Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa
File: f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa (raw, json)
Hash identifier: NcGe+BPWq9WcYjfC7RuPeYJXlNKLZ/BENi2KVPtD9ZQ=
Subject key identifier: 3E:B7:6E:72:77:3F:C0:47:1B:31:3A:33:44:1A:45:E5:09:FF:89:8A
Certificate issuer: /CN=5b68d593-6e81-44a9-9e8b-fede7b5621ed
Certificate serial: 010D0C9F432858494BE599F0D58C8ACA29DF3380
Authority key identifier: 06:CF:E3:01:1E:92:B2:C6:66:CD:51:98:4D:60:12:A8:51:9D:08:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa
Signing time: Mon 24 Mar 2025 17:22:04 +0000
ROA not before: Mon 24 Mar 2025 17:22:04 +0000
ROA not after: Sun 22 Jun 2025 17:22:04 +0000
asID: 40943
IP address blocks: 199.167.208.0/22 maxlen: 22
208.91.184.0/22 maxlen: 22
2604:3d40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:e5:99:f0:d5:8c:8a:ca:29:df:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b68d593-6e81-44a9-9e8b-fede7b5621ed
Validity
Not Before: Mar 24 17:22:04 2025 GMT
Not After : Jun 22 17:22:04 2025 GMT
Subject: CN=9ce0e12a-c41d-4823-8c56-812dbc33ebae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:83:d9:a7:1c:d3:59:8a:0b:3a:dc:8a:e9:18:
e0:7b:06:d3:a9:16:fa:01:34:a5:3e:35:f4:ed:20:
1b:05:b8:4a:32:97:17:00:60:f7:b1:20:23:8c:9a:
e9:6f:31:7c:49:f8:41:13:77:9f:6b:22:27:69:ca:
3d:b3:45:a1:8e:6f:85:df:82:e5:54:65:a1:10:e4:
96:e0:fa:fa:9a:6d:2b:f5:d2:bf:11:e2:22:17:c5:
8d:8c:b3:4a:32:c6:6b:2c:0b:cd:3d:84:71:77:b1:
d1:55:42:ba:27:97:4c:9a:7c:39:d0:5d:9c:58:37:
4f:3f:d5:e8:2d:4a:38:f2:45:69:63:17:82:0d:dc:
c8:35:5c:f8:25:bd:92:e7:41:bc:e2:39:af:e6:e3:
00:5f:84:22:37:1e:56:5e:7b:8b:25:39:95:01:01:
e0:f3:d9:f8:7b:cb:04:9e:ea:dd:bb:f8:6c:e1:5a:
f3:e1:fa:60:c0:1f:3f:47:48:6a:63:b1:1f:b4:6c:
c0:3e:d4:74:23:c0:fc:46:29:b6:7f:4b:36:d1:ec:
bf:75:58:44:8a:8c:4e:4c:85:62:e6:e0:28:be:20:
e9:44:bd:13:8f:87:12:31:94:60:f4:de:07:8f:f4:
d6:88:cb:ce:8d:81:85:74:18:9b:bc:d3:56:e8:f5:
a1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:6E:72:77:3F:C0:47:1B:31:3A:33:44:1A:45:E5:09:FF:89:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/f1e3b3f0-6eca-33a6-9ba1-c95d919853ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed/5b68d593-6e81-44a9-9e8b-fede7b5621ed.crl
X509v3 Authority Key Identifier:
keyid:06:CF:E3:01:1E:92:B2:C6:66:CD:51:98:4D:60:12:A8:51:9D:08:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5b68d593-6e81-44a9-9e8b-fede7b5621ed.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.208.0/22
208.91.184.0/22
IPv6:
2604:3d40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:bf:a5:3c:4a:d1:99:46:1a:bf:51:24:4b:d6:04:3c:36:ec:
6c:e6:c5:7f:42:8f:da:52:fd:bd:f8:a4:92:ba:f4:a3:73:a5:
7b:8b:5b:7a:52:a8:65:b6:6d:01:85:72:a4:fe:6b:8a:97:b0:
b8:92:47:1e:82:01:f2:68:bd:08:6e:59:30:fb:61:11:66:14:
54:6a:2f:f5:b1:97:e2:c5:b5:99:fe:23:ed:91:eb:6c:68:22:
d5:71:72:91:2c:f4:11:45:00:17:d8:86:d2:9a:6a:25:6a:43:
cf:02:c2:f5:93:2f:3c:fd:d1:7d:9d:78:da:16:f3:cb:1d:94:
97:8c:01:a9:05:a5:33:f6:86:43:7b:db:ec:a0:9a:8a:f4:36:
e1:c1:e4:6c:49:b7:5c:e1:ce:28:0c:e8:61:c0:7e:68:d1:c0:
92:fe:06:e7:94:06:2c:a6:6e:04:d1:46:07:c6:80:e1:19:a1:
2f:75:86:d3:b0:6d:c8:fa:dd:5d:9a:33:2b:13:0e:2b:27:a9:
37:bb:98:27:3b:4e:04:1c:93:6e:c8:02:cc:a2:c4:76:22:21:
9a:03:de:13:4c:19:60:a1:f6:e5:64:06:15:9f:84:62:0b:f3:
57:fa:f2:48:ed:a9:64:3a:b6:7a:48:12:5c:bc:20:40:6f:f1:
c0:72:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:57 2025 by rpki-client