Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/307496da-fe61-363a-a8e1-2546045308d5.roa
File: 307496da-fe61-363a-a8e1-2546045308d5.roa (raw, json)
Hash identifier: r5e5gxGnYsViyzQ9hm/A/5UzHT5kpbPnnnstcrb/zvY=
Subject key identifier: B0:07:A0:C7:1D:E0:BA:37:28:65:8A:39:E4:2F:2C:99:4D:BE:6D:80
Certificate issuer: /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial: 010D0C9F43285848F65BE1E5D8571250EAD2B840
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/307496da-fe61-363a-a8e1-2546045308d5.roa
Signing time: Sat 22 Feb 2025 02:00:38 +0000
ROA not before: Sat 22 Feb 2025 02:00:38 +0000
ROA not after: Fri 23 May 2025 01:00:38 +0000
asID: 12129
IP address blocks: 199.249.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f6:5b:e1:e5:d8:57:12:50:ea:d2:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Validity
Not Before: Feb 22 02:00:38 2025 GMT
Not After : May 23 01:00:38 2025 GMT
Subject: CN=5b4453a5-9c79-450a-95d8-793fe18f1f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:5c:6b:0c:3a:80:e8:43:58:4d:c7:16:16:
90:c6:f6:b8:69:7c:3c:74:a5:92:78:3f:a2:bd:c2:
99:48:2a:a3:f3:ed:02:53:4e:e0:fb:07:c9:70:0e:
ff:eb:f1:92:08:a8:7a:44:ed:74:b5:2f:4c:86:79:
95:95:31:08:93:9b:cd:49:c5:98:2e:d6:24:c3:b3:
24:ca:87:33:0e:86:38:5f:e3:c8:3f:c2:fc:c4:78:
f5:b3:8c:db:57:6a:7e:7e:cd:e6:f8:24:99:e8:33:
a5:e3:ed:3c:48:47:75:ce:e0:6c:f8:65:6a:d3:dd:
b5:28:94:25:fb:4f:47:76:69:73:76:f5:0b:d0:ef:
9e:d5:ea:b4:7e:62:00:83:a3:00:87:f0:61:ea:73:
91:b0:c5:be:d1:3b:da:6c:dc:06:d5:1a:b8:e3:95:
e7:4d:17:f4:6d:d1:33:45:79:e6:63:30:22:f2:a5:
2a:2c:2a:f2:eb:47:58:69:bc:ba:4f:e7:46:7a:88:
3f:ac:8f:39:8b:31:38:d7:35:af:58:e2:fe:64:8b:
05:3c:bc:e0:8b:40:bf:3a:7b:8e:19:fe:f8:20:46:
a5:11:9f:1f:32:12:4c:f5:e9:40:97:4e:8a:07:96:
ba:7a:6b:3c:06:fe:25:92:ae:f0:72:d3:03:be:57:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:07:A0:C7:1D:E0:BA:37:28:65:8A:39:E4:2F:2C:99:4D:BE:6D:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/307496da-fe61-363a-a8e1-2546045308d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
X509v3 Authority Key Identifier:
keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
sbgp-ipAddrBlock: critical
IPv4:
199.249.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:31:60:24:6f:34:cc:8b:14:de:5d:07:c7:20:ed:fa:2b:69:
42:54:a4:0c:40:25:a5:92:42:7e:ca:5a:ac:bf:71:12:be:ec:
ac:c2:55:86:e9:18:b2:43:49:c8:d6:11:49:74:86:fc:f1:d2:
04:b8:6c:ae:07:c2:ce:45:67:f5:ef:4a:88:50:6b:1e:83:e9:
aa:a6:66:5a:e1:e7:e7:3d:77:e7:64:dc:d4:67:58:ae:e4:2f:
60:32:0d:92:c3:d4:d4:cd:fb:45:d4:65:db:90:84:5a:a6:d1:
b0:3a:0e:f7:b8:23:a1:1a:b5:b4:05:5e:f8:38:ba:ac:95:db:
bb:1a:e4:47:64:4d:6a:c9:ea:a4:07:d9:a5:74:6d:1d:a3:59:
8f:89:e3:d0:84:fe:4e:7e:48:7a:fb:ac:79:37:e5:6d:90:cc:
90:a5:c7:f7:a0:72:f2:cf:18:ea:a8:da:85:d7:2a:53:f2:09:
7c:a0:72:56:db:0c:0c:ff:ee:23:b4:ca:1c:80:fb:e6:97:b0:
0e:1f:69:9a:f7:08:04:e9:a4:05:8f:43:f7:ae:72:5a:6e:f4:
ce:a3:fb:be:d2:96:ba:3d:92:8d:51:26:9e:bb:91:aa:04:e2:
d8:b9:62:0c:9c:39:8e:5c:54:42:df:35:8f:6a:eb:20:6c:9b:
26:d7:a6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:32:32 2025 by rpki-client