Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ffe60fa9-39e3-38f6-b387-f3206b0f637b.roa
File: ffe60fa9-39e3-38f6-b387-f3206b0f637b.roa (raw, json)
Hash identifier: dfWT9x388eewmMvz+9UWP/6CZTBcWojo3zJylQgkkr8=
Subject key identifier: C0:BA:3D:6B:FB:E7:95:7F:41:BB:4B:88:3E:B6:27:E5:D5:C8:EB:37
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584957F40A556CD8A99C38D49480
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ffe60fa9-39e3-38f6-b387-f3206b0f637b.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 11290
IP address blocks: 24.54.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:0a:55:6c:d8:a9:9c:38:d4:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=51b9e166-2d9c-47a4-9951-6a93ec5570ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:aa:d9:6a:5e:2f:d1:59:62:95:72:9b:76:
11:85:fa:b7:f6:4e:0f:5f:70:8f:11:52:a0:8d:3f:
7f:5a:b3:fd:96:5c:ff:7d:0e:7a:72:43:5f:ae:39:
cb:d0:15:ae:6b:ca:bb:d4:b2:88:cc:84:78:89:b8:
33:a3:4a:14:6d:a1:90:10:a3:e0:af:b7:2a:f4:a7:
41:13:8b:ab:de:17:54:34:9c:94:df:49:0a:f7:4e:
41:97:d9:dc:a5:32:ba:d4:c0:4a:a6:5b:be:53:7d:
27:74:24:8b:3b:31:a1:c8:69:5a:4c:6f:8a:99:e5:
a9:ad:d1:bd:82:c9:af:6c:b0:90:df:97:60:18:e5:
33:54:e6:40:5f:14:6c:bf:23:0c:c5:bc:a3:ed:e6:
3f:8a:cc:c5:cf:3d:13:7d:60:32:5f:f6:fa:c2:1a:
a4:33:94:ba:4a:a5:7a:01:1f:e1:ed:22:ef:43:7a:
d0:10:ec:01:9d:53:df:a3:29:1f:03:38:bc:a8:7a:
9c:1a:6b:ff:ae:88:a6:60:52:c9:27:15:bd:e5:11:
6c:73:8f:37:9e:64:8e:02:ba:71:c2:e5:b3:40:7c:
ab:c1:eb:a4:5a:95:c9:ba:68:27:d7:d1:42:e6:6e:
e5:91:95:54:ac:ca:9e:14:41:c7:7e:c2:97:1e:e3:
0a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BA:3D:6B:FB:E7:95:7F:41:BB:4B:88:3E:B6:27:E5:D5:C8:EB:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/ffe60fa9-39e3-38f6-b387-f3206b0f637b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.54.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:92:02:fe:8d:e0:48:62:b8:52:80:3f:32:50:a9:d6:56:a9:
0c:46:72:a9:20:29:28:4a:3a:37:f3:18:a3:a8:dc:75:d6:52:
ef:2e:26:c0:98:3e:dc:22:28:08:50:1c:63:8d:71:7c:6b:06:
f6:6f:f2:4e:8f:f9:37:aa:3a:7c:d5:6f:25:05:ea:f6:69:87:
51:78:3a:34:b4:99:55:35:64:0c:d6:62:0a:a2:bd:a5:71:c7:
69:cc:4a:99:69:83:96:dc:fe:70:d6:64:2e:ef:16:d6:27:80:
1d:15:15:fe:fd:25:63:5b:18:2a:ba:e9:44:66:80:96:85:70:
68:cc:20:cd:79:0c:12:e8:f2:ef:03:7d:62:b0:75:37:cc:b4:
b7:de:90:31:57:cb:bb:b6:c2:ad:50:e4:28:ac:dd:3b:4f:cb:
6f:ad:0e:6d:b8:ec:6f:fb:e7:d9:50:83:ec:14:77:f5:29:a7:
9b:64:76:e0:58:5f:d7:e9:05:0a:78:db:79:f8:f1:f1:3b:83:
5a:6b:52:71:65:92:5d:d5:71:c7:ae:52:32:8c:e9:85:17:56:
89:10:34:8b:4a:15:6f:2f:6c:2f:71:12:08:25:86:ee:3b:9c:
2c:2c:e8:c8:dc:e6:3d:a9:f2:41:99:7c:41:14:35:69:a0:78:
1a:11:7e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:52:49 2025 by rpki-client