Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa
File: 825702a4-e267-3fed-801c-e21c3ef74911.roa (raw, json)
Hash identifier: i9wSENd1psaYhJHCRCgWLw6VFSjjzZZKYfFYQCUfLKU=
Subject key identifier: 4A:EF:91:E7:0C:83:4A:E5:0A:14:56:7C:B6:4E:32:2A:B8:DF:08:3D
Certificate issuer: /CN=5a456a73-032d-4675-8f0a-2db7b1e58168
Certificate serial: 010D0C9F432858490021580DBFD9E47102840480
Authority key identifier: 85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 53594
IP address blocks: 198.200.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:58:0d:bf:d9:e4:71:02:84:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a456a73-032d-4675-8f0a-2db7b1e58168
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=69224477-23d7-4ce5-b0a3-e4735f787090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:a9:62:2c:bd:a9:7c:dc:22:f0:33:4e:83:
45:b6:37:5c:7c:69:c5:4d:7c:a6:da:7d:be:de:2f:
51:99:c8:6d:0d:ce:69:7d:70:4e:a5:50:64:cd:69:
97:cd:3e:d1:07:3e:cc:e6:d6:a4:0e:ed:6b:ed:9e:
08:4a:61:6d:17:b7:9d:50:b4:72:aa:ba:e7:8e:f7:
37:15:99:8c:b0:e2:63:8f:4b:30:cd:b1:be:fe:3f:
a7:2b:f1:8c:40:f4:0b:15:30:dc:e8:69:88:4f:f0:
bf:f9:b5:e2:f4:92:68:9c:98:67:09:f5:a4:be:c0:
bc:70:95:b9:44:67:fa:a3:33:e5:52:d6:60:bf:ea:
9f:9d:1a:ff:0d:d4:e2:20:26:c2:3a:51:ef:c5:93:
6a:03:82:2d:d7:a6:02:39:f6:0b:63:45:71:fb:1a:
de:c3:ac:e5:84:e7:20:99:67:2a:3b:41:12:fd:89:
8a:79:48:46:77:b7:0c:e6:49:8d:35:49:71:59:bb:
d7:1c:32:bb:46:30:c0:4b:f9:69:ba:5a:3d:a7:8a:
5c:bc:97:97:49:b0:1b:39:c0:f5:44:64:3c:22:18:
6a:7e:e9:48:38:f0:6e:7c:9b:69:80:59:8b:de:05:
53:4a:35:93:26:a3:41:bf:d0:ff:a7:46:c6:cb:f9:
32:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EF:91:E7:0C:83:4A:E5:0A:14:56:7C:B6:4E:32:2A:B8:DF:08:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/825702a4-e267-3fed-801c-e21c3ef74911.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168/5a456a73-032d-4675-8f0a-2db7b1e58168.crl
X509v3 Authority Key Identifier:
keyid:85:9F:34:F5:35:BE:D5:53:DD:C1:EF:BB:7F:3D:49:7A:46:55:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a456a73-032d-4675-8f0a-2db7b1e58168.cer
sbgp-ipAddrBlock: critical
IPv4:
198.200.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c7:eb:17:67:e4:a8:43:06:ca:26:af:95:ed:bb:38:2b:06:
49:98:1b:ee:c2:e6:ff:ef:f5:0a:f8:ae:dd:90:56:ef:85:1f:
ae:c8:ee:14:95:39:2a:d0:b3:32:1a:53:0e:50:bd:a4:71:50:
bc:d7:fd:6f:85:1b:24:9b:fe:55:0e:2b:0d:8b:01:db:c6:b9:
13:02:1f:6d:bd:d6:35:b6:fd:cf:1d:1e:c1:67:28:f1:6a:bd:
94:37:ad:29:26:ad:63:30:21:89:5e:71:2e:a4:25:3f:2d:6f:
97:50:5f:fb:88:ff:89:07:b1:dd:37:b0:be:6c:97:cc:07:40:
b0:6c:5a:a0:bb:1f:70:2a:c9:54:3c:e5:16:1b:34:c0:3a:78:
4a:e0:34:4e:d3:d0:48:48:0f:b1:59:de:8e:a1:79:34:5e:3b:
b2:dc:50:c2:a0:f0:ae:d8:49:13:43:76:d2:35:c9:ff:e0:8f:
60:00:86:69:0e:97:c6:be:22:23:bb:e6:c4:6a:ff:ff:c4:08:
f3:cc:fe:fe:5e:0b:38:c8:32:2b:0b:88:99:5f:92:65:2a:9f:
10:3a:5d:8b:02:11:52:a9:a9:f0:56:68:21:9d:0a:52:b9:fb:
50:e4:5e:05:45:60:45:0a:3e:76:12:fb:6f:e1:56:0b:60:68:
f5:07:a8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:06 2025 by rpki-client