Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/99b6768c-982a-3abf-aa3d-36ee5325e2f2.roa
File: 99b6768c-982a-3abf-aa3d-36ee5325e2f2.roa (raw, json)
Hash identifier: 0jcwf26viLVmY5nzBqe6BHUwzhSaFNKydQESvtTckB0=
Subject key identifier: 08:17:E7:8F:07:E3:D0:F2:FE:4C:18:02:17:9F:80:DC:51:F4:DA:7B
Certificate issuer: /CN=f952e113-8fae-44f8-9d98-a496f4e2fdc6
Certificate serial: 010D0C9F432858493243DE2F01E76D371E616B00
Authority key identifier: 6A:B0:45:6B:89:75:14:9C:61:DD:E1:81:6E:F1:23:F2:97:8A:E7:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/99b6768c-982a-3abf-aa3d-36ee5325e2f2.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 11714
IP address blocks: 205.202.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:de:2f:01:e7:6d:37:1e:61:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952e113-8fae-44f8-9d98-a496f4e2fdc6
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=fcf649d1-9aa9-41ac-ac94-d280aa19b535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b8:df:b6:ed:60:c5:0f:8c:ef:e2:5a:f3:59:
34:47:56:f7:b9:e7:34:a8:b2:57:9a:28:3a:ed:36:
43:75:30:51:82:1d:ac:77:f3:97:32:30:85:8c:ad:
f0:94:e4:3b:4c:65:87:6d:df:d5:86:04:64:e7:8b:
da:57:78:07:39:2f:ca:46:0e:f9:fb:8c:d1:70:6d:
95:84:95:7e:22:a0:a2:40:c9:24:80:f7:55:5e:e2:
88:8d:6a:7a:99:2c:ee:c2:c1:62:61:39:b6:0d:5a:
79:4d:28:48:b0:7e:d6:8d:59:ff:d4:5b:a3:b4:62:
05:87:a0:e1:88:a1:41:7b:66:ed:78:64:00:31:13:
8f:06:62:75:22:77:4b:c6:4d:9a:40:49:ee:79:a8:
d3:e6:70:4c:ff:d3:be:48:fa:f1:1e:cf:53:84:21:
da:ee:a9:d6:a9:24:fb:25:11:b5:92:6a:92:17:92:
1b:c0:37:9a:3b:4b:fe:83:e2:38:4d:ca:1d:a8:ac:
b4:43:eb:ec:dd:e4:69:61:40:6e:6c:fb:0d:77:46:
a5:8e:b2:83:a0:e3:8e:a6:35:a3:1c:24:56:c2:d5:
0b:a4:73:f1:3f:10:a2:07:a0:32:86:14:6a:d4:d7:
c9:a0:e6:a4:e5:c1:a0:5d:88:e4:1a:22:52:15:86:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:17:E7:8F:07:E3:D0:F2:FE:4C:18:02:17:9F:80:DC:51:F4:DA:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/99b6768c-982a-3abf-aa3d-36ee5325e2f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6/f952e113-8fae-44f8-9d98-a496f4e2fdc6.crl
X509v3 Authority Key Identifier:
keyid:6A:B0:45:6B:89:75:14:9C:61:DD:E1:81:6E:F1:23:F2:97:8A:E7:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f952e113-8fae-44f8-9d98-a496f4e2fdc6.cer
sbgp-ipAddrBlock: critical
IPv4:
205.202.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:a7:43:08:0d:97:8b:17:f7:1b:b9:0e:2a:3f:0e:f9:e5:b3:
41:2d:ff:bb:5c:55:5f:ad:82:4a:fc:38:b3:89:7e:96:7e:ff:
2a:70:5e:78:25:29:75:00:db:bc:10:27:d4:68:a9:77:9f:4d:
78:15:4d:94:1d:70:31:86:eb:d6:2f:8a:1c:74:f1:a1:a8:4a:
7b:b1:fd:a2:fc:23:a6:6b:94:28:3f:44:89:5d:f6:8a:c2:bf:
52:a2:a6:43:00:b1:39:7f:01:a3:1e:da:77:33:37:a2:b0:73:
8c:6c:e0:ba:33:87:4f:90:06:24:56:a0:54:ee:b1:fe:2e:1f:
1f:06:76:a9:66:58:af:b5:d7:2f:a3:36:b2:b0:d0:0f:b6:13:
cf:41:2a:c2:3f:cc:c0:22:01:39:c5:cb:e9:93:1e:c7:1a:ec:
9c:4a:ce:b2:03:b7:a8:89:41:67:07:fe:8b:31:3f:35:de:85:
c8:8d:04:de:81:1c:18:e6:af:f3:43:f2:87:02:b3:b6:b5:22:
ec:16:85:a2:07:b5:56:53:e6:7f:cf:9a:9e:c7:f4:9c:a8:fa:
84:a9:f3:64:f7:1e:8f:48:64:20:44:ab:08:f6:77:e1:13:00:
cc:f9:a0:95:c8:78:64:73:6b:0a:b9:8f:73:2e:ce:77:0e:97:
85:56:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:21:46 2025 by rpki-client