Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ddae4220-ff86-3265-b4ee-0e6bfe06369f.roa
File: ddae4220-ff86-3265-b4ee-0e6bfe06369f.roa (raw, json)
Hash identifier: EFtx/rgOBGk5yeo+0L8lnk8Il6CmdUuhdwoeDdkjW+Y=
Subject key identifier: 02:47:55:C8:F0:BF:54:CD:45:B8:B2:4A:9E:22:CA:EC:FC:CE:93:31
Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial: 010D0C9F43285848C6E62E6B22C5C4BF6D10E600
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ddae4220-ff86-3265-b4ee-0e6bfe06369f.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 3356
IP address blocks: 199.0.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:2e:6b:22:c5:c4:bf:6d:10:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=d1466415-b275-44e5-8e27-6d100ace52a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e2:32:60:75:02:d2:6e:82:26:43:41:79:ab:
04:7f:d6:67:54:93:fd:6d:7d:4b:9a:5c:7d:a3:59:
9a:a4:99:1f:a6:94:62:09:13:0b:41:94:fb:aa:b5:
83:9d:89:ed:84:06:ec:3d:8f:29:3a:ac:4d:85:57:
d4:80:4f:f6:f6:26:ef:22:62:f5:fa:c5:f8:f7:1d:
65:f2:1a:37:22:29:0a:e0:85:97:33:07:c7:c1:53:
11:0c:df:74:ee:51:c7:82:27:4c:1c:f6:68:23:09:
72:76:14:59:4b:f2:31:56:1d:1f:cc:c2:18:ac:06:
9c:a2:80:24:9b:80:5f:56:af:17:1b:d3:11:9b:17:
1a:81:42:95:c4:f4:30:55:9e:a5:30:4d:13:7f:d0:
3a:8f:67:9f:a3:dc:26:7c:84:a7:fb:41:c7:ad:e4:
7d:94:db:c8:fd:95:61:18:18:5c:58:99:3b:73:46:
4c:dc:fc:80:e6:a5:b8:58:39:43:39:b5:99:a1:57:
f9:fc:af:05:8b:6e:86:04:30:4a:86:72:db:4c:81:
a1:8e:4d:52:c3:f2:51:dc:f7:1d:c7:d1:d2:5d:4e:
63:91:60:24:c0:d0:0e:ea:8d:ef:95:5e:7b:b3:41:
d4:4e:d0:64:1e:65:93:13:77:34:b3:f0:64:da:0e:
38:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:47:55:C8:F0:BF:54:CD:45:B8:B2:4A:9E:22:CA:EC:FC:CE:93:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/ddae4220-ff86-3265-b4ee-0e6bfe06369f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
X509v3 Authority Key Identifier:
keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.0.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:8b:f1:72:bb:43:c9:ad:2b:af:00:47:af:fa:c1:1a:8f:6c:
84:95:09:b5:af:44:11:05:16:99:b4:d5:2e:7c:18:56:78:a8:
15:b6:83:3d:31:53:a0:01:65:26:10:9b:55:95:33:03:b4:b8:
05:a9:29:5f:37:bb:4d:69:44:97:88:09:0c:bf:5a:25:46:fb:
fe:4c:22:f8:0a:6e:7f:aa:1d:ba:b6:cf:2f:21:d5:e8:83:88:
53:9d:fc:20:e0:10:e1:91:c6:c7:ca:9e:c7:59:30:fd:7d:72:
a6:88:ce:5a:0f:fe:9f:87:63:03:c3:cb:9b:a8:7a:d9:ad:7a:
75:32:07:12:e5:fa:e8:d8:0f:ec:c9:0a:5e:44:5c:1a:73:12:
2e:71:84:46:6d:bb:47:5f:5b:b6:5a:3f:27:bd:91:11:17:fe:
3d:78:3c:1b:d2:fa:88:02:32:62:22:fb:46:76:19:2b:f1:96:
ed:6c:84:b4:88:3c:03:cd:00:d1:c7:f3:28:e0:d5:b4:c1:49:
03:fc:de:14:37:a2:1b:d0:eb:f3:4e:65:8e:3d:bd:22:20:7f:
24:3a:b3:64:25:0c:14:77:2f:ed:4d:4a:3d:8a:a7:66:06:b5:
17:ff:67:b8:d8:01:a8:97:c8:a4:b9:b7:62:e0:5b:71:7e:9e:
ef:bd:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:34 2025 by rpki-client