Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa
File: 5b5be480-44ed-31ee-80f8-4d078a62e541.roa (raw, json)
Hash identifier: qpCnyDElPPrpgKqPRtXFI3GwSUqiuKx9D7zjRQpw2bc=
Subject key identifier: 3F:91:B9:C4:0F:85:18:0A:54:A4:86:31:D6:58:C1:6C:AF:F5:BB:20
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F432858493ED3D682270B1E8FBA126000
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 14061
IP address blocks: 199.4.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d6:82:27:0b:1e:8f:ba:12:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=a6cc1972-8219-412a-8993-9f701fe17485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:3c:b4:d8:5f:f5:43:73:f5:a9:20:a2:02:
8f:97:c9:5d:5e:d1:c1:dd:5f:e4:76:1c:3e:d0:8f:
b2:81:5b:a2:2d:bb:02:c9:65:94:c4:35:9f:4a:28:
14:19:22:31:99:5e:79:e2:21:bc:aa:a0:54:58:cd:
de:c2:c6:b5:2b:f2:d6:27:79:7b:96:ae:12:48:77:
26:be:45:5b:ff:2c:88:0c:b8:0d:91:f1:4a:3d:fa:
d4:5b:4c:b8:1e:e0:db:f6:cf:c1:b9:a4:81:73:e9:
06:83:5a:b6:e7:05:3c:71:82:d6:e2:aa:38:a0:f0:
7a:06:d7:54:63:a2:f2:56:59:18:33:80:27:d0:9f:
9c:9e:be:30:d0:0c:f2:21:c8:6b:2f:75:24:f7:b8:
3c:c6:90:21:7d:ca:a9:01:2a:02:8f:62:f4:7b:b5:
aa:0c:96:11:9f:83:e6:12:6d:d4:14:bd:39:6f:ba:
27:7c:b0:7a:4b:a8:28:cb:f2:d8:a6:3c:8b:d1:cb:
29:70:0e:45:55:5e:3f:ca:c5:10:dc:60:f6:cb:ab:
c0:d6:4a:c0:d5:a4:82:4e:cd:e5:b3:2c:a5:3c:3f:
10:cb:99:f5:03:95:78:da:0c:60:9e:56:55:bb:59:
3a:47:74:7b:01:da:05:13:1e:63:87:71:84:e8:6b:
51:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:91:B9:C4:0F:85:18:0A:54:A4:86:31:D6:58:C1:6C:AF:F5:BB:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/5b5be480-44ed-31ee-80f8-4d078a62e541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
199.4.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:1e:7f:77:3a:f8:f1:34:4e:81:0f:b4:f7:91:0e:a9:c4:87:
a3:3b:dc:45:b7:6a:0b:49:58:57:9f:0c:c4:48:ce:1d:c3:d9:
be:b6:c2:21:72:fd:66:aa:54:d9:c8:a5:4f:a2:55:2a:75:1d:
08:5a:3e:be:cf:41:43:7a:1e:28:3d:44:e6:56:52:6d:90:2f:
6c:9f:08:ae:bc:2b:71:60:44:3f:7e:a0:fd:e9:e3:f8:b6:a3:
9a:7a:84:3e:00:ca:8a:81:d7:b7:1f:e0:a4:a3:b2:97:2b:bb:
c9:3d:ff:b5:53:24:dc:33:a7:f2:a0:d6:4f:cc:d0:df:d2:db:
51:a3:09:6d:f9:b4:fc:76:03:0a:fe:94:b4:f2:11:c6:66:3f:
aa:40:df:b5:b2:4b:24:11:85:a8:79:dd:f1:50:73:11:e1:ae:
04:25:fe:53:89:e9:f1:47:43:a9:b7:79:84:5f:fd:cb:13:9f:
51:99:92:55:33:24:4e:6b:fe:38:9c:5d:a8:da:56:02:fe:e8:
1c:39:91:bd:a2:b8:b4:19:0b:cc:1d:72:e5:32:16:08:c6:bd:
d2:e0:b1:bc:66:2c:47:24:40:d2:61:0a:c2:98:69:19:5f:b4:
ac:b5:4b:03:df:77:36:56:36:25:7a:63:54:55:c6:9b:df:1f:
7c:ec:fc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:21:53 2025 by rpki-client