Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a380bde-cea4-4356-b30c-38cc42ab112b/21d7ef7e-4225-3a16-bd2d-e0ebbc4a37ee.roa
File: 21d7ef7e-4225-3a16-bd2d-e0ebbc4a37ee.roa (raw, json)
Hash identifier: MXo3Ac0cYhhixRSMXDYaJfJ1axVKKtBgGlqrj72v1f0=
Subject key identifier: 09:FC:8A:24:75:55:76:BA:A9:E8:32:F2:76:45:F1:94:72:FB:BD:2A
Certificate issuer: /CN=4a380bde-cea4-4356-b30c-38cc42ab112b
Certificate serial: 010D0C9F43285848F65BC9E74E39C4496F2F17C0
Authority key identifier: 73:B7:C5:13:8B:BF:37:5E:BE:FB:08:DB:9A:AC:08:45:8F:94:7F:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a380bde-cea4-4356-b30c-38cc42ab112b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a380bde-cea4-4356-b30c-38cc42ab112b/21d7ef7e-4225-3a16-bd2d-e0ebbc4a37ee.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 21635
IP address blocks: 199.200.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:c9:e7:4e:39:c4:49:6f:2f:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a380bde-cea4-4356-b30c-38cc42ab112b
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=57ad134d-40a2-4d42-89fb-83ce9aae21eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:82:3c:9f:e3:61:33:26:5c:16:84:f2:2d:
4a:19:ee:61:5a:cf:9a:0a:4b:05:06:42:c3:68:ac:
b1:75:4b:de:aa:d1:d5:19:60:cf:4a:fb:0f:88:71:
bd:63:86:c1:09:a1:72:4a:3f:5d:b1:31:02:af:3f:
df:52:9a:54:be:76:92:f2:f8:fa:d9:ca:cc:d0:7a:
d6:47:b0:9b:14:6c:fc:88:b1:aa:fc:4a:c6:c6:7e:
d4:e0:fc:ef:ea:f1:eb:60:a6:80:76:e9:6c:30:9e:
f9:9c:2c:73:63:2b:3b:9d:4c:e6:b3:a4:41:cb:01:
13:93:54:a6:de:4a:c1:6f:ac:5a:95:19:f6:29:90:
a6:6c:af:98:38:f4:a1:02:07:f7:b6:cb:09:65:2b:
fa:6b:86:be:94:c2:b8:55:d8:cf:9a:13:61:ad:74:
1c:48:a5:0a:63:ca:f8:3b:32:4d:01:c0:0d:48:3a:
cd:d2:1d:27:f7:8a:2a:e2:da:da:4c:06:55:ea:d7:
09:a1:a2:1a:fb:ae:b5:cb:78:26:f7:76:f8:85:17:
c1:ff:51:cc:0a:ff:2f:71:e1:3f:ae:15:3d:93:b7:
e7:80:db:14:7b:44:c2:47:6a:f6:86:e7:ac:66:e2:
01:c5:64:ba:90:81:54:91:67:76:8d:59:78:1b:60:
eb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:8A:24:75:55:76:BA:A9:E8:32:F2:76:45:F1:94:72:FB:BD:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a380bde-cea4-4356-b30c-38cc42ab112b/21d7ef7e-4225-3a16-bd2d-e0ebbc4a37ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a380bde-cea4-4356-b30c-38cc42ab112b/4a380bde-cea4-4356-b30c-38cc42ab112b.crl
X509v3 Authority Key Identifier:
keyid:73:B7:C5:13:8B:BF:37:5E:BE:FB:08:DB:9A:AC:08:45:8F:94:7F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4a380bde-cea4-4356-b30c-38cc42ab112b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.200.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:85:30:f1:5f:da:1d:78:c6:9e:8c:70:6b:2d:34:a1:bf:90:
5a:5e:11:c2:c4:a8:da:c6:81:11:da:ba:b3:8f:31:68:83:2a:
dd:6c:af:fc:15:83:2a:2d:54:d7:2d:64:8f:45:72:bc:78:bc:
6a:9e:e3:76:1d:54:25:ba:c4:68:23:b8:62:85:32:05:94:b9:
4b:8d:13:0e:cc:ec:d5:d9:90:1e:7e:63:e8:f5:a2:15:72:71:
c9:26:59:b2:83:44:48:c3:5d:be:90:21:8c:df:bf:ee:2a:c9:
a7:d4:32:80:df:5e:82:25:ee:8c:bc:2c:0e:f7:78:39:2b:2c:
e5:d4:21:81:07:76:ec:d7:5f:a2:2e:66:b0:2d:ef:3d:95:4e:
1b:85:a8:d6:32:7c:e1:38:10:4d:7e:73:85:ba:4a:b7:f9:7e:
b4:47:ac:0a:64:4c:4c:94:1e:de:df:c8:86:28:69:ee:54:e4:
d8:bc:7c:8f:d5:21:58:90:cc:a9:5c:7b:9e:a5:a1:9c:39:d7:
6b:c3:b2:e2:e2:94:ff:01:f2:ad:a4:66:16:eb:43:f5:fe:7a:
5b:f9:b7:40:c6:45:b2:d6:6b:76:6e:59:07:16:8f:d9:07:5c:
e4:20:9b:57:a1:61:ba:e2:48:56:02:cd:79:18:b9:44:7e:bf:
df:99:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:13 2025 by rpki-client