Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9553ab77-cfa6-3a12-aab7-3b8ee5cc5ea8.roa
File: 9553ab77-cfa6-3a12-aab7-3b8ee5cc5ea8.roa (raw, json)
Hash identifier: jBGkh9rdKmBWA8xKyh7rOftH6HB7hOZo9xyd4HNG9zE=
Subject key identifier: 5B:25:CF:E3:5F:D7:8C:4F:48:B5:63:0C:D1:0D:19:46:E1:DD:67:B3
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848D9C20C8AC0ED2BEE5C292000
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9553ab77-cfa6-3a12-aab7-3b8ee5cc5ea8.roa
Signing time: Tue 11 Feb 2025 20:08:17 +0000
ROA not before: Tue 11 Feb 2025 20:08:17 +0000
ROA not after: Mon 12 May 2025 19:08:17 +0000
asID: 3855
IP address blocks: 199.172.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:c2:0c:8a:c0:ed:2b:ee:5c:29:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 11 20:08:17 2025 GMT
Not After : May 12 19:08:17 2025 GMT
Subject: CN=36f619ab-9c08-45d4-840f-04249a973477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:3f:33:d1:3a:50:00:9f:58:2c:3e:61:b0:
55:60:0a:d5:6c:e8:34:72:8b:14:de:d7:3c:69:24:
b4:8e:52:9c:76:13:fe:bf:33:f7:f4:c8:00:c5:8a:
67:b1:bb:b2:19:bd:42:a8:b0:43:94:5a:a8:44:41:
73:5c:a5:99:2d:79:30:2f:fb:f7:56:c0:92:0a:f7:
02:6f:4f:51:b6:8d:64:24:ab:93:b4:f2:40:4c:e0:
c4:6f:97:75:74:f0:f4:29:6a:d4:b5:64:cd:a3:2b:
d1:e5:ba:76:0d:3d:ec:86:5e:da:95:49:f0:33:8a:
90:39:e8:73:fe:3d:a2:fe:0b:e3:37:cd:ef:21:48:
98:e5:66:23:8c:ed:cf:f4:79:7c:51:05:2a:2f:2d:
db:da:d0:01:a1:3c:ae:f2:54:92:f3:38:65:e4:ef:
64:61:d0:e5:0d:92:08:b8:0d:64:c5:07:73:c1:2c:
3f:47:b7:d3:97:31:2f:3a:09:92:48:78:e3:a0:84:
33:66:ab:69:e3:51:53:02:92:b3:34:81:68:d2:4f:
12:8f:1c:c4:d7:ab:9e:bc:e4:10:54:9f:cc:82:d8:
d9:ac:55:71:d8:52:48:a7:fd:ca:28:e7:5d:b8:a2:
62:6b:eb:99:42:71:19:cf:29:f0:16:f2:83:0c:2d:
9b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:25:CF:E3:5F:D7:8C:4F:48:B5:63:0C:D1:0D:19:46:E1:DD:67:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9553ab77-cfa6-3a12-aab7-3b8ee5cc5ea8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.172.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:f4:65:12:0e:fe:9c:1f:27:28:31:c9:3b:9d:39:c1:d2:65:
80:38:69:c2:27:27:74:da:fc:3e:37:87:0e:ca:d3:ee:6a:26:
f8:62:9a:94:e4:41:55:ae:a7:b8:d9:a6:ef:d1:f7:4a:a0:2e:
9c:3c:7f:77:0b:14:52:09:71:1d:f4:7a:75:01:87:96:78:62:
cc:2f:21:a6:fa:29:80:58:e3:8d:1f:06:3d:a0:f0:1b:67:22:
cd:89:7b:2b:30:e9:b1:cf:e0:2f:d0:29:3e:a5:9a:52:5d:85:
1e:6e:29:02:f7:3a:5b:1f:a9:f0:5a:c1:b8:a1:6c:03:cb:65:
0f:15:01:c6:85:38:a1:70:1a:66:c3:a9:b5:ae:bf:aa:ad:82:
e6:1d:e3:89:da:49:fd:c6:3c:12:9b:7b:6e:fc:32:e0:f0:5f:
ec:f0:24:19:2a:27:33:40:b3:25:4c:46:93:4a:2c:d7:f5:9a:
e9:83:42:a1:94:9d:79:49:93:f4:a1:84:3d:02:96:06:dc:ee:
26:84:49:16:26:07:66:ed:5e:d4:94:b3:68:a0:63:e5:36:f4:
a1:ad:fa:c7:89:98:15:36:2a:36:0a:d7:fc:46:ef:00:cd:b2:
04:40:e8:96:8c:e2:4b:35:53:1b:a3:18:c2:2c:a0:6a:c8:48:
8c:45:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:10:05 2025 by rpki-client