Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/7273dcc5-6ee5-3a7a-8693-3052f54cfa77.roa
File: 7273dcc5-6ee5-3a7a-8693-3052f54cfa77.roa (raw, json)
Hash identifier: 69ccG0Ej9R6oGhBiHpVWoil8UiTWypVAg13b/RI5FJg=
Subject key identifier: F5:97:C7:2D:AA:E6:45:1A:BB:27:81:DD:27:5B:47:86:9A:4E:17:1F
Certificate issuer: /CN=53ff129b-845f-449d-8e32-2b24ecbefea4
Certificate serial: 010D0C9F43285848F926AA044B5F9DA9C7A68B00
Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/7273dcc5-6ee5-3a7a-8693-3052f54cfa77.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 199.65.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:aa:04:4b:5f:9d:a9:c7:a6:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=c835890d-e12d-4838-9bd9-f81d34100859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:da:c0:34:c6:88:f8:f9:e4:b9:70:7f:f1:31:
e0:f0:9a:a9:d0:04:9f:03:15:8f:5b:d7:4d:5d:45:
44:92:3d:9c:f8:72:27:59:36:08:b4:ba:c4:a9:86:
2c:14:a2:14:ef:25:ad:f5:24:b0:52:e2:7f:0d:7a:
64:04:66:cc:87:43:13:c5:9e:10:d6:e5:15:d5:ab:
47:cc:53:23:2e:fa:2a:12:02:66:de:65:0c:c3:6b:
fc:a4:5f:a0:a4:82:49:7c:90:fd:f4:c7:48:5f:3e:
c3:ce:d8:0e:60:03:0f:83:2d:9e:d0:b7:77:90:25:
82:77:11:c1:ac:d3:f3:e1:5e:f6:50:73:0e:b7:85:
86:62:ff:63:1e:72:09:e4:59:c7:b8:e4:6f:73:d1:
7b:40:8d:d3:37:f7:7b:d7:ac:69:71:85:72:1a:a3:
b5:c8:57:4b:47:16:76:43:21:6a:f2:08:b5:04:27:
04:d5:73:7a:38:7b:2f:0f:cb:9f:49:2f:d4:1d:f0:
69:04:c3:7e:b3:2e:6f:44:e8:16:90:ad:d9:89:db:
0e:60:d7:70:8b:40:04:73:b7:04:1d:2c:1a:dd:a2:
ad:0d:4f:55:d7:25:48:aa:bb:0e:79:fa:6c:20:ad:
a9:5f:87:f1:5e:ec:9c:75:ea:e4:e5:75:4b:86:07:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:97:C7:2D:AA:E6:45:1A:BB:27:81:DD:27:5B:47:86:9A:4E:17:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/7273dcc5-6ee5-3a7a-8693-3052f54cfa77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl
X509v3 Authority Key Identifier:
keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.65.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:78:74:85:09:8b:fb:98:28:2f:ae:e2:2a:9d:ce:da:12:06:
d5:32:56:18:12:76:af:f7:fd:3d:e4:32:5d:ed:dd:1a:79:27:
b5:db:f3:94:7a:d7:ce:69:58:90:71:e5:2e:68:6f:30:f4:dc:
5e:72:41:1f:19:e3:4b:73:40:ad:1d:1c:7f:ad:ef:c9:35:bb:
8d:d8:ce:32:1e:22:04:e7:97:49:94:9c:85:46:ca:f1:04:0a:
09:5e:b0:50:89:6b:48:d9:0d:0f:1e:bf:2f:79:c8:d7:ed:8e:
8c:df:27:ed:7e:f5:bf:2b:e4:b7:c2:38:c2:4e:23:ad:40:0a:
06:81:db:00:41:65:cf:49:01:80:fc:6c:6c:32:e8:fe:5a:50:
f6:59:75:4e:37:e1:df:5b:7d:79:1f:36:11:3a:c4:b9:22:b5:
fd:4c:c8:84:1b:ab:26:23:c6:35:9e:6e:ba:6d:cb:85:4e:d5:
45:e0:ac:bb:de:b1:73:10:06:42:fa:13:01:0c:50:57:57:8d:
17:bb:c8:2f:e2:0c:bb:a9:08:70:5e:ab:06:06:3c:fc:79:6f:
c8:e8:a4:8a:03:a5:71:e7:f9:28:10:c9:da:50:d1:d6:16:96:
f9:59:63:67:5f:4a:56:4b:5c:d5:75:d4:09:a4:e5:92:b0:14:
66:a8:64:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:07 2025 by rpki-client