Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa
File: c4cc816d-0378-3331-bfab-29af1c51cb4e.roa (raw, json)
Hash identifier: wbsnu93zH8cD+LuZlHWgO0NF6uGvaR+qtrfLghWSXPk=
Subject key identifier: C1:0C:1B:24:15:A4:0F:DE:0E:7D:D2:C5:A5:DB:8E:42:0C:D0:F1:22
Certificate issuer: /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial: 010D0C9F43285849203C14F38AB30561042DC6F8
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 202
IP address blocks: 199.249.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:14:f3:8a:b3:05:61:04:2d:c6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=3f339766-8feb-4de4-b5e4-bcdbe48748d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:26:e0:3d:01:70:09:1f:c4:d7:7a:2c:0a:
86:14:18:d6:48:73:eb:95:88:d1:2e:c3:8c:ad:e5:
db:a0:a7:a3:4a:82:20:a5:c0:57:8a:d1:ef:c6:6e:
66:f1:45:b6:d0:9e:0b:f9:42:f2:40:0b:4b:03:86:
36:f7:8d:ba:a4:c8:c7:13:2c:14:be:fe:3a:a3:19:
c2:0c:85:d3:1f:6b:86:b0:cc:0e:53:d3:46:45:d3:
b4:a1:39:c6:e6:a5:ae:91:13:50:06:d3:0a:58:c3:
5b:88:4d:45:98:32:fc:a9:e3:c4:2e:02:40:8c:11:
67:ae:b8:c0:29:7d:53:bb:fc:99:c6:d2:33:15:1b:
e1:08:3e:a1:6d:56:c2:83:cf:d3:23:a2:4d:c6:8d:
e4:03:96:f7:25:29:53:60:2a:56:87:d6:cf:62:5d:
fc:d0:35:8b:6e:4d:ed:11:fa:c8:5b:db:7f:01:fe:
cc:8c:34:7d:d1:fb:a3:b3:8b:b6:67:1e:d4:57:ab:
82:2a:49:3b:23:42:8f:96:d6:2f:6a:37:db:64:ea:
58:32:ab:bd:13:30:61:d0:fb:35:4d:6b:59:26:69:
bb:4e:72:6b:6b:70:1c:ba:56:2f:32:d9:bb:0e:9a:
0b:92:30:5b:4f:24:e4:04:65:af:a1:be:24:9d:d9:
10:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:0C:1B:24:15:A4:0F:DE:0E:7D:D2:C5:A5:DB:8E:42:0C:D0:F1:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/c4cc816d-0378-3331-bfab-29af1c51cb4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
X509v3 Authority Key Identifier:
keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:88:f2:bd:33:e5:ed:1e:21:7a:78:20:98:67:5a:52:f0:1e:
00:57:5b:b0:17:8e:3b:3b:08:a6:fb:d8:40:1b:3c:a0:b0:55:
6a:b7:6b:06:56:66:28:ec:e1:cf:a6:a3:af:b5:7e:3d:90:da:
1c:43:3d:81:a3:62:1a:20:dd:54:66:63:0f:85:71:b4:93:dc:
b7:18:8e:b3:44:bc:7e:8e:1d:27:ff:dd:85:3f:2e:b8:dd:ba:
e4:60:9a:6b:3a:a4:54:2c:00:72:1d:79:17:5e:75:c7:84:7e:
10:c5:3b:9e:36:be:bc:96:77:f0:54:2b:48:35:14:5c:4b:29:
dd:2e:a8:9f:8e:41:7c:2b:42:1c:6a:41:f9:ba:96:bf:78:c5:
cb:7c:c4:ea:f1:93:58:62:a6:34:a3:98:39:ad:05:bd:e6:6d:
f8:48:11:c1:fa:15:7c:19:a5:b5:59:14:c6:93:f9:ec:92:24:
7e:0e:a7:6b:84:0d:5b:a0:8d:8c:6f:f4:b6:3a:aa:a0:24:7f:
68:0b:9b:ca:38:d8:f4:a1:07:2b:7b:21:33:cf:be:a2:53:75:
c3:91:e8:7c:a9:62:17:fc:51:f8:94:8a:36:c5:c3:eb:61:50:
07:a2:f5:01:c9:e7:22:bc:95:ea:27:b9:5e:71:8d:96:30:f6:
bc:b7:9f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:37 2025 by rpki-client