Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/147cbf63-4fb3-381c-b7fa-8c9cd45e68a3.roa
File: 147cbf63-4fb3-381c-b7fa-8c9cd45e68a3.roa (raw, json)
Hash identifier: dgeUkoVUwv1GQZVJ7Z5pR4HLP3W6A/ymiM2VGQ4t57c=
Subject key identifier: 1C:15:D4:80:D1:15:A8:82:BA:38:3F:BE:B2:9A:B3:5E:43:2A:C5:1D
Certificate issuer: /CN=4454f19d-c14e-499f-8d66-357970248d2c
Certificate serial: 010D0C9F43285849446945694540F693F9A10B00
Authority key identifier: B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/147cbf63-4fb3-381c-b7fa-8c9cd45e68a3.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 2914
IP address blocks: 199.192.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:45:69:45:40:f6:93:f9:a1:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4454f19d-c14e-499f-8d66-357970248d2c
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=72bb8038-121b-4623-8c73-e4f1efef865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:e3:47:73:a8:6b:74:69:63:28:f2:d6:21:
ce:ae:27:d8:05:7a:f0:c3:6c:e3:42:36:e4:aa:af:
8e:41:a8:2e:97:b4:0a:50:57:c8:b9:fc:db:62:63:
b5:fb:26:0c:d9:68:f4:bd:c9:ce:b0:80:64:2a:c0:
3f:0d:86:b7:ff:5f:9e:50:8f:f3:a7:b9:c0:6a:31:
80:e6:a7:67:59:e4:a3:d5:ac:d4:0b:eb:b7:bb:30:
13:45:0e:b0:27:59:49:83:54:95:81:d4:79:18:9c:
f4:64:eb:a5:a9:50:1c:c8:85:6c:55:b4:40:79:57:
ea:37:c6:71:33:bd:45:6f:04:2c:fa:28:ea:ad:0e:
61:97:95:c9:68:a4:d0:df:c1:d7:18:47:b7:5e:77:
62:1c:99:0b:47:19:cf:85:50:1c:8c:dc:51:e7:9f:
88:69:3d:13:95:d2:f5:19:0b:34:6f:2e:d5:6f:92:
f7:3a:9f:75:3e:6c:e3:3a:da:2b:8c:3e:11:36:f6:
4b:55:6f:f4:11:76:ad:bc:50:b7:56:2e:8f:1e:9c:
3f:52:bf:5e:73:2d:2e:21:c0:47:6f:48:1c:0a:e7:
bb:24:dc:b1:80:8b:cf:60:34:f3:72:d3:49:6a:3b:
41:bf:bc:20:88:e6:63:18:f8:78:34:6c:3a:08:de:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:15:D4:80:D1:15:A8:82:BA:38:3F:BE:B2:9A:B3:5E:43:2A:C5:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/147cbf63-4fb3-381c-b7fa-8c9cd45e68a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c/4454f19d-c14e-499f-8d66-357970248d2c.crl
X509v3 Authority Key Identifier:
keyid:B9:0C:5E:AF:85:13:1F:12:3D:E7:CF:D6:CA:F2:5D:54:16:9C:6E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4454f19d-c14e-499f-8d66-357970248d2c.cer
sbgp-ipAddrBlock: critical
IPv4:
199.192.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:aa:1b:b8:0e:12:49:52:c8:a6:66:85:57:ac:f7:a0:b8:aa:
1a:34:29:73:41:e5:a9:b3:e2:6e:1b:39:8b:c7:6a:be:9f:61:
eb:12:ea:e9:cc:aa:7b:41:e6:66:19:eb:e6:e0:56:d4:ff:81:
48:21:1b:49:d7:f7:2d:3a:3f:5b:68:bc:ae:e1:3d:ca:75:26:
85:cd:58:bf:fe:94:54:31:61:36:a3:fd:81:fe:ce:e6:4a:74:
ae:37:e3:3a:34:ea:87:cb:36:e4:e3:a8:8e:d7:98:2f:a9:f1:
fe:fa:cb:3c:64:9f:ea:50:22:b6:49:37:13:cb:9f:fe:2d:25:
45:d8:5e:1f:9b:8f:5b:14:2b:dc:3e:99:65:83:b3:53:85:1f:
81:fa:4e:7b:05:d0:43:3e:46:84:86:fa:c1:b6:21:35:34:93:
c1:ae:b2:27:8f:f0:a5:96:2d:4d:ec:97:36:d7:0f:69:b2:c0:
f7:2e:14:63:8f:f0:8b:3a:30:7b:f0:ff:2a:ac:0b:d2:d2:05:
4e:0d:2b:92:3b:cf:c7:8e:22:11:85:ac:c8:8f:c8:a2:2f:62:
38:39:cf:d1:20:13:dc:85:6d:99:78:7a:0e:9c:b0:fe:43:8b:
b9:b0:ad:0f:56:16:47:35:8f:13:da:48:2c:81:15:07:ec:b6:
3a:93:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:06 2025 by rpki-client