Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa
File: 02d90035-da81-3e67-96c7-9feeef8b261e.roa (raw, json)
Hash identifier: nHwEuOOJ/MM+lvB7SYUaHvGypG8yLKQiulUKtZ2ztQ0=
Subject key identifier: 2F:B9:A8:66:79:BF:A2:2C:6A:A7:47:DA:29:AF:28:67:BE:89:62:F9
Certificate issuer: /CN=45657d9f-043b-4838-9072-ef0906bb567e
Certificate serial: 010D0C9F432858492183FE874EA1C4204CBEE900
Authority key identifier: D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 16652
IP address blocks: 199.254.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:83:fe:87:4e:a1:c4:20:4c:be:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45657d9f-043b-4838-9072-ef0906bb567e
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=2e6654eb-2ad3-47b7-a7df-23af973711fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:35:36:5c:02:84:72:6a:c4:cf:a6:71:29:
c7:4e:90:77:62:00:6f:d6:f3:cd:b8:03:70:ab:6a:
c1:0d:21:4d:9f:ae:d2:a5:75:55:bb:62:81:e1:fd:
5b:3b:86:91:4d:9c:b5:f6:a0:a2:96:0b:0d:e6:0c:
b0:c4:b3:fc:78:c3:89:37:f0:aa:54:ae:8d:b8:ee:
51:df:f3:69:f7:28:98:88:2f:37:23:5d:69:19:ab:
05:46:aa:99:e1:45:07:be:d9:f9:0d:1a:5b:5f:c4:
7d:c6:b3:c8:e4:e6:de:88:77:7f:9b:a7:7a:51:26:
b3:6f:30:ed:7e:77:aa:d5:2c:32:b6:e2:2e:ea:ba:
a3:38:75:51:60:e7:68:92:b5:ab:0e:c6:ae:5e:33:
61:fb:76:2a:f3:8f:72:e0:5f:07:ec:f4:af:74:04:
74:79:c7:66:f0:e8:d5:a2:f9:e1:b6:a6:e0:17:c0:
5a:67:64:9b:38:91:50:67:9d:9c:c7:c9:e3:5a:3f:
c6:e8:91:c1:13:c6:47:19:6a:c4:8c:c2:4b:dc:13:
11:68:c5:fd:21:93:be:ea:6a:5b:5b:9c:fe:71:fb:
02:13:a3:4d:88:d5:a4:94:26:cc:c3:e4:c7:a3:4e:
3f:5a:ea:22:c5:37:0b:ac:27:9b:6a:f2:97:23:97:
75:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B9:A8:66:79:BF:A2:2C:6A:A7:47:DA:29:AF:28:67:BE:89:62:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/02d90035-da81-3e67-96c7-9feeef8b261e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e/45657d9f-043b-4838-9072-ef0906bb567e.crl
X509v3 Authority Key Identifier:
keyid:D8:35:B5:C1:42:EB:91:5F:06:FB:C3:99:31:65:E8:42:24:63:EE:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/45657d9f-043b-4838-9072-ef0906bb567e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.254.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:c9:5a:dd:6c:2e:49:b9:43:51:ae:86:72:1d:28:55:68:67:
7b:36:50:01:83:c3:f3:1d:97:81:eb:bd:8e:ae:ce:e8:45:b9:
35:3a:3c:f0:e9:47:cb:ac:ba:d0:fe:3b:d2:3d:19:84:ac:6a:
ae:cd:0d:54:8f:eb:a3:91:15:9f:e9:85:75:e3:52:ea:57:b7:
69:e2:d9:dd:04:0c:8a:f2:20:c4:af:d8:47:c6:c8:ab:e5:9d:
ab:3f:e6:4f:06:b2:a1:24:53:64:9a:44:13:52:e3:15:73:e9:
e4:1a:06:7c:06:9b:a4:4e:76:25:4f:92:f2:a9:96:6a:9a:cc:
7d:32:66:f3:b1:8a:f1:68:42:de:2d:80:6b:3c:37:ca:32:10:
c3:ca:88:3d:b6:b8:fc:38:b5:57:81:5e:7a:86:a7:af:40:28:
90:cd:17:f8:4c:fc:51:48:15:9d:59:77:90:09:80:c3:2b:fb:
ce:fd:84:55:19:ff:eb:75:01:3d:4c:1e:63:3f:41:65:a3:67:
b6:e5:2a:8d:cf:3e:ad:bb:27:12:cb:55:fa:52:6c:12:07:0b:
6a:f0:bf:d2:f7:a4:51:45:60:ce:af:0c:a6:e3:13:7e:19:d3:
70:f6:94:0f:81:18:ef:62:96:8d:4d:a6:cd:d1:78:90:d4:ce:
b0:e2:17:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:01 2025 by rpki-client