Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/38aff81e-4d57-3a68-a63f-70e16a421366.roa
File: 38aff81e-4d57-3a68-a63f-70e16a421366.roa (raw, json)
Hash identifier: aIk0E0iPLWgw56LJlvEZjGo36ZZYPsiIBrellfcUzis=
Subject key identifier: C5:81:7F:69:44:98:10:9A:87:69:50:85:C0:85:87:03:10:71:E0:04
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C441C0ABE48E2A67B0B180
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/38aff81e-4d57-3a68-a63f-70e16a421366.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 199.232.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:41:c0:ab:e4:8e:2a:67:b0:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=9bc928db-5eea-4a1d-8bbf-1ccf102ce7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:d0:7c:97:b8:df:f5:f7:8a:b0:8b:8c:5d:
ca:2d:5b:f4:7c:b4:fc:78:2b:a5:cf:ff:c2:0e:7c:
8d:19:1c:d0:c0:eb:26:71:64:22:a3:85:ff:30:72:
8c:64:f8:63:c3:6d:24:06:b8:f6:cf:7f:42:13:1e:
2b:f6:58:31:53:0f:09:aa:b5:26:3c:51:62:58:f3:
7a:a3:77:ea:b5:79:61:91:20:8f:b5:3d:db:61:13:
fa:ac:c2:aa:91:a9:47:02:78:6f:ba:92:18:74:e4:
e3:5e:5f:8d:fa:2b:93:d0:9c:73:c2:c6:17:3c:87:
78:4e:ac:c2:56:ec:81:6e:b4:e6:18:c9:45:fc:02:
0a:7e:82:2c:79:24:4f:de:24:0e:0b:e0:57:74:fd:
74:9f:49:de:8e:dc:93:5f:3c:a2:7c:85:d2:97:f0:
af:d9:db:25:0d:3d:f1:fa:62:04:34:f2:bf:a9:58:
47:1c:7d:c9:d4:8a:ca:3e:54:3a:35:fd:9c:21:eb:
71:12:1b:83:3f:65:20:1e:70:77:9d:f3:5b:7e:92:
8e:e9:6f:cb:c2:bd:e7:6d:99:1c:21:f8:ec:79:b1:
d8:70:ef:dc:93:a8:08:f7:87:ba:57:c7:7d:d7:12:
ab:83:53:41:08:d0:9d:cc:12:68:a8:0e:b1:80:ad:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:81:7F:69:44:98:10:9A:87:69:50:85:C0:85:87:03:10:71:E0:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/38aff81e-4d57-3a68-a63f-70e16a421366.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
199.232.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:3e:ac:f4:7f:ef:75:8c:4f:ca:5b:21:75:a4:0c:72:d7:6e:
ea:f4:ba:96:b6:27:52:ec:de:38:15:fe:c2:16:6b:d9:90:29:
a4:d9:28:83:e8:7c:e1:97:ef:79:a9:a3:5f:b0:2c:09:86:3e:
b0:d3:25:e1:a4:12:9d:7e:df:5a:fb:2c:99:b4:cc:9d:6e:e2:
4c:87:e3:08:db:2b:75:10:63:3f:f2:1a:ed:ce:7f:c9:8e:7e:
87:2c:22:9d:f4:34:f0:18:fc:cc:fd:90:4e:71:5a:0c:ae:66:
2c:3a:34:e8:cb:10:7c:57:e0:d9:c0:2c:e3:7f:b3:4e:73:c0:
4a:c2:f7:e7:e7:e0:8c:f1:03:d2:7e:0c:86:1c:00:36:60:ec:
6a:35:d4:e1:a1:4d:1d:2f:ea:20:66:4f:bc:b6:39:71:9d:14:
4e:20:af:c2:01:2f:a3:62:2c:79:ea:8a:cd:14:02:56:e6:ee:
7e:96:70:a7:76:4b:77:be:f4:db:8a:36:3f:b0:1e:bd:ba:21:
ed:9c:3b:79:dc:c0:17:a9:dc:17:0d:31:9f:15:af:84:43:b0:
34:33:11:63:a1:9b:4d:9f:2a:07:55:e6:fe:af:90:94:38:08:
97:fd:cf:da:06:9f:7b:d6:86:3a:38:5a:a3:7a:3c:3a:c9:8f:
59:0f:50:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:52:52 2025 by rpki-client