Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
File: 85936ab9-681e-3063-9c40-0a46025e36e9.roa (raw, json)
Hash identifier: rsNFryb/LmlgUN9fWPbNp0gXrXaS6gh+mKspRE3uK3c=
Subject key identifier: 03:F6:9E:E2:7D:63:78:3E:7C:8B:91:00:81:80:77:22:7D:02:0F:42
Certificate issuer: /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial: 010D0C9F4328584929E3C7502FD713C492601400
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
Signing time: Wed 12 Mar 2025 13:00:53 +0000
ROA not before: Wed 12 Mar 2025 13:00:53 +0000
ROA not after: Tue 10 Jun 2025 13:00:53 +0000
asID: 64243
IP address blocks: 205.213.200.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:29:e3:c7:50:2f:d7:13:c4:92:60:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
Validity
Not Before: Mar 12 13:00:53 2025 GMT
Not After : Jun 10 13:00:53 2025 GMT
Subject: CN=5401751e-1fc6-4387-8b51-c06db99bfbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:8b:ef:d8:6a:73:32:d3:96:a3:9b:b7:0b:
a4:53:35:ff:1a:a6:37:a0:bf:c2:0a:0c:94:b2:4a:
07:ae:28:44:4b:59:be:44:2e:1f:24:f1:21:39:fe:
45:eb:ce:56:38:ac:1a:29:16:78:a2:3f:ad:6e:b8:
ed:f4:d8:2e:cc:60:9d:f5:b4:40:d6:74:ab:e6:ab:
81:8c:56:56:46:91:c8:fe:78:d1:b6:52:03:06:5e:
f7:70:ad:a8:b7:8b:5d:e3:19:11:53:6a:38:3a:1f:
05:89:49:b8:88:f9:3a:da:3b:25:40:ea:8d:7f:2c:
e4:7b:6c:6c:f5:52:15:86:c7:c5:54:f1:8a:a5:44:
c9:36:30:bc:68:42:5b:06:bc:cd:b4:45:f4:69:97:
35:4d:15:93:45:16:4c:99:0a:f6:bc:80:53:05:b3:
b6:3c:1c:9c:d7:62:30:aa:84:66:31:83:08:59:14:
56:4c:13:07:9c:83:65:16:5d:1a:94:fc:41:59:ae:
da:05:1d:4e:82:31:65:b9:da:8a:4d:83:4e:84:3f:
1b:b3:7b:db:4e:07:e0:de:93:10:d4:2a:2b:66:0e:
c8:5d:6d:33:ed:04:8c:78:97:5e:79:d0:1e:51:7b:
27:c4:29:62:08:bd:22:fe:39:c7:78:4b:33:70:5d:
bc:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F6:9E:E2:7D:63:78:3E:7C:8B:91:00:81:80:77:22:7D:02:0F:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/85936ab9-681e-3063-9c40-0a46025e36e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
X509v3 Authority Key Identifier:
keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
sbgp-ipAddrBlock: critical
IPv4:
205.213.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:eb:4f:c7:c3:27:9e:f5:16:8a:cd:23:d5:da:d9:f8:32:5a:
ad:c0:d0:55:e1:80:cf:af:98:a2:3b:d4:42:05:23:a2:46:fb:
86:69:3c:f3:2f:b5:46:5d:dc:0e:49:19:bf:83:2e:29:4f:d0:
16:e2:e4:6c:7a:90:22:69:a4:0e:2d:79:43:5e:89:d8:3c:db:
03:ee:c7:99:a7:5a:85:bd:63:da:ba:3a:65:95:05:30:c9:59:
82:9f:46:38:02:c5:6c:1c:4c:2f:ec:cd:42:1b:b3:43:b0:6b:
5a:9c:0c:9f:29:f0:d0:73:dd:27:6c:b9:5f:95:00:88:ff:21:
bf:2a:36:df:7c:9f:a9:5e:11:3d:47:49:4e:0f:e7:bf:28:6a:
05:c6:68:27:f9:34:7e:a0:cd:58:c9:f1:9b:f9:3f:a4:a6:8e:
fe:1d:39:fb:a4:24:04:15:2c:1c:1f:f0:50:c5:e3:64:09:47:
5f:02:fb:df:9a:d2:05:01:b4:6c:aa:ae:ba:06:6f:a0:7d:c9:
43:dd:17:74:a9:5a:73:17:70:ec:c9:24:f9:43:f1:ef:aa:fc:
10:12:06:79:a1:c8:1a:ee:91:19:7e:e7:5d:57:a3:f5:bd:75:
29:b7:02:6c:b2:84:b3:7d:f3:56:f4:cf:af:bc:90:06:a8:6d:
3f:ab:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:03 2025 by rpki-client