Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa
File: baf35b03-5e28-3070-83c6-669f5294e617.roa (raw, json)
Hash identifier: zEkyUdIpPMCoD9Y103TdRRHfKwFRzPZ9fGIWivAkYh4=
Subject key identifier: 2A:14:32:23:1B:68:92:B4:F8:04:FC:B8:C3:70:06:36:8C:6A:39:8D
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB7A9F0F3E98AA5DECAC30
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 99.199.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:7a:9f:0f:3e:98:aa:5d:ec:ac:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=f143abe5-b4e8-4e4f-9bf8-28864c0c0d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:3b:f3:76:d0:17:e5:2f:34:a4:1f:d2:27:
4c:50:9d:a0:ae:7d:a2:8a:6f:59:f5:96:96:63:9f:
c9:06:d4:99:1b:38:6a:08:62:e5:55:b5:30:4d:a2:
a4:17:40:f3:b7:f5:2f:3c:f5:8d:7f:66:33:9c:bc:
c5:09:cc:9a:9b:32:29:d7:23:ba:c8:6b:a8:3f:4f:
e2:10:ac:9c:d3:cd:ae:07:80:e6:19:1d:dd:c8:9e:
1c:11:85:2a:8e:16:41:5d:1a:b8:df:41:02:ff:7a:
fe:3b:ba:4e:81:99:71:90:65:92:93:12:7d:65:ab:
69:66:1d:fe:c8:f1:73:3c:06:da:70:b9:3b:67:24:
43:06:a5:32:d2:c1:8a:90:51:88:1f:5e:3b:4f:f7:
b8:9e:b6:c9:d9:59:a6:d6:16:01:7e:e4:35:fe:03:
99:c2:a9:1b:25:2c:d0:58:ba:71:a6:4b:f7:1f:8a:
63:2d:f6:5e:02:9f:fe:e1:35:7b:74:32:1e:0f:1f:
75:6c:d0:66:8c:e7:c2:6b:2e:e8:3d:79:78:0d:61:
19:ab:0f:3b:15:ce:e7:5d:e9:07:41:d2:4f:9a:46:
5c:15:da:3b:c0:9e:89:7c:bc:0b:6a:9e:7b:23:6d:
0d:91:41:15:8a:f5:f5:21:44:ff:78:32:2c:7d:ad:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:14:32:23:1B:68:92:B4:F8:04:FC:B8:C3:70:06:36:8C:6A:39:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baf35b03-5e28-3070-83c6-669f5294e617.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
99.199.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:90:ac:2e:57:4e:0d:0c:e9:e7:be:8b:1f:0c:1b:c9:40:3c:
8f:80:e1:c7:f1:e2:a5:75:78:4e:24:b8:6a:65:9e:b1:77:36:
e6:8f:4b:7d:d1:db:84:0e:73:e8:20:f3:73:73:f5:bc:b9:c6:
d9:d1:10:fc:9e:a6:06:a2:56:c8:03:bb:96:b2:cf:cf:22:42:
94:92:2c:76:e7:e8:38:bf:70:e3:0d:ff:60:11:67:04:f6:8f:
5b:a7:cd:6f:96:34:e7:02:36:ca:1d:3b:43:15:2a:c5:43:a9:
28:4a:2a:bd:aa:e1:8b:61:db:56:91:22:09:50:3e:01:8b:48:
65:bf:d8:b0:97:b8:e4:05:de:b4:2a:7f:95:41:1b:e4:0b:e7:
47:a4:90:33:f5:37:8f:1d:7d:69:b5:14:ea:04:04:37:dc:62:
01:1b:ef:0e:a6:69:a2:4a:20:45:f0:c9:35:17:79:57:16:2b:
de:87:80:96:66:6c:56:9f:f6:83:2a:b8:84:dc:03:c6:2d:c1:
40:70:22:3b:8c:0c:0b:ca:4d:d0:2a:84:22:ba:d4:2a:67:d8:
e8:ac:62:d5:7b:b7:2b:14:87:0a:90:ec:a3:2d:f7:70:bc:09:
8a:f5:28:d3:b5:b7:e0:19:bb:47:4f:77:a6:8a:b1:a5:78:91:
66:94:d0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:44 2025 by rpki-client