Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/7db215e9-f5af-39a6-97d5-14c7c17d9136.roa
File: 7db215e9-f5af-39a6-97d5-14c7c17d9136.roa (raw, json)
Hash identifier: fj+hJDDyQl/XXFLZSS8W26W0hmSmUYyVYkAQkHqNqtg=
Subject key identifier: 6B:2C:55:32:DD:10:66:B6:8E:A3:A9:71:81:93:CE:22:A9:72:4F:2F
Certificate issuer: /CN=fbe88551-e36f-4364-ac40-a262166c72ad
Certificate serial: 010D0C9F432858491246B55A938C321C4028AA2C
Authority key identifier: A1:4D:9B:84:F4:D6:87:5C:4D:0C:56:6E:8D:D4:C8:64:4B:C8:75:4D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/7db215e9-f5af-39a6-97d5-14c7c17d9136.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 63435
IP address blocks: 199.58.28.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:b5:5a:93:8c:32:1c:40:28:aa:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbe88551-e36f-4364-ac40-a262166c72ad
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=f1d1a04b-9d22-49e3-b4ba-047260f2cd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f1:55:48:b5:ae:6c:16:28:b4:42:ec:09:69:
df:65:1f:ea:ac:96:7f:3f:81:ec:ba:30:43:97:7a:
cb:a9:17:c4:3b:f8:af:18:22:68:11:2d:a2:14:8a:
4a:9a:26:40:42:2b:48:31:ba:79:4f:9a:dc:2a:94:
81:7a:79:d7:6b:04:31:c4:77:80:28:7d:40:81:d1:
64:4d:aa:99:2f:6d:71:5e:c1:f4:9f:b2:f9:1a:5e:
cb:84:b3:23:da:78:21:9c:ff:4c:cd:c4:03:df:c0:
10:7f:76:db:5f:4f:97:0b:45:8f:0a:ea:8a:19:b9:
c9:76:4b:22:7b:20:a6:33:88:b5:8a:0c:c3:b3:48:
e2:d3:87:96:05:7c:4c:69:cc:4b:fb:1a:ca:bc:21:
45:3a:f2:77:aa:24:72:e8:b2:bb:3b:a0:24:c5:43:
4c:97:72:86:83:97:e5:75:a2:6d:43:6d:6c:38:de:
b9:7d:2f:74:b3:a4:97:1a:59:2f:d2:68:ca:5f:52:
d8:66:13:35:f3:98:7f:39:15:7e:0a:68:f0:c0:3e:
74:15:2b:5e:cb:b3:fd:81:62:e1:ac:98:70:0c:3c:
25:29:97:ce:7a:75:db:8f:69:8b:0d:67:f2:45:65:
c0:79:fb:48:4d:61:de:1e:6e:bd:b7:49:63:b4:fc:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2C:55:32:DD:10:66:B6:8E:A3:A9:71:81:93:CE:22:A9:72:4F:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/7db215e9-f5af-39a6-97d5-14c7c17d9136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.crl
X509v3 Authority Key Identifier:
keyid:A1:4D:9B:84:F4:D6:87:5C:4D:0C:56:6E:8D:D4:C8:64:4B:C8:75:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer
sbgp-ipAddrBlock: critical
IPv4:
199.58.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:04:e8:bc:8c:db:21:60:4c:38:12:fb:f5:0b:6d:a5:f6:4e:
7d:78:db:bb:eb:9c:be:21:33:c9:c9:84:6d:99:40:62:ef:25:
f3:9a:3d:4f:77:71:0d:91:84:7b:d0:c6:08:5c:f0:f4:b5:6b:
95:93:b5:63:7d:12:cc:2e:0f:4c:2c:e5:9d:92:b6:26:6d:bf:
7b:74:72:a7:f3:fd:a8:5c:31:3e:d6:00:d5:90:fd:60:3b:9b:
bb:6a:20:86:6c:f0:60:38:17:40:a3:53:e5:e1:a2:ff:89:c6:
0e:a7:df:61:41:41:67:83:c3:17:3a:ac:eb:21:f5:63:df:fd:
34:64:f4:b5:de:82:63:47:7a:04:08:22:57:00:36:43:18:f6:
28:76:c3:4a:ad:e6:75:b9:dc:4f:4d:50:23:9c:63:8e:58:f1:
31:e2:a5:26:fc:31:fd:47:1e:31:a0:a4:cd:f2:6b:c7:e5:71:
b9:c8:f7:17:f7:74:d7:3e:8c:7f:c1:de:c4:08:08:84:3a:21:
4e:fe:54:6e:90:1a:c3:90:1a:6c:58:de:db:68:bd:a1:52:6a:
47:24:70:9e:5e:f6:3e:fa:9a:1c:7b:de:fb:ca:78:48:a0:00:
14:6d:d2:23:e8:9b:a9:35:60:df:b9:15:e7:8d:11:01:d9:00:
e9:a4:65:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:40 2025 by rpki-client