Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3e5f7689-0ac5-3013-a3be-588929f3eeac.roa
File: 3e5f7689-0ac5-3013-a3be-588929f3eeac.roa (raw, json)
Hash identifier: 92XMi97tqgUMMEyj+rBOKzykYOSZk5iH/LhWPngnsPc=
Subject key identifier: 64:00:DF:25:A8:4E:21:14:50:7D:1A:BD:7A:DD:28:7A:4A:88:38:89
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F65BDE6F87BAEE03B8412900
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3e5f7689-0ac5-3013-a3be-588929f3eeac.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 4760
IP address blocks: 205.252.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:de:6f:87:ba:ee:03:b8:41:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=427119db-4410-42ee-91b2-ed10300ada76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:86:34:10:e2:81:08:23:ef:d2:09:8e:e5:38:
79:54:a4:b0:7b:e8:9a:0c:f0:cf:c9:d2:a8:ce:ff:
6e:96:7f:48:66:20:a7:3a:9c:db:ab:04:b7:02:ef:
49:9b:4d:83:58:c9:c7:86:c3:55:07:7c:dd:85:6a:
d0:67:07:69:34:20:1b:a0:6e:58:58:da:c0:bd:2c:
08:64:9b:c5:7b:1c:96:4b:c4:32:12:fd:10:f6:89:
ee:bf:9b:7e:9f:80:9e:f1:06:9b:b2:43:c9:76:5d:
3f:74:f5:01:7f:40:5b:00:2d:b3:f9:57:c1:8a:1f:
40:4c:f7:6f:44:98:98:d3:d7:65:f0:65:53:3e:c4:
24:07:74:62:a6:8f:36:42:c5:95:63:a0:15:17:a2:
eb:5b:9a:ed:85:0d:b2:95:ad:db:fd:f4:42:11:20:
6a:23:b5:43:10:51:21:2b:f3:cc:8f:d0:1c:39:ec:
62:c4:6c:3f:4d:43:cf:95:19:1c:82:42:74:a5:84:
4e:0d:72:ca:97:d7:10:49:a3:0a:68:6c:6b:b5:f6:
06:8b:e5:49:9b:eb:1f:8f:b5:0b:3b:43:bc:f2:e2:
32:75:af:59:2b:c7:69:d4:b0:1f:58:61:97:d5:fe:
d7:e1:d4:58:46:0b:35:31:f0:08:c5:e7:87:54:d6:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:DF:25:A8:4E:21:14:50:7D:1A:BD:7A:DD:28:7A:4A:88:38:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3e5f7689-0ac5-3013-a3be-588929f3eeac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
205.252.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:66:ac:57:29:a4:4a:df:43:0a:f7:f4:88:4e:c0:aa:69:7f:
fc:ee:58:8c:05:aa:2f:c8:fb:03:1f:01:65:b3:4d:fc:cd:ad:
78:97:62:7f:81:cf:fb:c2:24:38:44:a7:ab:cc:ce:2b:a4:5a:
7b:1d:08:45:bf:46:ab:8b:b0:11:5a:da:58:37:8a:60:e6:62:
40:64:0b:26:ea:cf:6a:3c:a5:61:92:5b:99:e1:14:96:20:a6:
92:fb:70:cd:fb:ea:bd:f4:ec:0b:b7:b1:78:79:31:2e:d2:ad:
65:ac:ba:bc:9d:37:7a:17:56:aa:e8:b9:74:ba:9e:30:7d:a2:
d2:c7:c7:72:8f:5e:6d:b7:81:cb:aa:e8:05:7b:80:6e:a3:10:
a8:f2:6f:6e:7b:26:d7:a6:e7:26:c8:b1:d8:e7:d4:6f:7d:9c:
d7:40:0a:e1:d1:cf:4f:89:91:02:a1:10:ac:a6:3d:41:8a:f9:
12:8d:eb:41:65:47:8c:d2:2e:a4:49:b3:0d:c9:a8:27:0e:32:
b1:ac:84:b2:a2:bb:8e:05:b9:3c:cf:0f:c7:4d:b9:cf:ed:15:
80:43:c6:64:2c:44:f4:ae:ba:ad:0b:23:2a:eb:92:3b:3f:f0:
db:3d:5e:d2:47:4b:4b:57:45:db:04:18:e4:95:e6:45:2d:8c:
d2:a4:1f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:49 2025 by rpki-client