Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/fce54eae-3fe4-3f8e-87de-e0cf0d5f6ef7.roa
File: fce54eae-3fe4-3f8e-87de-e0cf0d5f6ef7.roa (raw, json)
Hash identifier: apA71X5mVVoTB421BDGJjWUVX+TSl6Lu9azHKgYipWw=
Subject key identifier: 43:43:70:80:FE:4B:8E:08:B5:B1:9C:D8:AD:A3:8C:A5:75:17:99:35
Certificate issuer: /CN=5a6a0d9b-43c3-4b62-be66-8371865622a2
Certificate serial: 010D0C9F432858491C3A452891551D1E31435D00
Authority key identifier: 76:0B:4A:3F:E4:1A:8F:F1:22:77:CD:CC:39:1E:0E:7B:5F:AA:F1:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/fce54eae-3fe4-3f8e-87de-e0cf0d5f6ef7.roa
Signing time: Fri 07 Mar 2025 15:33:52 +0000
ROA not before: Fri 07 Mar 2025 15:33:52 +0000
ROA not after: Thu 05 Jun 2025 14:33:52 +0000
asID: 1299
IP address blocks: 45.62.224.0/19 maxlen: 24
206.168.69.0/24 maxlen: 24
209.71.0.0/19 maxlen: 24
216.36.192.0/19 maxlen: 24
2607:3940::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1c:3a:45:28:91:55:1d:1e:31:43:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a6a0d9b-43c3-4b62-be66-8371865622a2
Validity
Not Before: Mar 7 15:33:52 2025 GMT
Not After : Jun 5 14:33:52 2025 GMT
Subject: CN=194e6e91-3ee5-41c0-9a56-db855fa942a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:76:6e:ca:ec:5f:87:3b:32:e4:f3:37:c7:
eb:c7:96:4c:37:3e:00:58:b9:db:0d:a9:8d:fb:83:
f0:b6:87:4d:b5:56:8c:49:9c:29:ce:02:93:b2:ed:
83:9d:ce:07:57:c8:d0:23:2f:8e:47:55:71:e4:03:
39:a3:6c:ef:bc:8d:02:fe:9f:75:53:a3:39:f6:f4:
44:97:a2:e4:67:50:37:50:0b:95:8b:d8:3b:93:ca:
33:18:27:fe:f0:ef:d1:24:a2:93:95:c8:63:77:5b:
ca:b4:2a:ee:b7:ca:ea:ac:8b:f1:2a:0c:d9:56:2b:
ab:62:1d:97:43:1a:40:f7:c4:cd:73:bb:b8:62:d6:
57:b7:0f:6b:16:2b:29:ee:0d:bb:65:39:99:b5:a0:
ae:3b:fd:18:ea:5b:a0:8a:46:b0:43:b4:08:bc:86:
6c:f5:ba:ce:d0:66:55:16:ec:d2:c8:82:42:0d:23:
cd:e3:23:f3:00:98:13:bb:12:08:7f:a9:a6:0e:72:
46:dd:f5:8a:a1:45:11:16:3d:99:13:44:05:cc:68:
e9:6f:75:13:63:f4:af:6b:fe:51:b0:2f:ef:34:bf:
16:69:00:2b:a0:61:82:81:a8:20:ee:d8:e7:9c:ce:
1d:53:21:c1:8a:6e:5e:16:6c:cf:8e:97:7c:2e:d1:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:43:70:80:FE:4B:8E:08:B5:B1:9C:D8:AD:A3:8C:A5:75:17:99:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/fce54eae-3fe4-3f8e-87de-e0cf0d5f6ef7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2/5a6a0d9b-43c3-4b62-be66-8371865622a2.crl
X509v3 Authority Key Identifier:
keyid:76:0B:4A:3F:E4:1A:8F:F1:22:77:CD:CC:39:1E:0E:7B:5F:AA:F1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a6a0d9b-43c3-4b62-be66-8371865622a2.cer
sbgp-ipAddrBlock: critical
IPv4:
45.62.224.0/19
206.168.69.0/24
209.71.0.0/19
216.36.192.0/19
IPv6:
2607:3940::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:a5:be:18:8c:82:03:81:11:57:6e:7a:93:5d:5e:8f:b7:52:
22:5f:c4:81:9b:4f:ab:79:e8:27:e6:bd:4b:4f:43:6c:3d:96:
f8:1d:96:eb:cd:51:ef:ab:bd:7a:0d:55:34:2a:d4:0e:9f:93:
25:77:c6:c8:bf:57:75:0f:a3:d1:11:d4:ff:7e:4f:a7:4a:c8:
2e:9c:fd:ce:7e:c4:23:15:de:19:f4:26:47:cf:96:26:0c:f4:
e7:2c:2a:1b:27:a4:3d:48:14:bd:ce:cd:3c:1a:0b:eb:df:b4:
9d:a4:af:cf:1b:06:77:f2:61:7c:a7:86:98:ed:e2:7f:ac:5e:
8f:27:fd:24:1b:6d:01:95:45:9d:98:f1:d3:78:53:2a:1f:ac:
4e:cb:da:f4:5b:7a:b2:f7:15:69:52:3c:1f:fd:af:54:a8:35:
11:67:4a:d7:20:b6:4a:5e:2f:77:78:ee:2c:28:05:e4:32:0a:
a0:19:63:4b:eb:e5:21:49:3a:32:51:0c:70:dc:bf:5c:5c:77:
18:e4:9d:6b:8d:2f:58:ce:40:8d:d2:05:ca:cb:72:3e:97:37:
23:b5:ec:eb:37:84:93:36:00:c2:c0:d1:d6:87:f1:e1:91:db:
f0:58:29:9e:39:c6:b5:d4:ea:ec:31:e9:68:da:ec:8a:2c:0a:
9c:95:40:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:34 2025 by rpki-client