Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/06d3bb9c-8eeb-3028-a2b3-be307d608810.roa
File: 06d3bb9c-8eeb-3028-a2b3-be307d608810.roa (raw, json)
Hash identifier: ebcvYYea+/B6xqZ+tV5Z0ogBE+rorVfu+3Ae1DhpFF4=
Subject key identifier: 6D:56:34:D3:B3:49:E1:5F:CA:E1:F4:D8:5D:F9:92:E0:7E:FB:F6:38
Certificate issuer: /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial: 010D0C9F4328584917DC30C9E4B9F1BEC4604300
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/06d3bb9c-8eeb-3028-a2b3-be307d608810.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 16276
IP address blocks: 192.99.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:30:c9:e4:b9:f1:be:c4:60:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=bdf3ec32-d541-4fa7-86d7-651a22c6f259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:71:52:e6:ba:8c:a6:8b:fd:88:c4:6c:33:
7b:17:8a:05:43:a0:96:94:98:06:6c:a2:df:8c:1f:
c1:02:0c:a7:b7:b6:de:b7:93:0d:1c:4b:5a:36:cd:
c9:d6:e4:fa:52:29:5d:d9:2a:7a:04:3f:e6:8a:9c:
47:8d:65:f4:79:76:f1:93:8c:6e:53:e1:ac:d8:6d:
a2:0f:1d:53:c2:fe:60:60:ff:8d:ff:5e:a7:ae:cf:
d2:79:70:42:13:fa:1a:a2:37:d8:ab:f2:f6:ae:08:
81:48:d7:c1:ac:ff:03:d8:c3:15:00:d1:ae:fe:1f:
ef:41:4e:ae:f8:e8:dc:8b:08:6f:cd:7f:d2:30:04:
fb:b9:0b:2b:ca:f1:b8:5b:26:59:f6:40:18:26:95:
db:69:84:9b:1e:f4:da:42:08:40:b5:64:00:47:b4:
00:95:d1:05:35:fd:51:7f:a6:36:17:41:11:95:a4:
31:40:68:f4:12:5d:79:c1:7e:b9:8b:b2:14:ab:1b:
79:42:2a:bd:cd:37:69:da:9b:71:5b:56:f7:27:29:
e2:9f:21:36:37:f9:8b:21:a0:78:ae:d4:e2:92:81:
34:1f:fe:6b:76:94:c2:45:89:02:37:9b:37:5a:cd:
33:53:d5:62:b6:e5:a5:d5:43:92:22:33:9f:18:f4:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:56:34:D3:B3:49:E1:5F:CA:E1:F4:D8:5D:F9:92:E0:7E:FB:F6:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/06d3bb9c-8eeb-3028-a2b3-be307d608810.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl
X509v3 Authority Key Identifier:
keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
sbgp-ipAddrBlock: critical
IPv4:
192.99.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:6a:c8:6c:7a:a1:b1:9a:ea:2a:8e:9d:7f:57:09:d9:0c:6c:
33:46:2f:81:79:fe:b1:44:4d:d0:fd:c3:9c:49:07:39:27:ae:
fc:e0:cf:50:02:d1:68:b2:9c:20:c9:65:e0:aa:e7:f1:27:29:
ad:b8:8b:b6:b4:0c:ee:82:dd:a5:33:79:1a:a7:69:6d:0b:e2:
9e:54:cc:e4:7b:24:31:58:3f:c5:68:e1:e4:75:b4:d9:4d:db:
9f:6f:10:fd:e0:6a:18:45:6c:16:d8:4c:f0:18:81:ac:a4:de:
90:0a:4e:b7:e6:e8:5f:24:6c:78:48:c4:31:88:65:03:a9:0c:
fa:5b:f5:66:6c:99:45:26:bc:a5:2b:38:a2:d7:c5:77:4b:a3:
7b:f4:76:69:74:fe:03:f6:4d:7f:6c:20:6c:64:21:0d:47:65:
81:df:b3:3e:a7:39:33:17:58:d9:ab:21:0b:d5:5a:96:87:73:
36:c3:ac:3b:e4:a5:6c:b9:41:0e:73:c7:79:4e:41:4a:ac:98:
b3:3e:34:3f:e5:f7:a0:b8:d8:fc:af:df:ff:80:5a:79:61:df:
ea:da:55:d5:7e:77:17:62:97:1a:ad:ce:60:a2:6c:87:30:6f:
7f:f3:c7:39:a9:34:79:8b:31:46:63:e6:a0:4e:d6:4a:03:db:
b8:3c:ba:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:11 2025 by rpki-client