Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa
File: ae8c8fa6-957c-379d-8e86-602baa8282b0.roa (raw, json)
Hash identifier: VPFQvCZ9nMowSTAT0r6tMzxXEKKWK3SMCGRP+v+ifEc=
Subject key identifier: FF:24:30:81:68:E7:39:7C:9E:3B:35:E7:BB:10:69:4B:E0:06:A4:BD
Certificate issuer: /CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b
Certificate serial: 010D0C9F43285848A136135DA1A6CDBD81139BA0
Authority key identifier: BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 199.4.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:13:5d:a1:a6:cd:bd:81:13:9b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=379da3be-7645-463a-ad4b-777a8f58b5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:ce:21:ac:c4:60:27:59:b6:c6:80:77:cd:
dc:18:d5:e4:f5:0f:00:fd:af:95:4c:5f:4f:2c:52:
ce:25:e5:68:3d:d5:ea:29:b0:48:63:3c:9e:6b:9e:
1b:4a:f7:8f:c2:06:a9:3c:0f:1a:c0:a5:90:0a:bb:
d0:11:0e:b5:a4:fe:d9:40:4c:bc:b9:49:bd:04:91:
4c:f0:2d:a3:49:5b:9f:33:bc:c2:bb:f8:db:24:18:
96:81:43:ae:57:2e:07:06:cb:13:6d:f7:20:17:47:
0a:20:e5:3f:41:d2:70:6b:e8:29:e1:51:e4:1b:5f:
cb:79:8a:6b:18:87:9a:08:b6:19:12:b9:6d:0f:15:
bb:80:09:fd:53:d9:b8:f5:a0:53:25:ff:72:5b:a7:
4a:ac:ca:28:3f:c3:04:af:ef:d5:2d:89:7e:f9:38:
4c:45:00:27:44:6b:28:2a:6e:51:28:6c:22:73:08:
ff:cb:89:fd:58:cd:6f:70:b8:92:bb:7e:38:34:ba:
4d:27:5d:e8:c0:d4:b9:69:0d:3c:e8:96:5f:ff:e4:
81:0b:27:c5:9b:6e:e8:1a:df:28:7b:ae:e9:42:f4:
a6:9f:7d:64:14:e2:96:b8:f8:16:e2:3d:a3:c7:33:
a8:11:92:88:11:58:fa:ab:c2:67:00:14:a6:04:da:
d6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:24:30:81:68:E7:39:7C:9E:3B:35:E7:BB:10:69:4B:E0:06:A4:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl
X509v3 Authority Key Identifier:
keyid:BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.4.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:2f:1f:e9:a7:31:97:da:d1:bd:b8:ec:b6:53:36:52:9f:1c:
ad:5e:c2:56:a0:bd:ee:42:e9:32:69:ce:b2:68:f8:81:d7:12:
51:4c:3d:e3:01:cc:3a:90:f2:7b:10:f0:65:9d:7c:73:2c:0f:
9f:c6:c3:63:c6:7b:61:19:e3:f7:58:8f:10:ea:8a:e5:74:16:
5f:77:4a:f8:fe:3d:91:05:3a:92:4e:ef:93:bb:02:ab:bc:45:
86:42:a1:c4:31:81:5c:df:f0:f9:65:c0:cc:5d:c7:e0:7b:b4:
ed:2f:d8:8c:64:18:d2:03:6a:2b:1d:87:ce:41:08:b9:be:f0:
32:6c:92:48:07:2d:62:36:32:50:47:b0:19:34:60:c9:14:f7:
69:3f:30:b4:85:bf:86:01:69:34:e9:96:b5:14:f0:6f:b0:a8:
ba:80:ce:28:b2:38:3f:a3:94:a6:71:f9:0c:5e:23:0f:64:18:
bc:a8:d5:18:76:1a:b9:b9:99:e3:db:b0:a2:4b:18:e2:d3:63:
2c:ee:fb:a4:ca:6c:4e:e5:d3:c4:13:ff:b9:cb:55:23:91:19:
32:1d:dd:4d:be:d7:17:d5:a5:98:fe:43:f6:2c:91:88:9f:0c:
5f:f6:fc:d4:9f:3d:b0:b0:7a:6e:1e:7d:7b:ca:e9:af:f8:eb:
f6:b5:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:23:45 2025 by rpki-client