Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa
File: 3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa (raw, json)
Hash identifier: 5nWuOu/shPO90cdK7dymuNpcGCagt9kS2Ao6LrR2ltw=
Subject key identifier: 1D:DF:63:B0:DE:D2:B5:0A:57:0D:D1:4D:18:06:3D:2B:26:C3:73:55
Certificate issuer: /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial: 010D0C9F4328584894A5EAE06E88E5F7D514F0B0
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa
Signing time: Sat 18 Jan 2025 02:00:38 +0000
ROA not before: Sat 18 Jan 2025 02:00:38 +0000
ROA not after: Fri 18 Apr 2025 01:00:38 +0000
asID: 40342
IP address blocks: 199.47.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:94:a5:ea:e0:6e:88:e5:f7:d5:14:f0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Validity
Not Before: Jan 18 02:00:38 2025 GMT
Not After : Apr 18 01:00:38 2025 GMT
Subject: CN=cd1e3282-a013-43b7-a1b4-ed32dcceccda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:45:b9:73:81:ce:c1:11:69:5c:d9:c1:a3:8a:
8c:30:e5:8c:1e:3e:9d:f8:ae:7e:7b:2a:f7:4e:99:
5b:f3:66:c4:7b:b5:30:1e:4d:5c:55:53:3b:2f:ed:
03:2b:7e:0a:e6:62:02:38:2f:fc:0c:9e:f7:18:0a:
44:22:0c:89:0c:1c:32:ce:d4:57:b9:e0:59:2c:3f:
f6:68:e8:bd:d3:fd:98:6e:80:cb:58:2e:30:5b:26:
7c:77:4b:27:75:40:99:1c:ea:9f:63:13:3c:a4:e1:
85:49:34:c0:13:ed:b5:ef:31:61:03:df:0d:b8:2d:
de:9a:ed:22:cf:b5:fd:bf:2b:fd:32:fc:74:a1:b0:
5a:ac:f0:01:ab:53:f0:26:40:a8:5d:4c:60:a4:e9:
7c:1b:80:43:4a:18:87:3b:29:95:08:7e:b3:14:6e:
ef:c1:d9:5b:39:48:ae:2a:40:22:70:3d:de:cd:ae:
2f:59:4a:7f:f8:4d:14:30:48:ff:04:7f:0d:4d:63:
cb:ed:fd:ca:a6:66:43:a9:4b:52:cd:26:a8:f8:90:
42:26:49:cf:69:fb:d6:ef:ba:f2:aa:23:1e:c0:1f:
be:e5:d5:b0:45:7e:9b:2b:97:1f:de:f2:f5:46:63:
68:bc:07:12:64:c8:82:62:21:c6:8b:c4:f8:44:71:
96:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DF:63:B0:DE:D2:B5:0A:57:0D:D1:4D:18:06:3D:2B:26:C3:73:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/3c020dec-3b81-3384-8f84-fc8fb8ef0865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
X509v3 Authority Key Identifier:
keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:7b:06:d8:3b:fd:0e:11:a9:08:df:08:86:1d:21:a8:4e:50:
9e:ad:20:31:6f:db:f9:96:c3:85:e0:0a:58:df:3d:28:73:c3:
83:54:39:2a:ee:97:2d:57:09:60:2d:92:10:ec:37:41:5c:b4:
01:a8:12:67:b6:27:d2:56:bb:94:16:33:85:bd:3a:06:b2:ba:
53:42:93:e0:20:16:39:4c:21:91:1a:c4:83:8a:3b:62:1b:e1:
73:20:dc:26:62:ce:68:95:8e:36:a5:aa:a4:d1:fd:b4:ee:5c:
a6:02:89:be:1b:ba:37:66:4e:60:95:d5:94:7f:e1:25:45:ae:
85:b0:0c:37:fc:4e:d5:f5:c0:c9:ff:52:f0:17:a6:22:88:bd:
fc:ff:8a:84:d0:52:f0:20:71:58:a5:1b:ad:48:68:f8:b1:1d:
9e:e2:04:c9:cc:02:f1:24:38:e9:33:cc:27:21:a2:77:0e:3f:
b0:72:ef:3d:c0:10:54:94:59:be:20:d1:15:8c:5e:fb:c3:c7:
6d:45:a7:c2:9d:15:ed:7e:ea:65:1c:40:36:91:1b:9f:36:09:
4f:1c:f5:56:78:4b:35:48:db:12:7c:71:74:4c:0d:85:6d:2d:
25:4f:c1:03:a4:e8:01:cd:e2:39:cd:8b:1f:6a:41:30:96:2b:
86:58:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:21:45 2025 by rpki-client