Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5e5970c0-f1b7-3996-b82b-51c865473a6f.roa
File: 5e5970c0-f1b7-3996-b82b-51c865473a6f.roa (raw, json)
Hash identifier: nOYeU5QOVGK/2BCp3r0qdLzPKY3UWzCPJVl/smzPB64=
Subject key identifier: A0:A6:98:DE:15:41:F6:CE:5B:35:83:88:23:8B:91:DB:4B:A4:CD:F3
Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial: 010D0C9F43285848ECF2D3F64288A5DBC0356E80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5e5970c0-f1b7-3996-b82b-51c865473a6f.roa
Signing time: Tue 18 Feb 2025 17:06:56 +0000
ROA not before: Tue 18 Feb 2025 17:06:56 +0000
ROA not after: Mon 19 May 2025 16:06:56 +0000
asID: 5769
IP address blocks: 199.7.156.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:f2:d3:f6:42:88:a5:db:c0:35:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Validity
Not Before: Feb 18 17:06:56 2025 GMT
Not After : May 19 16:06:56 2025 GMT
Subject: CN=9251f21b-7dfd-4ca3-b857-1e42f31c011c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:c9:a3:5d:ce:fb:a6:0b:ec:87:82:9c:bc:
86:b7:f5:cb:7b:73:49:d4:37:2e:2d:96:78:e5:83:
e6:b3:9a:21:8f:40:46:e4:38:31:58:72:20:31:c3:
61:2c:2f:79:8e:86:5b:40:0b:09:c1:a6:40:a1:1c:
e7:cf:55:bc:9a:5f:ed:c0:9a:59:8c:08:13:bb:c7:
ad:b2:fd:8c:1a:bf:38:67:98:dd:3b:f8:fc:e1:46:
91:05:97:85:eb:3c:18:15:a3:91:39:20:a4:fa:9e:
8e:c8:91:9d:e9:14:2b:e3:a0:53:6c:59:28:37:6f:
7f:64:e7:4f:95:12:61:48:c2:6e:bf:0b:68:53:6a:
8b:55:1c:98:d8:04:c9:95:da:67:38:b2:46:c5:ba:
68:3e:fc:3d:b2:6b:87:cb:af:d5:f5:03:84:9f:22:
e6:c3:0c:15:1d:95:83:58:c5:15:0f:47:d4:f9:65:
45:a0:e4:d7:f3:bc:0c:8c:b5:48:ef:8a:e9:31:9c:
45:c7:29:4a:71:4a:50:f0:4a:31:ac:e4:86:30:30:
12:55:91:89:b2:63:d3:c4:fc:3d:72:cd:f6:48:69:
5a:4c:e7:cb:7b:d6:af:a7:5f:90:27:92:19:89:80:
01:24:1a:6d:a9:37:80:a7:65:cf:02:e4:d0:c8:34:
55:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A6:98:DE:15:41:F6:CE:5B:35:83:88:23:8B:91:DB:4B:A4:CD:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/5e5970c0-f1b7-3996-b82b-51c865473a6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
X509v3 Authority Key Identifier:
keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:5f:80:76:15:50:25:86:82:ea:ee:4a:e8:df:01:04:ea:be:
99:4f:4e:bb:47:31:26:e5:f8:dd:9a:23:91:fc:87:3d:cb:d7:
0b:5a:3a:d7:df:c9:2c:d4:2e:22:e2:12:13:f1:46:52:0a:03:
a0:7d:b6:78:05:78:a2:46:80:f1:ed:31:54:a1:34:d0:b2:11:
08:8f:af:c7:61:d2:f9:5e:37:f0:4b:7b:68:45:63:80:ee:db:
25:2b:15:55:69:a1:cb:63:45:d1:76:74:e4:fd:c5:3c:fd:3c:
ef:6b:07:32:f8:39:c2:95:9a:5b:e9:40:d8:70:26:72:f4:ea:
52:fe:25:b3:66:12:e4:4a:5f:cb:4f:01:85:71:f0:29:2d:26:
76:c2:e4:52:fb:11:df:96:7b:fd:ea:64:14:cb:ae:40:08:37:
9e:98:7e:df:4f:ca:89:1d:4d:58:9c:5b:89:ff:6c:e8:f6:15:
06:17:7c:1c:b5:90:f8:22:d7:08:21:e5:6b:d4:86:b2:12:35:
b0:d0:cf:8d:c2:58:56:20:f9:6e:d7:d5:1c:8e:7e:58:c6:ca:
03:9c:2a:99:61:c3:14:0e:04:09:19:da:6c:13:2c:29:c8:0d:
c6:51:8f:db:ad:48:a7:93:53:4d:e3:f9:3b:5c:4b:b4:1d:4f:
15:1d:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:57 2025 by rpki-client