Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/519783cc-f605-3482-abf1-0b9682dfd00d.roa
File: 519783cc-f605-3482-abf1-0b9682dfd00d.roa (raw, json)
Hash identifier: RmoLt6Zfe6g1yDNZ+ZhcIC+rGCZ7ucjceA+rYSAUfHE=
Subject key identifier: 68:F7:4D:99:53:F8:B8:FB:03:EF:3B:41:27:72:91:C3:8F:D8:ED:B5
Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Certificate serial: 010D0C9F43285849218402E5219067940C63DBC0
Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/519783cc-f605-3482-abf1-0b9682dfd00d.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 14618
IP address blocks: 199.19.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:02:e5:21:90:67:94:0c:63:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=a20aecab-909e-41c8-8012-0ab084a43167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:43:20:02:31:fb:7f:d2:3a:0f:e3:10:53:48:
8a:4f:ac:8f:46:46:55:f9:02:05:88:35:04:72:70:
b0:06:ee:f7:56:61:6f:2d:64:13:01:64:a1:2a:68:
45:e3:6a:2a:bf:70:d4:52:e8:06:27:6b:b1:4a:aa:
5d:41:ef:fd:03:d3:21:47:b2:3a:52:e7:97:1f:f8:
81:d5:b3:8d:67:2e:47:04:c2:e0:56:49:3f:a9:df:
26:0e:04:f2:7e:f6:14:ad:e5:62:96:8d:79:81:13:
cc:b8:82:94:de:2e:8f:72:cc:05:43:c8:20:7f:4d:
38:62:3f:5a:a3:52:3f:24:91:85:9f:e9:36:69:1a:
d9:ed:86:74:ab:3b:2d:8c:a4:2c:07:58:ba:68:13:
53:05:87:f5:e2:da:30:98:70:88:db:2f:4b:b7:aa:
29:43:7a:12:35:69:26:07:85:a3:10:28:1c:0f:b0:
9c:1f:d8:40:27:49:fe:24:eb:04:d0:6f:2e:bd:bf:
1d:ae:27:44:78:f0:c8:86:3c:4e:e2:ff:46:a5:22:
13:5f:cd:a8:62:cf:11:9c:42:d3:f5:ea:73:99:7f:
ca:78:55:2d:f0:95:77:58:7c:8b:aa:4d:96:3f:54:
fa:39:ee:33:7f:40:04:ff:66:dd:f3:b6:8f:78:1f:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F7:4D:99:53:F8:B8:FB:03:EF:3B:41:27:72:91:C3:8F:D8:ED:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/519783cc-f605-3482-abf1-0b9682dfd00d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl
X509v3 Authority Key Identifier:
keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
sbgp-ipAddrBlock: critical
IPv4:
199.19.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:9a:b1:e3:47:fc:d8:73:89:4a:de:55:9e:c6:75:c3:83:11:
4f:22:03:53:e7:fc:6e:ba:64:fd:aa:5b:d0:9b:b4:ff:ef:ac:
bc:f2:84:36:19:1f:e3:65:eb:69:57:ee:ec:2b:34:70:f4:d8:
58:96:cd:60:63:b2:ef:16:ea:da:37:54:85:d4:04:ed:08:b7:
0f:0f:56:b8:d4:06:b3:ed:f6:c6:c4:d4:3e:6f:40:54:7a:24:
25:5a:18:6b:ba:60:bd:19:e9:a1:6c:fb:32:19:c0:3c:2f:c9:
6d:cd:3e:07:bb:3c:14:91:a8:e4:31:ea:72:ce:83:ae:bf:9e:
58:69:bc:4f:46:51:8d:f7:7c:a3:e7:7d:d3:b0:c3:ef:0b:c5:
3e:6c:e8:90:38:8b:a7:89:16:b4:89:3f:fd:22:45:23:01:9b:
f8:1d:50:e1:0a:58:61:a1:e0:08:92:4e:80:dd:2f:07:2f:9d:
2c:e0:c4:84:7c:78:02:37:bf:11:7f:cf:de:44:63:3a:47:96:
80:3b:ef:2d:24:2a:e2:d6:94:18:e9:99:de:a6:bf:88:16:6e:
91:13:5c:16:74:e9:42:cd:4e:99:f4:77:71:26:e0:a3:89:f3:
c5:b7:72:93:06:a3:4a:c9:f1:8f:84:72:49:d3:a9:96:c2:40:
32:4d:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:34:00 2025 by rpki-client