Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/a90debc4-5a03-3d04-b433-557eafb4685f.roa
File: a90debc4-5a03-3d04-b433-557eafb4685f.roa (raw, json)
Hash identifier: bK+X5ZBemBibvL86RR11fszTyJwWcjrhzkpy3IjZ0SM=
Subject key identifier: 7F:36:C7:01:F7:09:31:B9:95:78:76:72:F7:B7:69:BE:9D:5C:2A:B5
Certificate issuer: /CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11
Certificate serial: 010D0C9F43285848960B5422CEEF011E5EC3C940
Authority key identifier: 55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/a90debc4-5a03-3d04-b433-557eafb4685f.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 6939
IP address blocks: 199.83.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:54:22:ce:ef:01:1e:5e:c3:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe3ca2-49bd-4758-8054-5d1555a90a11
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=31436686-23c9-45b8-aa42-825add309e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:30:e5:2e:5f:bb:aa:35:52:b7:49:29:06:
f7:38:9a:9c:f7:2f:6b:72:53:2b:61:a1:b1:8f:a9:
af:39:11:9b:94:5b:66:32:8e:d6:d1:85:8c:99:42:
3e:18:1f:34:6f:10:e3:3f:c5:9d:23:87:bd:0a:a3:
70:3d:13:93:7d:e0:6c:2e:44:38:88:30:75:d4:5a:
41:ce:cc:9c:ca:96:63:0a:b8:0f:2e:37:a0:79:17:
bf:98:7c:61:da:db:53:08:5c:c9:28:ad:4f:85:4e:
d2:a4:20:ed:8c:c5:23:10:d1:59:5f:18:d7:b3:6d:
bd:8a:4b:8d:5b:f5:ab:bc:5d:14:1c:6f:43:69:d8:
7e:a1:8a:6a:d6:af:aa:43:02:3a:0f:8a:57:46:cf:
64:1e:bf:b2:d0:3d:bc:fd:49:9a:cb:77:db:31:a0:
4f:46:63:b1:e1:95:5b:c1:1c:be:24:9e:c9:34:fd:
49:d7:4a:22:6b:4a:92:4c:e0:9f:9a:57:1d:cd:b6:
2a:fc:bb:c4:8e:49:94:2f:45:a3:89:b5:af:69:61:
a3:16:e5:3f:c1:c7:f7:23:a1:f5:fd:e4:fd:ef:0b:
b5:98:37:e8:d0:1d:a0:57:0e:09:ec:fa:cd:45:81:
a5:b9:3e:23:8e:24:9d:e7:57:5a:ea:8f:1a:1f:72:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:36:C7:01:F7:09:31:B9:95:78:76:72:F7:B7:69:BE:9D:5C:2A:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/a90debc4-5a03-3d04-b433-557eafb4685f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11/4dbe3ca2-49bd-4758-8054-5d1555a90a11.crl
X509v3 Authority Key Identifier:
keyid:55:CD:21:CC:53:40:E3:03:E6:D1:96:10:C7:1D:0F:89:60:67:0E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4dbe3ca2-49bd-4758-8054-5d1555a90a11.cer
sbgp-ipAddrBlock: critical
IPv4:
199.83.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:c5:48:97:39:ee:cf:35:2f:01:19:3b:c1:0e:d1:ef:76:72:
06:91:67:7c:36:ba:6b:2b:48:2f:31:27:aa:42:9a:85:6c:45:
68:e7:cb:6d:29:08:52:62:9f:f0:19:91:a1:cc:44:d1:4d:bc:
5f:eb:62:ee:ef:42:d4:ee:b9:75:bc:3d:d2:41:1b:86:5e:b4:
4e:e8:89:b7:78:12:59:ff:a8:17:06:f6:e5:3d:1c:c7:04:48:
41:ad:34:82:07:99:55:bf:01:fc:1b:7f:d4:40:69:dd:b8:d7:
55:c2:b8:e2:d7:d9:fd:ac:84:0d:df:f4:e9:a5:a7:ed:4a:21:
0c:70:ef:e7:78:3c:c5:5c:a9:19:7a:fe:f0:73:de:78:3d:b8:
ef:6e:d9:10:c7:f6:98:fd:af:ac:aa:69:12:6e:17:d3:95:09:
cd:ee:fc:d6:25:1a:68:8f:d4:b8:38:06:f1:14:46:d4:2b:ae:
cc:c8:87:ca:ec:d3:c4:d8:19:71:c2:35:f5:99:ed:51:8b:1b:
5b:b9:c9:73:26:db:ab:ea:74:e0:5e:7c:d7:89:4c:a8:9f:26:
49:1b:ab:fd:b9:33:c4:39:46:86:bb:09:ce:31:b9:e2:ff:ac:
c3:e3:80:0a:38:40:9c:a2:6b:1c:3f:4b:4d:0f:b5:0c:f8:77:
9d:0f:43:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:46 2025 by rpki-client