Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dee838bc-f216-31c6-87dd-91cad1fcab6a.roa
File: dee838bc-f216-31c6-87dd-91cad1fcab6a.roa (raw, json)
Hash identifier: OBJPCTbjuCOnVg4foMRQNcI73cGzRBTkNbQTC9IT0SY=
Subject key identifier: B5:B5:7F:F4:5C:B1:02:F5:23:62:2D:6C:7A:11:A2:BA:CE:39:11:2C
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584957F40977B755C2D423922480
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dee838bc-f216-31c6-87dd-91cad1fcab6a.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 11290
IP address blocks: 24.122.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:09:77:b7:55:c2:d4:23:92:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=0fc986b6-90c3-4d8c-9e20-46c1a74ba3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:a3:cf:bf:e6:db:6b:20:ca:69:ae:65:a3:
14:6b:7b:55:70:e4:6c:2d:91:5d:c7:44:5b:cb:3e:
95:f8:26:26:ac:12:f1:b3:7b:02:89:b4:97:ac:ef:
a3:b2:1d:68:a7:20:04:43:4b:b9:4f:2d:03:d8:ee:
d0:01:79:95:76:17:c0:e4:22:f5:bf:7a:fa:21:f7:
a0:82:36:a3:ae:75:84:a0:67:c5:6f:60:d9:7c:7b:
84:c5:de:5d:f8:f6:53:53:99:37:f0:ed:d7:bf:f6:
fa:36:16:7f:24:19:dd:35:78:13:5f:da:b7:9d:c0:
89:72:61:91:00:ca:9f:6d:0a:69:29:68:5b:46:8f:
68:03:f7:e3:47:95:92:ef:ce:36:ce:ee:56:ae:4b:
2e:e1:4e:3e:47:09:88:df:df:e2:f8:f1:13:f3:05:
b4:e2:94:5f:d2:d0:ba:ad:14:fe:9f:ea:17:e5:86:
85:5a:8f:ae:1d:70:95:6f:8f:dd:5e:0f:22:cb:f7:
38:3f:22:cd:01:e7:ac:26:3a:c8:a5:64:80:a3:d8:
01:d8:c1:3f:79:45:88:e7:5e:04:d4:e2:6f:b8:09:
85:c7:c9:1e:d2:84:0b:6e:f8:5a:a7:3c:be:a0:3d:
93:9f:7c:65:a3:f8:0f:03:20:6d:cb:a9:46:3c:42:
22:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B5:7F:F4:5C:B1:02:F5:23:62:2D:6C:7A:11:A2:BA:CE:39:11:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/dee838bc-f216-31c6-87dd-91cad1fcab6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.122.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:ae:8b:8e:d9:0b:62:09:b0:d8:34:5b:96:5c:78:4d:85:18:
58:a5:c6:53:e2:56:93:09:41:2e:52:a6:5f:8c:27:76:bd:d4:
fa:1d:05:43:db:88:28:dd:42:86:a3:0e:dd:48:18:ab:4e:3a:
19:7f:c2:57:4f:17:33:d9:48:fd:05:fd:3f:fd:42:89:d1:10:
8e:8e:f3:89:23:78:62:b8:41:81:78:28:2c:64:3e:9c:2f:61:
81:e5:33:5d:25:af:09:1e:64:02:4c:28:74:92:29:b8:32:bb:
de:c6:bb:92:3d:bf:1c:a6:79:ef:39:61:11:87:f3:e8:19:85:
eb:22:5d:21:a9:cf:65:61:f1:d0:80:1e:b7:78:66:42:19:62:
f4:97:69:52:70:24:77:88:0e:56:ad:2c:02:80:3c:90:1c:e1:
b7:b7:bf:62:13:c3:c4:48:5b:62:51:a0:9a:ff:e6:59:f0:f2:
f5:0a:b9:d1:39:9d:7c:a8:45:b0:81:2d:cc:0c:60:90:5b:37:
29:8f:52:bd:5f:25:25:90:e5:40:1d:96:97:69:be:dc:4c:01:
db:e9:7d:7f:06:5c:0f:f5:cd:85:61:0b:41:d7:54:21:0b:07:
aa:d3:f6:62:c3:07:c3:f5:3a:e1:1d:87:00:44:ca:5c:23:c6:
b0:46:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:56 2025 by rpki-client