Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b006969f-0250-3b5e-a6f8-9a0503aae10c.roa
File: b006969f-0250-3b5e-a6f8-9a0503aae10c.roa (raw, json)
Hash identifier: fKdM14x+cSjjp0hsFR1A862yJJZqFbvJ43ptxtPMC+o=
Subject key identifier: 8D:06:70:43:2B:7B:C1:72:B9:2D:08:F5:8B:76:37:8C:68:8D:9D:1F
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F4328584953C4449350452E8E76589380
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b006969f-0250-3b5e-a6f8-9a0503aae10c.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 54113
IP address blocks: 199.232.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:44:93:50:45:2e:8e:76:58:93:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=2d018b35-1ff6-4051-acab-f9d59d916302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:37:0a:12:a6:6c:d3:91:57:64:0c:71:0a:a1:
e9:45:e8:8e:51:ce:06:82:f6:68:0e:ce:5d:86:44:
25:db:84:d4:82:e6:8b:69:24:a7:fe:fc:c6:a3:d0:
41:49:5a:46:05:60:e5:b0:1d:cb:2c:74:0f:6d:fe:
ff:23:b3:1e:6c:ee:63:61:dd:8a:5e:4b:79:2d:94:
3a:e9:91:9d:cc:17:e0:77:b1:9f:e1:54:f4:68:89:
c8:cd:9b:84:b5:9d:b4:e8:63:2a:da:4d:dd:13:e0:
e5:49:86:d0:3e:32:ec:1d:41:ee:50:d0:4c:9c:6e:
11:e3:c8:36:80:7f:03:2f:a3:c9:9a:fc:1a:43:a7:
9b:25:b1:2a:cb:82:f8:8b:15:08:2e:18:42:5f:c2:
b0:36:05:a1:f6:94:e6:04:ce:c4:a0:46:d0:18:da:
9e:f5:ef:f9:7e:6e:d6:19:69:09:18:c7:10:56:90:
67:83:0a:0e:c6:3c:ae:da:d6:d6:e7:65:05:be:47:
b9:c9:76:7e:c9:7f:56:b7:25:a4:a7:a7:4e:3c:e8:
35:97:54:66:63:5d:cd:b4:87:38:f8:96:0e:f5:46:
3f:b9:cb:d7:e4:94:1c:bf:8d:08:dc:f7:10:bb:65:
ed:09:d2:d9:29:a6:37:e4:c5:c3:a7:94:9e:90:59:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:06:70:43:2B:7B:C1:72:B9:2D:08:F5:8B:76:37:8C:68:8D:9D:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/b006969f-0250-3b5e-a6f8-9a0503aae10c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
199.232.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:67:f2:46:3f:29:ff:2d:0b:df:d4:02:34:10:79:c7:ca:5f:
79:56:38:b3:e0:46:2c:39:33:99:67:cb:af:b2:e6:fd:24:6f:
03:a5:d6:17:f7:5c:9f:b6:f1:ba:3e:bd:da:99:03:35:bf:8f:
cc:bb:c4:ee:27:ce:9e:34:f0:1b:0a:a2:bd:5f:a7:ce:02:1b:
9f:dc:c1:68:19:2a:31:72:14:94:ba:8c:52:9d:60:76:c3:86:
69:a8:2e:e4:c4:fc:4c:1d:27:bb:b7:3f:46:6f:b0:ed:7d:63:
87:27:ac:b5:5d:d7:b4:71:c8:9d:d7:fa:76:75:a5:eb:e9:30:
b8:fb:9c:ba:00:77:c7:47:de:48:09:5f:5f:14:d2:b4:23:6c:
ac:df:61:41:b9:29:a6:2c:ab:ed:21:3f:2a:c7:f0:a6:28:8a:
a7:b3:f7:b6:e1:57:aa:39:42:33:f1:c8:1b:41:e9:2f:2a:5d:
73:af:da:cc:15:13:5b:57:e5:c2:92:e0:eb:68:36:f3:b2:f5:
52:09:17:81:4b:98:fb:e9:5d:a0:28:e6:24:26:c1:fc:8b:43:
f8:07:d2:53:59:12:d0:99:20:03:4e:0b:87:8c:8f:b3:5c:30:
ef:31:e2:52:de:f9:26:6a:89:c5:3c:b1:83:c0:97:35:e4:08:
e1:40:38:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:41:53 2025 by rpki-client