Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/5df83665-f02d-346d-a6b3-5c783e573c36.roa
File: 5df83665-f02d-346d-a6b3-5c783e573c36.roa (raw, json)
Hash identifier: gfNCxfKitsaztpzBZxjWA0qidBJyFH/x6F9Y6pPEGvg=
Subject key identifier: 5B:37:60:56:85:4C:66:B8:BA:BB:03:79:A6:CC:8C:68:BE:1D:AB:38
Certificate issuer: /CN=69036fae-75b3-45ce-a305-23f9913eccea
Certificate serial: 010D0C9F43285848E59BC125FB46BA1E221B1E80
Authority key identifier: CB:D6:6E:5B:1D:2E:A6:E2:65:A3:7D:C4:71:44:3F:D7:05:48:C0:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/5df83665-f02d-346d-a6b3-5c783e573c36.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 2635
IP address blocks: 199.16.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:c1:25:fb:46:ba:1e:22:1b:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69036fae-75b3-45ce-a305-23f9913eccea
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=4fdbc5ea-9ab9-4f74-b437-56d4ab5ee41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a3:15:74:05:fe:bf:50:68:c7:5c:ba:ea:86:
52:15:1b:40:2e:5f:26:e4:91:39:3b:09:72:15:76:
07:84:08:67:c3:4d:b5:c2:df:ce:7e:b5:96:fa:d3:
b1:d8:e8:cf:74:45:04:ae:43:5f:bd:af:4b:0e:f0:
18:28:a1:9d:a1:aa:cf:1a:bb:a0:f4:a2:53:9f:a4:
38:ed:09:3f:fe:57:fc:e3:c6:43:f8:74:4d:82:8a:
70:67:99:b5:60:7b:85:7f:84:cd:0c:4a:26:36:9f:
72:dd:b9:ff:e7:88:ad:20:6c:8e:cd:0c:78:4a:d9:
6c:27:30:81:61:66:0d:00:9a:d9:0a:a5:2f:21:b8:
ca:cd:94:f1:02:0c:4c:b4:7d:8c:8d:8b:8f:86:43:
95:fa:a4:77:36:9d:73:4e:5b:55:cd:83:0a:43:a8:
ab:6e:db:90:05:a9:57:48:3a:23:9f:7e:70:09:9a:
e7:a3:d2:78:b9:dd:d2:df:bf:8b:54:77:96:3c:d8:
ef:c1:fe:ba:d1:cc:b8:ef:aa:4f:8c:88:05:26:06:
d7:f2:82:d3:89:7b:72:8b:6b:d2:3a:c0:a8:85:a9:
39:d3:68:1b:ab:4b:23:a4:c1:c0:fe:7e:fc:3c:5e:
4d:52:5d:6e:b6:dc:cc:8d:ac:7d:11:e2:7d:19:6a:
09:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:37:60:56:85:4C:66:B8:BA:BB:03:79:A6:CC:8C:68:BE:1D:AB:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/5df83665-f02d-346d-a6b3-5c783e573c36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea/69036fae-75b3-45ce-a305-23f9913eccea.crl
X509v3 Authority Key Identifier:
keyid:CB:D6:6E:5B:1D:2E:A6:E2:65:A3:7D:C4:71:44:3F:D7:05:48:C0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69036fae-75b3-45ce-a305-23f9913eccea.cer
sbgp-ipAddrBlock: critical
IPv4:
199.16.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:8b:01:57:81:40:e5:53:84:b4:08:70:27:53:b6:e4:06:7f:
ff:29:e8:9b:a6:3f:e8:85:1d:b9:bf:b8:7b:53:e7:c1:5a:4e:
15:7f:e3:4e:7e:29:89:30:d6:91:d9:b7:04:7e:8e:e9:19:25:
20:8b:e9:b5:d6:fa:bd:45:f3:c6:98:f7:71:9f:fb:6b:22:7d:
24:8e:0e:7e:1e:e3:fb:38:1e:30:40:b9:19:fa:79:03:6a:78:
0b:d5:74:8e:54:ac:f8:7d:18:bf:e7:c9:21:14:a8:70:d0:3f:
c0:19:a8:93:7d:21:7c:af:2f:fb:9c:13:4c:23:64:51:14:5f:
19:dc:60:05:9b:76:1a:d3:3e:30:80:66:42:28:f8:e8:50:ba:
5d:44:a9:a1:f9:99:c3:ff:6d:27:01:41:36:b6:32:1b:8f:f2:
9d:cd:00:5d:f1:ec:63:46:30:56:10:f8:df:63:72:5d:df:08:
9c:d9:cd:0a:d9:33:9e:dc:8f:35:59:2c:d7:41:f3:51:06:b9:
ac:d7:06:2e:c9:0b:1a:4f:f8:cf:63:24:79:b3:40:13:55:51:
e6:6c:88:c8:54:b5:3b:f6:e7:06:3e:65:71:ec:d6:48:a0:d4:
37:39:0f:b2:1d:fd:94:31:39:e6:28:d9:de:25:63:62:ea:3f:
2a:af:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 11:32:56 2025 by rpki-client