Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/12ea25ea-4b65-3010-8f8f-41441372d3a0.roa
File: 12ea25ea-4b65-3010-8f8f-41441372d3a0.roa (raw, json)
Hash identifier: GySo6YktVuWp4NxdyVmZGh5OgwWSWvJ1LtIe9QBan3c=
Subject key identifier: 99:A8:BD:B1:24:D9:78:99:E2:80:69:D6:74:5B:6C:4C:31:17:74:53
Certificate issuer: /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial: 010D0C9F4328584861004C1D939AE4C0F0ABD480
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/12ea25ea-4b65-3010-8f8f-41441372d3a0.roa
Signing time: Mon 30 Dec 2024 14:00:51 +0000
ROA not before: Mon 30 Dec 2024 14:00:51 +0000
ROA not after: Sun 30 Mar 2025 13:00:51 +0000
asID: 398395
IP address blocks: 199.253.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:00:4c:1d:93:9a:e4:c0:f0:ab:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Validity
Not Before: Dec 30 14:00:51 2024 GMT
Not After : Mar 30 13:00:51 2025 GMT
Subject: CN=97a35c65-d34e-495b-bc6c-36a8e308c128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9f:3f:f9:22:32:4c:35:a4:99:61:27:0f:40:
dc:f3:0a:cf:32:26:ff:c6:3d:00:41:a3:7b:1b:81:
d9:8f:1d:79:37:87:c8:6d:d0:ed:83:46:fe:5d:35:
e9:15:6f:b9:99:60:d1:05:0f:6d:6b:3f:33:bd:20:
a4:4c:34:4d:98:d7:64:fc:70:2e:cf:f8:f2:6d:9e:
91:0e:00:10:cd:35:53:df:ae:a1:46:f4:bd:eb:97:
a4:bc:c9:d7:2d:56:c9:f7:2f:02:73:73:42:03:cf:
69:ce:e6:f3:1b:b7:53:3a:aa:f0:71:d3:04:43:79:
7c:9c:18:68:05:70:04:9e:c5:ea:78:83:03:0f:96:
b4:0f:ff:cb:7c:fe:aa:31:b5:7a:4a:7d:ab:39:a3:
be:15:89:e4:b6:53:bd:49:ff:2f:f1:27:5d:df:67:
92:11:bf:0e:29:84:8b:02:9e:43:74:8f:0f:13:77:
ed:09:07:50:7c:c9:c6:d8:a3:64:be:88:b7:02:6f:
a0:fe:ce:11:03:dd:28:1b:3c:9e:99:1c:db:38:21:
d9:e9:ea:d4:8e:27:5b:bc:cc:e9:d6:65:2f:cb:2c:
af:2c:d5:6f:26:d7:ed:08:78:d2:b9:b8:79:b1:48:
26:d6:ed:40:a7:c3:0f:d6:f4:98:eb:59:d1:ff:a1:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A8:BD:B1:24:D9:78:99:E2:80:69:D6:74:5B:6C:4C:31:17:74:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/12ea25ea-4b65-3010-8f8f-41441372d3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl
X509v3 Authority Key Identifier:
keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
sbgp-ipAddrBlock: critical
IPv4:
199.253.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:51:0e:2e:27:2a:72:1b:1d:50:7e:83:fd:cf:6e:2b:d7:69:
d8:4c:7f:45:aa:e7:cb:2f:1a:56:b6:cb:2d:af:5c:e1:22:99:
ce:cc:68:1f:11:ba:63:b6:c7:03:f7:a9:4b:ba:84:a7:41:0e:
ca:10:a5:65:cb:b6:e1:52:a5:c0:5d:6a:e1:0b:ac:dc:8b:20:
c6:0b:22:a6:3e:06:6a:7a:d7:d0:f3:e4:fe:2e:b6:c3:41:e4:
3b:0b:7d:22:96:75:52:ac:0f:85:36:e6:68:9f:41:8f:65:a8:
8e:77:7d:06:ee:f2:db:94:b4:ca:2a:4d:ee:8c:29:f0:46:57:
2e:59:79:c2:6c:16:44:22:74:2c:8a:ca:74:d3:f6:20:f9:9f:
2a:f8:c5:e4:ee:2a:25:a8:76:44:a3:ca:64:1a:69:17:52:a9:
5f:3b:f4:d6:90:a6:07:e3:dc:99:98:4b:b2:37:af:55:bf:c5:
78:40:44:e5:d5:1f:18:18:15:fd:75:e7:aa:eb:cc:66:68:1b:
3c:61:37:45:b1:aa:53:25:b7:cb:24:0f:0e:6f:13:88:26:e6:
fa:6e:d8:24:00:73:07:bc:c8:ea:0c:7a:87:15:1c:2a:1e:37:
f8:c7:3a:12:b7:e1:68:50:19:25:97:a5:6c:25:41:75:48:2a:
07:06:53:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:36 2025 by rpki-client