Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/3d40fcbe-3f96-39a0-8e03-57f5f9c54ab4.roa
File: 3d40fcbe-3f96-39a0-8e03-57f5f9c54ab4.roa (raw, json)
Hash identifier: TZpcLUjT3tJVRFoBEzibPU46ICzHhzdYOpzw4dqndxc=
Subject key identifier: A5:B1:A3:62:D1:75:D4:76:A4:D1:4B:7C:D8:FE:F6:1E:70:8E:2A:5B
Certificate issuer: /CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Certificate serial: 010D0C9F43285848854B520F3AD48B78A6E9C4C0
Authority key identifier: 2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/3d40fcbe-3f96-39a0-8e03-57f5f9c54ab4.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 30513
IP address blocks: 199.188.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:52:0f:3a:d4:8b:78:a6:e9:c4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810c5fd9-ee7e-4b9a-9584-b706f11e175b
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=52d81b07-8200-4bf8-aff5-eda7fdefb9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f4:eb:1d:85:1b:f4:69:c5:23:3d:34:3a:0a:
b6:26:c7:b3:03:a1:8e:de:4f:1e:4c:46:9c:f6:5b:
78:e9:26:94:e6:7a:e3:8e:19:00:c7:45:be:91:dd:
61:88:a8:22:68:4f:6e:a5:bc:27:4b:f4:7d:62:45:
6f:07:f8:7b:d3:80:a1:e4:55:21:1e:0f:91:b2:b6:
e3:48:fb:7e:f4:b4:13:05:3c:48:4b:78:58:64:d2:
49:4e:11:ee:e5:81:ae:78:f2:31:ca:9f:95:29:f3:
3f:d2:33:0a:1d:05:c2:a7:c9:08:d0:b8:a3:66:74:
36:c4:34:b7:d0:45:5a:23:1d:29:ea:48:96:81:ea:
0f:2a:e5:5a:48:2c:6a:2e:0e:0c:63:f9:fa:9c:f0:
30:a7:5b:95:f5:67:3b:01:0c:b4:7f:5c:5b:1b:8b:
5f:95:3a:cc:df:61:35:33:89:96:12:3d:6e:c1:c0:
5b:6b:5a:74:c8:fd:1b:ce:a7:29:02:09:4a:be:3f:
6d:45:f1:46:33:9f:6b:a0:bb:eb:13:36:52:fb:71:
77:32:02:5c:2b:b3:2c:9c:07:87:c5:93:e9:ee:36:
84:ac:b0:b8:40:7d:a9:0a:29:16:d3:b7:1e:92:1e:
36:5d:42:19:67:4b:71:3a:13:bf:71:44:43:1c:98:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B1:A3:62:D1:75:D4:76:A4:D1:4B:7C:D8:FE:F6:1E:70:8E:2A:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/3d40fcbe-3f96-39a0-8e03-57f5f9c54ab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b/810c5fd9-ee7e-4b9a-9584-b706f11e175b.crl
X509v3 Authority Key Identifier:
keyid:2F:5E:1D:3A:7B:EA:7B:7B:DD:0E:BE:DF:01:52:18:50:B0:DB:0F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/810c5fd9-ee7e-4b9a-9584-b706f11e175b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.188.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:5e:d1:5c:67:6b:e9:8b:00:60:0b:a2:2a:a9:07:2b:eb:f9:
f2:ce:f5:17:9f:7d:5b:85:53:57:80:0f:1f:bc:1c:9a:15:a1:
ae:80:63:a6:0c:a4:5b:50:21:da:6e:f6:96:bd:d3:e8:fe:db:
9f:df:5e:b8:a2:ce:a8:50:3c:9d:37:1a:0c:65:cf:ee:bb:38:
ae:73:c5:51:3c:2a:5f:bd:72:0d:16:68:b8:f7:4b:07:7b:90:
79:59:d7:85:e8:af:55:28:a8:b2:ca:ca:8e:45:29:c9:9e:41:
cb:20:42:0e:0c:bc:4b:17:86:9e:d3:a5:ce:44:ad:00:be:ab:
aa:31:b4:b7:23:98:7a:6a:8a:ed:44:0b:18:56:02:d6:8a:26:
ea:c0:3c:5b:9e:19:df:b3:06:69:65:f0:59:bd:96:63:79:38:
f0:50:13:4b:01:dc:53:73:e7:8e:23:e1:94:2b:41:4a:92:c2:
4d:ce:79:9c:79:9a:bc:db:5b:08:a1:cb:61:32:85:eb:bc:36:
4f:12:a0:8e:19:f7:ac:c5:1b:a6:42:2c:b5:21:a3:5b:fe:e1:
27:ea:bc:f4:f6:18:b8:34:b5:f9:4b:b0:0d:f9:5d:d8:18:64:
34:be:6c:58:47:ea:bd:b7:ca:43:bc:c7:12:34:5a:fd:95:0e:
fc:09:76:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:55:47 2025 by rpki-client