Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bba2412c-5b1f-38bc-9d1e-06b7736d1372.roa
File: bba2412c-5b1f-38bc-9d1e-06b7736d1372.roa (raw, json)
Hash identifier: cDnwPniXc46WtuC7MbnEYyA0BdL2Dp58S/rhf9pohuw=
Subject key identifier: 2E:6E:AD:CF:7D:B9:7C:74:85:3E:46:0E:F7:49:AD:87:E3:FB:13:16
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F43285848E59BCFA8F72189085FE090C0
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bba2412c-5b1f-38bc-9d1e-06b7736d1372.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 7018
IP address blocks: 199.48.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:cf:a8:f7:21:89:08:5f:e0:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=e0cca1a1-07f7-4329-8d1e-ec72083c834d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:66:76:7b:b8:ad:64:f5:c5:62:5b:93:22:02:
92:ab:66:ca:88:27:c5:2a:ec:9f:0e:8b:5b:97:fb:
db:7b:af:f9:cf:88:38:55:08:ab:47:dd:52:65:9e:
d8:20:99:2c:e2:98:e8:a0:2e:49:65:ab:00:4b:34:
fb:d6:d8:7f:1a:c2:c7:5e:90:04:80:69:e1:80:4b:
59:fb:2c:ac:51:2d:8f:e9:2b:23:1f:40:74:10:44:
a5:b1:bc:8b:cd:dc:d1:86:6e:d5:93:8b:76:de:5b:
b9:ea:32:ca:1f:1e:aa:71:c6:04:db:27:f9:6d:69:
4c:1c:6f:42:e3:f2:6d:e4:d3:ea:f0:da:a1:f9:f2:
fd:1c:b6:85:17:b4:b4:08:03:ed:3e:d3:93:73:d0:
85:00:25:fd:f7:2d:47:55:08:77:f0:77:a1:a3:f1:
59:36:01:87:f4:c2:75:d1:bf:b9:12:c9:2a:cd:c2:
a3:0f:2c:46:3b:56:59:ed:59:01:1e:d6:bb:9d:a8:
e0:ee:23:25:df:99:2c:36:fc:59:1d:90:df:5f:58:
9b:92:9d:d6:6d:43:88:c2:cc:93:8e:6e:81:aa:a4:
a5:40:ff:3a:24:17:eb:af:f3:2b:0b:0d:16:29:2a:
8f:b9:fb:70:8e:69:7a:04:2a:e0:f4:ae:db:ff:a9:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6E:AD:CF:7D:B9:7C:74:85:3E:46:0E:F7:49:AD:87:E3:FB:13:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bba2412c-5b1f-38bc-9d1e-06b7736d1372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:30:45:08:de:bd:be:ec:ba:1d:43:64:7a:9a:49:60:96:ea:
65:d4:2e:27:77:a4:1f:0a:09:ca:95:a0:4e:9b:d3:02:d5:e8:
77:a1:c9:c5:3a:cf:f0:04:fa:16:3d:d7:e7:e4:27:b7:d5:81:
fe:94:ef:7f:42:21:5f:62:3b:a7:bc:3e:ae:7d:a5:b1:ad:74:
68:39:2e:3c:91:9c:b7:62:68:a1:7a:14:b8:48:f7:29:9c:a7:
db:f3:03:d3:23:3f:1f:8c:88:61:7f:56:05:1c:3a:34:b5:a9:
77:33:41:53:40:2b:97:2e:c4:cf:57:46:71:5b:dc:5d:8a:ee:
ea:c5:c9:c1:39:a2:36:4d:61:7e:dd:21:26:83:f7:86:f8:b4:
f6:5d:29:88:94:13:2c:18:6f:04:87:c8:25:c6:23:5b:3f:da:
02:13:fc:e6:ed:2d:2c:99:11:d5:f9:fe:f3:85:e0:67:38:57:
12:f6:dc:01:5a:e2:93:64:14:43:15:05:d4:d5:a6:a4:f4:36:
59:19:e7:fc:fa:3a:99:e7:80:cd:99:ef:c0:64:06:70:d6:1e:
a6:8f:ff:f1:9d:cd:d6:4b:34:be:4e:6b:5b:d9:17:d6:41:4c:
20:37:dd:3c:e6:36:3f:e3:d1:dc:c0:0a:97:e3:c5:b8:8f:d7:
c4:1b:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:32 2025 by rpki-client