Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa
File: afe4eaec-855a-3198-8438-4f284572e247.roa (raw, json)
Hash identifier: KfKaQsKUlMvDMWHGTD79Eu8wZeHZk3+KguMWLBwezQs=
Subject key identifier: 19:85:E6:40:0A:20:3A:36:53:D9:0A:2A:2A:2A:A7:E0:5D:77:02:91
Certificate issuer: /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial: 010D0C9F432858494F263568277D9238A57C8A80
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa
Signing time: Tue 25 Mar 2025 21:19:40 +0000
ROA not before: Tue 25 Mar 2025 21:19:40 +0000
ROA not after: Mon 23 Jun 2025 21:19:40 +0000
asID: 26548
IP address blocks: 199.96.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4f:26:35:68:27:7d:92:38:a5:7c:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Validity
Not Before: Mar 25 21:19:40 2025 GMT
Not After : Jun 23 21:19:40 2025 GMT
Subject: CN=38d15621-aadf-4269-b985-5ff58e3e1360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:80:ac:0a:d1:66:cc:d6:71:70:b1:73:62:
88:0b:2b:f7:5d:79:a3:73:f4:98:c2:48:53:32:5b:
d6:c1:9e:e5:42:1d:d0:e0:18:0c:33:10:3a:d0:2e:
e9:2f:ea:3c:00:4c:9f:ba:b7:26:ce:01:f6:24:b9:
a9:a6:47:0c:d8:ef:2a:81:ea:e1:e6:c6:43:6d:b6:
1e:db:94:30:55:73:f9:71:ee:a9:a4:75:fd:a7:e6:
1f:a3:72:3e:14:79:a9:fa:79:b3:2d:7e:c9:aa:d5:
b6:60:a9:21:04:d6:80:17:d2:32:3c:26:be:1b:1c:
cc:d3:e8:e0:f7:e1:65:06:4c:34:66:d6:3c:6b:e1:
52:13:49:ec:7f:82:6c:8c:aa:7e:fd:71:92:b4:de:
65:75:a4:8a:39:cb:1d:77:a7:98:13:78:f1:50:10:
4b:a2:a5:2d:11:fc:da:5f:62:29:ba:09:17:7d:a2:
41:d0:5b:fe:9f:4e:62:62:7e:e0:8c:c9:43:0d:f3:
5a:dc:00:57:55:01:1e:bf:a5:09:49:40:57:58:f9:
27:44:3b:45:20:b2:f9:e5:9a:d9:78:b3:b7:31:3d:
c1:af:60:48:a7:09:c2:3c:e1:61:16:5d:af:04:64:
25:f4:a9:90:10:ec:b6:82:04:a9:10:1b:92:27:5b:
26:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:85:E6:40:0A:20:3A:36:53:D9:0A:2A:2A:2A:A7:E0:5D:77:02:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/afe4eaec-855a-3198-8438-4f284572e247.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl
X509v3 Authority Key Identifier:
keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
sbgp-ipAddrBlock: critical
IPv4:
199.96.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:f1:69:9c:d0:52:70:03:74:0c:88:e0:2c:0a:24:ac:51:99:
82:70:bc:80:d4:21:8a:6a:4a:8c:c7:3a:98:a2:4d:d8:33:91:
68:d1:62:da:64:05:ae:ce:83:15:20:17:fa:a9:33:82:da:e6:
bf:44:7c:5a:1b:52:6e:b4:75:b6:26:16:fd:a4:55:18:d5:3b:
bd:8e:4c:c5:72:87:ef:c7:f7:c0:82:11:52:40:ba:40:15:78:
b6:87:37:ef:57:12:a1:b5:5c:10:ab:6a:40:80:64:8a:7b:d7:
86:98:d5:a8:41:79:4d:17:ce:83:b8:a6:59:2c:e6:35:ba:91:
13:6a:08:66:99:5b:77:9a:c2:75:55:ee:90:49:8e:c1:a0:c0:
ea:c0:ee:91:ab:a7:e9:d8:54:94:b8:2d:89:a1:6d:3b:2e:51:
f2:59:36:e9:7b:d9:cc:f1:99:31:43:c9:e2:78:94:a5:4f:d1:
41:24:99:6f:7e:6b:2a:b4:9c:b0:fc:b8:91:a5:87:8d:db:66:
8a:b1:02:c6:68:df:9e:ce:7d:bb:a2:5d:1b:76:74:81:bc:a0:
43:58:60:ba:00:99:80:16:80:6b:b6:8f:35:95:89:fb:ee:34:
e4:9a:ee:56:6f:a1:f8:42:64:73:0c:35:31:57:c8:62:d2:62:
96:3e:ba:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:35:54 2025 by rpki-client