Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcf8b210-08ec-3460-9f7d-f91eee8b0320.roa
File: dcf8b210-08ec-3460-9f7d-f91eee8b0320.roa (raw, json)
Hash identifier: GhNbmxKNetduBoFLxU5dUMu9YDRvKobrQzPSTm3EKuo=
Subject key identifier: FD:DE:11:09:26:CA:13:47:C7:9A:EE:C3:B4:C0:DB:45:9F:98:F4:99
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584910E1859B2B29CC88C44CC3C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcf8b210-08ec-3460-9f7d-f91eee8b0320.roa
Signing time: Mon 03 Mar 2025 14:00:53 +0000
ROA not before: Mon 03 Mar 2025 14:00:53 +0000
ROA not after: Sun 01 Jun 2025 13:00:53 +0000
asID: 16625
IP address blocks: 173.222.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:10:e1:85:9b:2b:29:cc:88:c4:4c:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 3 14:00:53 2025 GMT
Not After : Jun 1 13:00:53 2025 GMT
Subject: CN=6d46d7f5-5c0e-4714-a372-cf9a44aa3cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:37:67:43:64:dd:e3:5f:47:13:01:89:5b:
6a:96:f9:a2:8c:22:51:d6:49:c5:c0:43:05:bf:59:
02:41:8e:c0:42:c1:39:5b:63:d7:11:62:4b:e8:d5:
2a:cc:b5:28:e5:e4:4b:97:90:d4:ae:f5:4e:cb:d2:
f8:20:2d:24:62:26:62:97:f4:68:b4:59:b1:d5:46:
3a:21:8a:eb:7f:fc:1d:d1:31:13:aa:57:53:34:f5:
0c:00:b9:66:12:a7:db:e2:ce:6e:94:d6:93:d0:eb:
04:4d:9f:77:0a:9d:80:5a:f9:b7:5a:61:ef:40:2f:
9e:d9:c7:01:ab:cc:25:71:51:67:6c:73:94:02:e4:
35:9e:2c:e8:a5:c2:de:d4:6b:b1:92:9b:e9:78:e2:
4c:4b:a7:e5:ab:8b:c3:c6:e8:a6:2d:5d:0a:64:59:
c6:ff:7f:26:2d:4e:e9:e9:c8:ec:a7:3c:24:88:34:
88:ec:2c:8b:a0:e2:4f:70:95:e8:2b:0d:09:ee:d1:
8c:8d:f4:d7:1a:24:de:df:2a:3f:c1:05:53:f2:8c:
d4:40:fd:46:1a:fb:a0:e6:4c:ff:55:1f:2e:94:65:
4b:6f:71:47:04:e2:9b:39:34:f3:ad:f2:a0:b7:7f:
d2:30:13:ce:b5:48:c7:99:94:c7:dd:5a:49:5c:1c:
c1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DE:11:09:26:CA:13:47:C7:9A:EE:C3:B4:C0:DB:45:9F:98:F4:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcf8b210-08ec-3460-9f7d-f91eee8b0320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
173.222.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:f9:9e:b7:94:fa:87:bb:7b:df:ef:c0:88:b8:c8:ee:ec:e7:
46:f0:19:39:1d:38:83:61:45:5b:81:87:76:a5:e5:44:5e:1b:
c2:94:99:1c:95:6a:b7:4d:c4:da:b9:07:ee:28:27:bd:63:f5:
e5:0d:be:4c:27:df:7e:d7:4e:a8:5b:80:da:8f:b9:0e:9d:4c:
46:cf:f5:41:9c:e7:0a:e2:34:e8:74:fb:aa:be:9a:71:86:06:
35:de:03:18:15:f4:7a:d7:b1:33:8f:8b:a5:39:f4:ff:94:d1:
46:db:9f:67:d4:32:ff:3e:f3:de:a2:d9:79:46:02:d2:58:23:
7e:d1:e6:50:07:0f:bb:23:aa:d2:77:b4:27:70:c6:81:a1:f9:
e7:44:a4:40:a6:d3:44:4c:3d:ec:bd:cb:af:92:11:40:d5:91:
28:cb:93:a3:17:3f:07:7f:67:b6:9a:7f:30:4e:b5:0e:a7:4d:
a1:0b:d9:62:cb:80:20:86:76:6e:e1:12:6c:01:6b:fe:b2:27:
0e:a2:35:77:f8:59:d1:bc:b3:8d:14:63:8e:96:b0:dc:63:14:
3f:ea:eb:72:99:18:10:71:51:5f:7e:27:b3:73:e2:ab:b7:f3:
5d:29:2b:7b:a5:7e:24:7c:2d:7f:2e:f0:fb:e2:4a:e6:a9:41:
24:1c:c9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:13 2025 by rpki-client