Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4c2b440f-18d8-3a64-86a4-afcaa33859e6.roa
File: 4c2b440f-18d8-3a64-86a4-afcaa33859e6.roa (raw, json)
Hash identifier: owAhXkHL46lqKd9v5og416i32NzgjqTBo/AKpbZD18c=
Subject key identifier: 70:7B:97:0B:D4:6F:3B:E3:80:10:71:22:6F:F2:CE:24:53:74:AC:E1
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F43285848E00660A7486357B8A1986680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4c2b440f-18d8-3a64-86a4-afcaa33859e6.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 17359
IP address blocks: 199.255.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:60:a7:48:63:57:b8:a1:98:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=6b8e96a0-aaae-40d9-8cc9-dc922f66f0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:6c:19:db:db:18:cf:28:73:a9:37:49:59:
74:fc:ab:ef:49:93:35:69:2c:6c:e4:bc:d2:e0:f3:
09:cc:fa:e2:cf:09:16:0a:e1:8c:a5:f5:a2:2a:8d:
e2:ac:52:bf:d7:7a:b9:aa:dc:f1:58:32:a1:ba:4a:
28:99:6c:d2:88:d1:2a:a6:4a:b4:62:16:7c:1d:d3:
16:80:6a:94:53:82:c7:13:0a:3e:f9:96:6b:ea:5a:
b9:ac:67:13:08:aa:ec:69:46:84:bd:69:54:e6:6b:
50:d0:bc:70:2d:f9:c6:ee:60:08:54:97:66:2f:23:
4c:2d:cd:77:7c:e2:12:1a:54:b5:b0:5d:d0:98:4d:
48:00:a2:bd:fd:fb:3e:d7:7b:94:94:61:eb:f7:b1:
64:b4:0d:84:b7:a9:7b:c0:f2:f4:ee:a1:d1:61:9e:
3c:5c:4f:75:46:b8:53:fb:5c:0e:32:01:0a:ec:dd:
6f:db:ff:dc:4d:06:fe:56:25:d1:3e:0f:f2:0e:5b:
d2:98:31:48:3d:c1:63:7d:d3:59:9c:e7:c8:1f:41:
c8:d9:f7:ab:95:4d:39:bf:9c:7d:59:b7:57:82:b7:
ff:f6:3d:02:dd:10:b5:16:8a:f3:9d:18:f4:c6:21:
6a:0c:1e:9b:57:95:56:30:25:83:38:cc:1e:87:ab:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7B:97:0B:D4:6F:3B:E3:80:10:71:22:6F:F2:CE:24:53:74:AC:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/4c2b440f-18d8-3a64-86a4-afcaa33859e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:32:fd:a5:cb:25:cb:2a:73:01:6f:4a:eb:ed:37:5f:fb:57:
58:f0:02:17:c1:f1:f5:29:18:eb:8c:0e:2f:f9:83:26:0b:ed:
6c:58:94:cc:9c:f9:0e:aa:30:d0:ea:31:89:14:33:cc:6a:08:
ec:e9:46:20:59:41:e2:a1:51:33:20:0e:91:f7:40:bc:69:63:
d6:7e:54:49:bb:68:75:fa:76:9c:69:36:62:da:12:26:7a:4e:
84:e8:2c:c1:25:f4:3d:67:17:8a:1a:d3:6e:f8:4f:75:3c:05:
ce:cf:63:e7:e6:ae:0c:75:76:f1:9a:73:3b:54:a5:82:f3:91:
fa:ce:04:14:b3:44:85:1c:f4:ff:cb:ba:59:02:3a:13:20:f9:
e7:c7:4a:75:9a:47:59:53:7c:de:c6:19:52:4c:18:88:85:3b:
c4:3e:dd:bf:82:bf:46:4e:73:1e:7c:80:f2:57:85:8e:98:9d:
c5:c4:c0:92:0f:06:1a:25:d5:d4:be:d3:fa:6d:94:8e:65:5f:
7d:37:66:b1:50:6b:02:b9:e4:4b:b9:66:5b:21:fb:5d:c9:ff:
b8:10:d6:55:59:ed:c4:f2:99:73:8c:0d:76:4b:22:56:b1:8f:
c5:6e:43:ec:44:43:8c:80:95:1a:50:90:e8:60:ec:fe:dd:62:
a9:17:bc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:44:24 2025 by rpki-client