Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/baa66279-ec8c-360c-9e3e-a47d742b8d67.roa
File: baa66279-ec8c-360c-9e3e-a47d742b8d67.roa (raw, json)
Hash identifier: fMANjvCSTn8Isy+fwClGwr6OkyDE9zxuBjkA3o3JdIw=
Subject key identifier: AF:A9:70:F1:26:4D:32:26:B6:10:21:F4:DD:87:5C:5B:28:C9:8E:59
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848D9C20D276FB74F1B02E1D680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/baa66279-ec8c-360c-9e3e-a47d742b8d67.roa
Signing time: Tue 11 Feb 2025 20:08:17 +0000
ROA not before: Tue 11 Feb 2025 20:08:17 +0000
ROA not after: Mon 12 May 2025 19:08:17 +0000
asID: 3855
IP address blocks: 199.172.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:c2:0d:27:6f:b7:4f:1b:02:e1:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 11 20:08:17 2025 GMT
Not After : May 12 19:08:17 2025 GMT
Subject: CN=6e54cd9a-98a7-4967-be90-96203966193c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:1d:22:23:48:75:25:b6:54:1a:7b:0d:b9:
eb:47:c1:c0:fd:52:4e:d0:5d:81:ad:60:6b:01:59:
0a:f9:4a:a2:13:4e:91:7c:f5:1b:d0:af:6c:8a:ed:
8e:9e:08:f6:a0:91:da:bf:eb:cc:3c:7e:69:da:5c:
66:f6:10:56:be:7c:2b:2f:3b:50:14:8f:36:d8:73:
94:d6:d0:7f:5b:f7:8e:49:33:13:51:8f:a4:b4:7e:
fd:a2:e3:25:6e:63:e9:31:c2:d0:52:76:50:64:37:
41:97:fa:04:7e:17:bc:ff:7c:9b:81:1e:86:da:d6:
21:0e:f7:0a:07:96:6d:7a:a1:8e:d3:9f:11:96:66:
63:dd:c5:1c:76:60:a1:28:3c:29:1e:ef:e2:40:fa:
e5:a2:bb:14:3d:89:3b:67:03:0e:03:43:fd:25:4b:
57:a5:59:b8:3b:9d:25:74:d1:54:a5:0a:6a:41:bb:
34:bc:0a:db:75:a7:0e:74:e7:58:75:3e:dc:47:0f:
69:8f:2a:dd:7b:e0:86:ea:bc:3c:6b:c6:7c:e6:ba:
ff:51:c7:08:01:72:ab:1c:57:27:9a:6f:14:4a:76:
7e:72:65:83:fd:86:66:73:6f:fa:55:be:07:58:fe:
ea:1e:1a:18:ab:64:81:c5:25:81:f0:2f:ae:46:42:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A9:70:F1:26:4D:32:26:B6:10:21:F4:DD:87:5C:5B:28:C9:8E:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/baa66279-ec8c-360c-9e3e-a47d742b8d67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.172.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:58:91:59:ca:3a:57:7b:6e:bf:a4:d8:33:67:79:bd:67:5e:
3c:01:6b:b1:19:ed:89:f6:e8:63:65:0c:87:b8:f2:52:3e:34:
d5:07:fa:f0:8c:df:f3:f4:c1:1c:c3:57:07:47:00:1f:d3:58:
4c:41:79:6b:31:15:b9:e5:6a:32:cf:62:fb:2d:4a:bd:ef:5e:
a7:3f:d9:e5:ab:02:52:25:90:c1:23:de:27:ec:64:ea:a2:21:
c1:03:26:74:dd:98:01:e5:fc:63:f5:11:49:3b:c0:10:d9:9f:
3d:6e:b3:26:db:9b:1d:09:51:bd:2a:3f:2c:b7:b0:26:9f:39:
8a:89:a6:76:0f:64:df:32:1d:db:8a:5a:9c:c6:05:e3:5a:e6:
76:f0:3e:64:87:d8:64:38:5a:94:69:57:4a:0a:df:78:96:6c:
4f:50:75:98:a7:21:66:fd:99:e7:8e:bb:bc:a3:de:3e:aa:35:
04:08:4f:71:13:22:5a:da:4f:47:48:e2:86:d7:6d:14:dc:06:
eb:1b:d0:42:fb:8d:0f:e0:77:de:29:2b:9f:1e:58:1e:11:4f:
89:7c:21:92:d0:64:21:f3:7e:dd:57:aa:1d:f3:ad:c0:2a:97:
7e:f2:12:a4:1f:3c:de:88:d1:9a:52:3b:a7:d5:a8:ed:eb:c8:
93:d6:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:21:54 2025 by rpki-client