0:22:2e:36:4c:d4:
10:85:df:08:23:41:7a:b5:8e:d7:41:8f:fa:85:3a:88:f7:ae:
e9:7e:08:d0:cf:75:df:76:39:b6:e3:d0:55:e5:fd:6d:59:c9:
6d:bf:64:da:f4:67:e7:de:80:56:31:fe:12:29:69:99:98:53:
cd:9c:e1:74:c7:ee:52:47:5a:55:69:73:e6:3a:d0:a9:9e:ad:
53:28:33:01:03:8c:10:67:d8:1b:87:27:a1:f6:14:64:75:75:
8d:34:02:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:05 2025 by rpki-client