Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa
File: f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa (raw, json)
Hash identifier: F9bqDSM8eOB/GxKdOCrWrKN/cwxrvS+VmAv+jryToBQ=
Subject key identifier: 78:57:E8:40:13:D9:17:D7:CD:60:A9:79:6C:FF:B0:27:8E:86:4B:39
Certificate issuer: /CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Certificate serial: 010D0C9F43285848F4F697BBB14A695559521720
Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 32098
IP address blocks: 199.19.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f6:97:bb:b1:4a:69:55:59:52:17:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=ca335b55-f565-4c9c-a997-8cfb0b6080f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:db:1f:f0:b7:a4:35:1c:c0:5f:01:66:4f:
6d:1d:dd:85:41:d7:9b:ba:29:61:91:56:2b:17:18:
7d:e8:48:71:c9:c8:26:31:f0:9d:df:32:82:24:f1:
d9:f4:55:94:ae:3c:09:0f:98:e4:d2:8a:0f:20:37:
72:9b:12:e0:05:ce:bd:58:4c:de:16:5d:39:d5:b1:
45:7a:58:9f:85:cb:9d:0a:89:b8:cb:88:3b:ca:70:
50:59:0d:a9:a5:dc:44:f5:de:2b:2f:b5:35:9d:74:
5e:79:06:fe:f3:b7:1e:8e:4c:40:64:88:f8:b0:1c:
85:d5:5d:67:d3:25:96:c3:4b:94:9b:f3:15:33:e3:
da:d4:4c:93:8e:7e:15:da:0b:a1:5c:b3:85:78:4a:
f6:45:ae:dc:b7:c1:b0:de:c6:26:86:5a:2b:a8:76:
64:98:cf:2f:75:d6:45:cd:55:c5:29:de:e0:d4:35:
59:d8:80:d4:ff:4e:d5:25:b7:c9:bf:52:e7:08:4a:
84:09:7d:96:2f:ee:fb:07:63:40:5f:4c:6c:a5:4f:
31:2a:35:2c:14:31:43:6e:9e:be:e3:50:3b:cd:13:
5c:0d:51:53:f7:c7:4d:e5:01:cc:62:53:fc:28:2e:
4c:5d:eb:64:47:d5:02:54:65:f3:ca:a0:8b:11:9b:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:57:E8:40:13:D9:17:D7:CD:60:A9:79:6C:FF:B0:27:8E:86:4B:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/f4018e35-f80e-3b6a-a43f-51f8b97f4469.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl
X509v3 Authority Key Identifier:
keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.19.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:d9:f7:b9:b1:10:7b:9b:82:40:c7:28:f0:86:4a:82:83:31:
9f:5a:a1:b6:d7:35:8d:46:ef:a5:a8:35:da:b3:99:80:b6:af:
73:97:d2:9a:90:15:ed:22:d6:24:35:47:35:3d:a9:38:47:12:
56:af:4c:d1:0e:de:e0:7d:f8:4b:fe:41:27:ee:15:62:4d:f2:
86:e9:c6:d9:f5:3c:3d:22:1d:9e:d9:f2:70:69:37:88:9a:b5:
bd:7c:da:11:83:6f:e0:27:84:de:f3:ff:39:74:71:2c:2f:a6:
f8:36:ad:62:7b:1d:74:69:7c:15:b9:f6:aa:00:20:c4:eb:77:
14:14:7b:f6:44:e5:54:50:e0:ce:d2:0f:94:4f:ac:75:8e:bb:
a9:99:43:98:48:37:c1:66:3f:ac:f1:d1:41:4b:4a:39:f3:16:
54:38:f5:a0:53:04:cf:22:38:0f:f1:d7:cf:49:1c:68:68:8f:
cc:8d:ba:40:82:39:58:b6:2f:5a:e2:11:10:6d:c6:92:d9:5a:
43:de:b6:53:be:6d:15:e7:64:57:20:0e:19:1d:12:fb:93:f8:
c3:d7:8a:39:34:15:cb:86:2f:9a:ef:7f:46:01:10:4a:32:71:
c6:82:34:bd:7e:fa:aa:97:08:4c:d2:e0:10:10:e1:e2:83:a8:
ce:81:99:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:08 2025 by rpki-client