Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/c3480d3d-afba-380c-a139-2236cb2ad8dc.roa
File: c3480d3d-afba-380c-a139-2236cb2ad8dc.roa (raw, json)
Hash identifier: Kz1tGWIhFawIpJIjtUjX43/Mmi85s639zdJ3QK0L/M8=
Subject key identifier: AF:F6:30:72:E3:C4:6E:FF:F6:47:F6:A9:D5:2C:12:65:0D:D4:1B:EF
Certificate issuer: /CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc
Certificate serial: 010D0C9F43285848EF6158136EBFC0A4A698DB00
Authority key identifier: A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/c3480d3d-afba-380c-a139-2236cb2ad8dc.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 396982
IP address blocks: 199.47.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:58:13:6e:bf:c0:a4:a6:98:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b022ab9-d430-450e-a80d-1a7148a7dbbc
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=6c5fe26a-423c-4fce-a34b-99f2fa06b1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6f:23:48:41:3e:98:cd:ed:09:0c:cb:1e:8e:
2f:2f:66:b2:87:86:24:05:78:7f:56:bb:6c:0a:a0:
94:7f:18:00:45:a9:d3:42:8f:c1:57:b2:d9:31:50:
26:0c:dd:58:90:dd:4d:65:88:bc:d2:03:c7:bd:26:
b3:61:1d:21:84:ab:69:a9:3d:b0:06:03:49:e0:6d:
60:bf:5d:fe:96:12:d6:5c:ef:12:42:cf:d6:dc:60:
f4:cc:63:9d:37:7d:e6:b0:39:7c:67:cf:d8:20:ef:
3b:3d:cd:e2:00:d6:00:98:91:6a:6c:6f:5f:88:16:
62:86:25:5f:9a:96:02:4b:65:c1:ae:ad:b4:b6:48:
4a:af:bf:4e:08:23:1a:42:3f:5b:de:ef:01:10:27:
40:f5:e4:7f:d8:d1:0a:c7:4a:f2:d3:62:b8:b8:06:
11:3d:fb:99:e1:4d:9b:c6:e3:5f:eb:1f:be:79:c9:
57:0e:56:aa:e4:3e:fa:a9:7b:c1:d1:02:5e:bc:0e:
a6:97:9d:e6:03:06:09:4e:9a:38:53:5e:37:85:d0:
f4:0c:da:c4:fc:ba:94:aa:73:04:c5:76:3a:5b:db:
99:36:4e:13:64:f9:61:7d:0e:e1:1e:f3:5d:20:d0:
e8:bb:58:26:06:6b:94:12:1a:47:80:c0:c9:4f:64:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:30:72:E3:C4:6E:FF:F6:47:F6:A9:D5:2C:12:65:0D:D4:1B:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/c3480d3d-afba-380c-a139-2236cb2ad8dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc/1b022ab9-d430-450e-a80d-1a7148a7dbbc.crl
X509v3 Authority Key Identifier:
keyid:A3:C3:38:88:82:20:9C:99:F7:EB:37:EB:E0:57:4E:52:76:87:A8:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1b022ab9-d430-450e-a80d-1a7148a7dbbc.cer
sbgp-ipAddrBlock: critical
IPv4:
199.47.187.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:a3:57:b2:dc:57:c0:19:21:63:f3:16:c4:50:10:db:f2:f4:
3e:1e:1a:d6:b6:ff:08:2d:c1:2a:d6:a4:e5:ea:d2:8c:0e:42:
28:d8:c9:d2:66:9a:05:4c:77:fd:22:90:79:4b:c7:8e:08:ab:
b8:29:6c:82:04:e8:ae:3e:1b:ff:27:7e:e6:46:35:47:b5:05:
be:1a:4e:16:38:8b:f0:50:61:be:10:7c:b6:85:3c:3c:6d:be:
d5:91:4d:f5:15:3a:75:50:72:52:b9:9b:52:e9:1e:d2:8f:5f:
6e:be:e4:da:60:3e:35:09:b4:be:0c:81:3b:5a:cf:5d:54:8a:
78:95:fd:4d:da:e3:87:44:d4:da:18:ed:3b:56:92:7b:76:2a:
58:74:83:8b:c5:29:0d:2f:2b:a6:92:0f:fa:db:48:81:b0:b0:
e6:3a:28:96:2f:16:7a:d4:72:11:b7:e6:d6:b4:d0:43:9c:62:
e2:ad:10:a4:15:ce:4d:04:34:f0:09:0d:2d:06:8d:43:01:fa:
2a:f7:c3:04:c6:9d:03:31:56:e6:78:58:bc:ef:71:fc:a1:04:
14:41:65:57:ed:18:29:e0:9f:7f:0b:9e:91:3e:73:48:ee:b2:
40:30:2d:9f:09:b6:20:d0:4c:72:12:b4:b8:41:48:10:da:86:
09:ce:7a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:03:43 2025 by rpki-client