Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa
File: 486b3896-2841-391a-bebe-039803db5d71.roa (raw, json)
Hash identifier: i7jMhzM9ekoL8RWRHr4Af9aEBrzJAX9fJHebuQ/07Oc=
Subject key identifier: 58:40:39:A8:E1:D1:73:59:1E:59:D6:43:0A:FD:63:E6:00:42:26:5C
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F432858488DAB3E693B670545AE9E19C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa
Signing time: Wed 15 Jan 2025 14:00:51 +0000
ROA not before: Wed 15 Jan 2025 14:00:51 +0000
ROA not after: Tue 15 Apr 2025 13:00:51 +0000
asID: 6643
IP address blocks: 199.87.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8d:ab:3e:69:3b:67:05:45:ae:9e:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jan 15 14:00:51 2025 GMT
Not After : Apr 15 13:00:51 2025 GMT
Subject: CN=a8234642-e4b1-4cb9-b139-3509adbbda1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4e:65:f6:f8:06:5d:31:18:93:24:cb:0b:e4:
69:53:e1:c5:bc:bf:a5:df:5e:aa:30:03:88:5a:a1:
2b:bd:2e:6c:89:20:44:c5:ab:f3:27:4d:1d:33:d7:
8f:87:80:f6:98:7b:c9:53:21:74:c4:44:08:1a:3f:
01:b7:c4:f3:3c:19:fd:6f:a7:c4:44:e6:9d:49:6c:
64:d1:4c:8a:8a:5b:35:7d:47:0f:5f:8a:17:b7:61:
2d:0b:6d:76:4f:fc:d0:82:94:9e:9b:ac:7d:62:5c:
e8:dc:a8:bb:f5:10:fc:6b:9c:fe:9f:5c:3a:ec:c6:
b5:9c:e6:17:48:19:f9:00:63:fe:de:c1:b0:d5:89:
34:c2:e4:79:d1:e3:15:0b:29:db:c2:4c:ff:df:15:
db:7c:a1:c8:8e:4b:00:81:a9:a3:13:d8:0e:ab:57:
d6:94:f3:b6:7c:cf:91:06:8f:a9:25:92:49:59:1e:
2e:48:05:5b:3e:98:2b:02:6a:d3:27:be:55:e0:d7:
98:60:c3:ba:d5:f0:81:67:a3:a8:ce:9c:a8:94:2c:
d5:e7:23:8b:73:00:85:b0:33:ad:56:50:0a:e1:37:
ed:32:91:89:77:d0:0c:93:e5:a0:be:9f:28:06:51:
e7:84:3d:98:22:9b:25:dd:1a:b6:2d:da:58:3f:b8:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:40:39:A8:E1:D1:73:59:1E:59:D6:43:0A:FD:63:E6:00:42:26:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/486b3896-2841-391a-bebe-039803db5d71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
199.87.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:c6:af:c4:08:c1:82:a3:ac:16:17:63:ec:aa:5c:37:aa:18:
e4:1f:cf:62:7a:3c:89:e3:9f:a6:00:7a:d5:97:d5:dc:61:aa:
c8:c4:60:63:a8:34:80:5b:38:de:69:9c:87:23:3d:d4:7b:5b:
f4:6a:23:78:8a:85:28:7a:d8:67:39:b4:02:ce:bc:c5:55:bd:
0f:8c:f9:d1:38:71:f8:68:b3:d1:12:11:3b:1a:5b:77:8d:c7:
68:13:f8:a2:56:8d:e1:f2:6c:f9:cd:3a:1a:5d:6b:56:39:98:
84:1f:04:76:2d:87:9e:fc:0c:d7:40:5b:92:51:21:39:54:fe:
f1:8d:0f:c0:c8:95:f3:22:61:6f:6f:d1:2f:81:ab:58:fc:36:
55:ab:b3:fb:e3:20:5c:35:cb:15:31:b3:9f:31:d7:f2:7a:c4:
6d:7b:23:44:42:02:52:19:a3:a6:c6:7a:2f:99:19:a7:90:36:
90:52:0f:14:d2:04:46:43:f5:9c:df:33:7f:18:a5:c1:63:4f:
10:84:bd:b7:e8:8e:7e:81:71:91:17:49:8c:60:25:4f:ad:da:
bb:56:ef:04:93:8b:26:db:c7:22:5a:58:0c:45:d4:11:8c:f6:
58:2f:d5:87:4d:83:db:0b:2b:c0:09:f9:e6:61:9a:d2:be:6f:
0b:38:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:11:35 2025 by rpki-client