Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3249ce89-ef06-3c49-85fb-1166211780cc.roa
File: 3249ce89-ef06-3c49-85fb-1166211780cc.roa (raw, json)
Hash identifier: 8ERze4Zhe0r4tA7BZbKLDJ0iHHbcHsJ6l1asHReDX2M=
Subject key identifier: 24:DB:93:A5:DA:BC:3B:2A:F0:00:96:96:13:E7:BF:F9:B8:15:C0:CC
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285849218427AC5D1F7CF5F8FEC000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3249ce89-ef06-3c49-85fb-1166211780cc.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22394
IP address blocks: 199.223.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:27:ac:5d:1f:7c:f5:f8:fe:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=6a72b0c2-a297-43fc-a2fd-0a83a5400ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d8:68:1a:03:c5:2d:3f:5b:04:35:12:81:ce:
4c:22:27:2b:d8:14:71:8a:da:a1:9c:7e:0b:dc:ed:
60:d0:88:69:a1:d8:4d:6c:f2:8b:56:11:ee:c8:5f:
5c:b1:98:12:33:5a:b7:db:a1:88:e4:78:c8:2e:1f:
8d:68:6d:e1:90:a8:f4:c0:9e:41:f9:9e:7f:96:9c:
7d:f7:be:7b:68:53:38:21:6d:5f:38:b1:bf:64:4b:
53:27:b0:27:f8:46:29:9c:8c:ae:51:50:9b:c7:52:
4c:01:d5:da:c8:3a:06:67:68:96:a3:29:01:7d:81:
39:ad:f2:8c:89:a0:ae:05:37:c8:d1:de:f8:2c:13:
25:4b:8c:51:7d:1a:d9:50:fa:b6:52:bf:e1:f5:bb:
a3:94:7e:75:48:c1:87:d2:59:0a:14:67:0a:54:79:
06:48:11:1c:54:cb:1a:fb:f4:87:6e:5d:cb:99:2a:
43:59:9f:d8:11:20:0d:8f:28:2a:b5:f6:53:d6:33:
67:56:bc:eb:fd:40:cb:71:5d:e6:7f:a7:7d:95:f5:
fa:f9:b9:1a:ed:86:90:57:64:da:a1:af:0e:7c:cd:
b6:98:7d:21:a2:e4:81:7a:5d:6b:21:82:41:9b:46:
b8:2c:16:ff:03:f6:fa:c5:24:31:a9:4d:3a:09:ea:
97:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DB:93:A5:DA:BC:3B:2A:F0:00:96:96:13:E7:BF:F9:B8:15:C0:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3249ce89-ef06-3c49-85fb-1166211780cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.223.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:47:84:8a:bd:71:75:8d:cf:16:ad:23:3d:b0:a8:85:e2:3b:
d1:8d:b7:dc:58:43:fd:58:fb:ec:b7:67:d2:d1:03:cf:9c:5a:
02:f4:1d:eb:64:dc:8a:e8:c2:81:6b:9e:f0:0a:f1:a0:5f:9a:
83:39:9a:64:7b:bc:05:21:77:d0:7f:3d:47:43:67:aa:b1:47:
ff:ae:a2:70:77:63:f1:55:0a:01:2e:f5:ed:29:2d:20:70:df:
f7:21:7c:52:02:06:35:14:25:d8:89:6b:47:9b:4b:01:97:18:
b9:47:20:e6:00:0b:64:39:96:81:12:3b:9d:c2:86:0f:34:91:
bb:bc:86:68:a8:da:58:40:a0:e6:74:a6:95:e1:32:cd:e0:a5:
1e:3f:e9:11:f5:39:c6:ee:8a:09:10:7d:fb:52:a5:01:87:d3:
a0:8f:06:b0:df:67:4c:82:81:d6:a6:8c:1f:c5:54:a7:27:85:
57:de:03:6f:bd:9b:1b:f3:b9:e5:b2:dc:32:c3:6b:b4:12:c2:
de:ff:a5:c9:a8:65:ca:32:1c:b6:b1:36:11:73:89:52:67:3e:
3c:81:ed:bf:81:e0:81:63:e9:c5:57:69:24:30:1d:22:33:07:
67:83:94:82:7d:8c:de:05:24:d4:b2:10:14:80:82:7f:95:01:
fb:ed:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:12 2025 by rpki-client