Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa
File: 459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa (raw, json)
Hash identifier: rpmGisVs3LePNLMUPK+07m2/mTzq3+CTjFnXpj1h1UY=
Subject key identifier: BF:59:5F:45:EF:D3:C2:B4:23:A1:6F:6B:FE:1D:D7:F9:FE:CD:23:AE
Certificate issuer: /CN=949c3388-1f02-441c-9195-5c40d8fd63d2
Certificate serial: 010D0C9F432858487A208BAA7ED19330A1297000
Authority key identifier: 68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 204.122.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:8b:aa:7e:d1:93:30:a1:29:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=949c3388-1f02-441c-9195-5c40d8fd63d2
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=388fb7f2-744f-4f5d-9b72-5d566b180fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:aa:d3:cd:04:4f:f2:82:41:a1:7f:ba:e4:
72:86:ab:ea:9a:a4:71:af:48:95:12:1e:c5:35:bf:
f3:d5:ff:05:8e:7e:cf:60:b9:2d:11:7e:fb:f1:27:
4b:d5:43:8c:e2:81:ec:ff:c2:b5:80:ab:e0:4a:aa:
e3:c8:60:f4:c9:0b:08:0e:7f:15:d8:3c:41:c4:5c:
14:5d:53:f5:6f:2e:07:d1:e8:a8:3c:df:e4:41:52:
85:48:2c:15:e6:7a:68:87:2f:5e:06:a2:bc:26:b0:
15:41:37:36:f4:62:0d:dc:33:1c:36:15:9d:8c:5f:
17:68:a9:41:f3:0f:39:9c:6c:24:e8:8e:5c:f3:17:
45:bd:6e:e0:94:30:5d:8e:60:33:c0:dc:d0:b7:b2:
e3:01:ed:44:7c:b4:0e:8c:3b:ac:73:1a:bd:40:41:
4a:e5:91:2a:10:7a:c1:92:3c:38:00:3c:34:bb:30:
32:aa:c4:89:8b:49:d2:6d:06:0d:47:fb:54:d5:23:
0a:d7:ba:e6:f8:e4:e5:a6:64:f7:21:25:b7:77:e4:
9f:41:53:d6:c3:86:e3:0a:7b:65:11:72:9d:ed:bc:
2c:66:ca:d8:e6:39:23:c0:5e:c3:00:8e:59:52:97:
40:88:de:ed:08:fa:8e:9b:68:67:b0:e0:09:d5:c8:
5a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:59:5F:45:EF:D3:C2:B4:23:A1:6F:6B:FE:1D:D7:F9:FE:CD:23:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/459937a6-c7ab-3c46-86b9-565e3bd7bbf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2/949c3388-1f02-441c-9195-5c40d8fd63d2.crl
X509v3 Authority Key Identifier:
keyid:68:2C:71:CE:90:9C:5F:87:15:0C:2C:E6:93:67:15:C7:A9:AF:10:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/949c3388-1f02-441c-9195-5c40d8fd63d2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.122.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:e9:29:23:4a:81:fe:f9:f3:38:cd:42:be:ce:d0:c4:86:5d:
72:af:9c:44:98:07:08:33:2f:0b:e7:a1:7a:68:fa:c2:b8:2b:
d6:09:72:46:63:56:f0:6f:64:09:02:7b:ca:7c:e6:29:0f:54:
9c:47:4c:2c:d4:46:de:da:67:fc:d6:5e:4e:f1:84:6a:79:8a:
2a:c5:94:33:5a:11:59:0c:b7:7a:33:fc:c5:d0:2e:ec:05:77:
57:dc:3e:e3:5d:f0:e5:b4:70:da:bc:cd:85:03:53:03:3a:bf:
ce:0d:1f:0e:5b:2a:3c:26:0b:b2:fd:3f:c3:fc:93:66:80:15:
ab:ff:79:c8:9a:f2:68:af:28:30:aa:57:2c:da:91:f3:08:58:
22:77:67:09:0a:d2:9b:de:66:92:17:17:93:3a:ba:1d:10:c1:
e7:38:32:34:ca:a9:ff:dc:b9:ac:28:e0:70:a9:86:b9:76:02:
99:d1:9c:93:ab:87:7b:45:2c:a5:cd:e7:02:f2:86:09:c3:34:
7a:13:f3:e5:82:be:ee:43:7e:5c:fd:6c:9a:93:5d:a2:4c:04:
c4:e9:26:55:37:a0:1d:7a:ea:35:7b:ee:a9:45:a0:4c:f2:9a:
82:53:13:67:66:7b:6d:48:82:c9:5f:4f:f0:53:a9:dd:67:2f:
a3:04:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:20 2025 by rpki-client