Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9d32fd60-59d6-38ff-9495-259335bafe5e.roa
File: 9d32fd60-59d6-38ff-9495-259335bafe5e.roa (raw, json)
Hash identifier: /TxK6s8PY86YVImgH3QNePqzecxcmawTzaEIIFAxQ3U=
Subject key identifier: 85:1D:11:29:0F:BC:D3:23:2A:23:86:9C:9F:96:84:34:53:52:FF:F6
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285848F65BDAEE5A5E191735AFCF80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9d32fd60-59d6-38ff-9495-259335bafe5e.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 3491
IP address blocks: 205.252.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:da:ee:5a:5e:19:17:35:af:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=2382a6a1-cbf2-4e6f-942c-9098f863bfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:fd:89:4d:da:2c:43:06:04:d5:4a:4f:b6:
f4:14:08:1d:e6:21:8a:f1:ec:3a:e2:d6:15:65:63:
d3:e1:e4:a3:61:7f:99:2c:f5:34:a6:6c:4b:b9:1c:
c2:aa:93:5a:de:db:a8:25:54:2a:b4:55:f8:98:c2:
34:8a:06:6e:df:ba:86:09:eb:ab:74:7b:e4:b0:ba:
50:31:2e:ff:70:40:f4:0f:f5:04:e6:6b:24:51:db:
44:3b:1a:28:47:8e:d8:bd:72:d9:5b:28:f5:79:47:
f8:ef:12:e1:73:d3:92:66:7a:85:66:91:d6:e0:a4:
84:e6:2f:66:08:74:84:92:04:c0:4a:2e:e6:f4:a0:
10:05:a9:fe:7f:ef:62:76:f3:38:0b:71:e6:09:ee:
88:66:0a:eb:b6:2d:c8:34:a6:57:10:8f:5f:ea:f1:
86:3a:f9:d4:43:f3:e4:c2:89:af:bc:ed:6d:6c:bf:
7c:a4:1a:24:cd:33:99:07:d9:6d:2b:a8:94:eb:1b:
18:f2:43:60:12:ed:34:32:8b:6e:c7:9b:2c:6b:cd:
f4:7e:90:16:7a:be:f0:46:4f:a9:5c:e8:bb:3d:be:
2c:33:03:7a:b8:38:9f:a8:ba:b1:63:21:f3:dc:00:
3b:38:e4:e9:16:75:cf:a2:a7:eb:d5:55:9f:1e:c7:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1D:11:29:0F:BC:D3:23:2A:23:86:9C:9F:96:84:34:53:52:FF:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/9d32fd60-59d6-38ff-9495-259335bafe5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
205.252.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:39:a4:58:ec:17:a0:30:97:73:de:46:bc:62:19:18:a0:2e:
4e:77:d4:d5:c8:63:67:aa:d8:12:4a:29:15:44:8d:2e:a6:82:
e4:3d:a4:ea:0b:0e:d4:9c:f9:8f:2c:4d:ca:46:b8:e9:4a:c8:
30:02:8f:92:52:5a:c5:d2:78:44:7f:d1:14:d8:fe:db:00:98:
ee:ed:6c:2d:0e:fd:a9:bd:99:21:c6:b3:cb:89:6b:1c:d6:a6:
74:d1:02:04:da:c4:4e:c3:cb:b2:d4:5e:32:2e:0d:bc:37:c8:
97:2f:65:0f:3c:7e:70:b0:b9:d7:9a:dd:03:07:c0:1a:7b:6b:
a2:45:7c:2a:53:3c:1c:61:3d:83:0e:af:90:99:28:19:ba:ea:
a8:88:63:e6:97:81:3f:e5:ff:7a:bc:36:52:e4:1d:e3:5c:64:
6e:34:95:6f:4a:06:78:17:88:cd:06:60:01:18:23:fa:38:af:
3f:88:30:6d:d7:46:0e:28:f2:96:7f:23:cf:99:79:c9:6f:6f:
4f:cb:c1:40:c7:3d:61:6d:d4:83:d5:95:7e:f2:7c:ee:92:15:
ee:30:bf:68:ae:25:c6:39:1d:16:2d:e1:bf:94:e6:f4:f3:81:
22:f5:10:21:77:d4:ca:83:06:d3:6a:e2:e1:08:32:4b:53:e3:
23:26:00:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:02 2025 by rpki-client