Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/45097e41-5714-3974-bd1e-65826485fa4f.roa
File: 45097e41-5714-3974-bd1e-65826485fa4f.roa (raw, json)
Hash identifier: 7WU9+2a1KLb66jJiY7DNjcHxr+j67rwyru+psJbnSG8=
Subject key identifier: 9A:AE:A8:C3:C7:5C:7B:B1:C1:01:8F:17:4F:7C:64:94:D3:FA:AA:DC
Certificate issuer: /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial: 010D0C9F432858491D718966540F9F51998FEC00
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/45097e41-5714-3974-bd1e-65826485fa4f.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 53904
IP address blocks: 199.212.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:89:66:54:0f:9f:51:99:8f:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=f014ffed-ef4f-472e-ba6c-1f3ccebc1f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:e6:51:86:e1:6b:a9:a0:fa:b0:ae:ab:d2:
40:c3:6a:93:5c:8b:cf:c6:22:49:84:5e:7e:d1:8e:
ec:7c:cc:c1:c6:71:0b:61:8b:8f:02:bc:c6:de:c0:
4c:2d:1c:d0:7e:ab:5c:5a:09:26:06:55:21:b4:89:
c0:6d:6d:0e:7a:f7:2c:c9:a3:68:de:f6:5d:69:27:
5c:c5:5a:6f:b5:d1:cd:36:52:eb:c5:0c:b2:b3:ec:
96:6a:df:cd:5a:f8:d6:14:f4:c7:6b:2c:7e:c0:e4:
f2:26:d2:57:71:ad:a3:e2:6b:ea:65:d2:f0:d4:2a:
3f:70:bf:c8:fb:7d:69:07:28:c6:34:e6:91:43:d0:
87:b8:ff:55:14:35:95:63:ac:95:18:91:c9:47:75:
c8:86:c2:22:3c:66:46:d2:eb:2a:7a:65:d9:50:8e:
0e:d6:a1:c6:a5:ca:29:d9:02:1d:40:e7:ce:e2:c0:
9f:04:69:d5:7f:35:c0:6b:2d:c7:2a:98:5d:8c:ec:
88:5a:a5:0e:e6:25:06:70:86:71:d8:ea:f2:73:fd:
e2:45:f3:09:96:45:e7:fa:0f:23:14:1e:38:19:60:
06:c7:5f:c9:f0:cc:ae:a7:6f:b3:b9:a5:57:a6:27:
51:4f:6f:5c:a4:46:ac:6e:c2:05:6e:a1:a0:0d:e0:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AE:A8:C3:C7:5C:7B:B1:C1:01:8F:17:4F:7C:64:94:D3:FA:AA:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/45097e41-5714-3974-bd1e-65826485fa4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
X509v3 Authority Key Identifier:
keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:f3:26:67:4a:9c:a4:16:9a:1d:6d:46:d8:7e:99:97:f8:90:
ee:65:2a:3b:fc:6c:40:92:89:fd:9c:a8:b6:30:af:6a:d3:c6:
08:22:ae:ea:1a:03:34:ff:b6:4f:43:4e:d0:3e:0a:f4:5a:bd:
c9:53:2c:3c:ab:93:d0:90:9d:44:45:ba:70:1e:6f:9b:8d:66:
e4:7e:d8:99:b3:ef:3b:5f:94:51:1a:9d:bd:88:47:7e:d8:69:
cf:78:3f:23:bf:97:c2:00:db:27:cb:60:2f:51:93:b1:a3:e6:
f7:fb:76:29:8d:59:1f:70:95:51:a1:10:02:82:34:bb:48:5c:
3a:f8:d7:6b:a4:7b:11:05:bb:08:15:d1:39:e4:21:2f:9a:5d:
ea:5d:0f:86:8d:d3:54:f8:bd:68:56:56:8b:a1:9f:36:2f:af:
82:f2:07:12:ab:ab:96:79:88:09:2c:ea:97:99:66:2d:c3:c1:
7f:33:5b:4e:96:5d:21:18:83:e6:d0:86:c2:91:70:9f:b1:3b:
1c:89:1f:b5:7a:2a:a8:2f:3c:38:7c:1a:82:59:88:38:0a:24:
8f:04:17:09:1a:1c:45:81:55:4c:4a:83:40:37:53:e4:84:42:
05:8e:d1:59:2a:e7:88:ce:2e:87:84:31:c3:85:c4:c3:88:43:
62:fd:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:26:37 2025 by rpki-client