Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa
File: 9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa (raw, json)
Hash identifier: TswYmw0UC3PdLgcZ0VBPhX80GmVPUolVprQoQslrmQY=
Subject key identifier: 8A:3F:A2:F8:BF:AA:E2:A6:54:6F:BB:FF:E0:E5:D3:37:CA:93:87:9A
Certificate issuer: /CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
Certificate serial: 010D0C9F432858486EF5BCCCC3DF89F2A1059300
Authority key identifier: B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 199.43.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:bc:cc:c3:df:89:f2:a1:05:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc87e4f-7e3a-437b-9f59-2f2863b974dd
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=7e61568d-e326-4023-b5db-480b822f99ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:00:2d:2a:02:ea:7e:c7:b4:6a:12:66:76:
71:dd:1f:2c:2f:9c:c0:95:9f:b2:c3:0e:ec:e8:2b:
93:ff:c0:cc:6f:61:0f:95:be:4c:89:a8:d2:33:c2:
75:a3:cf:b3:4d:fa:c7:9e:ee:d2:f6:11:d5:4d:4a:
69:25:aa:bd:16:73:78:91:50:9e:3d:44:4c:ec:9f:
f5:89:75:11:25:fa:a7:57:32:17:0c:9a:d6:c9:75:
9e:90:5a:5a:62:3f:d5:06:ae:55:d0:48:a4:bb:02:
59:49:62:86:4b:b6:7b:30:d5:fa:00:91:53:11:0e:
d0:70:57:37:f4:39:97:6f:4c:23:fa:9b:f4:8f:a6:
34:89:2b:c6:9c:96:8a:5e:57:76:04:3c:5f:68:d3:
64:c0:b9:d6:f0:92:29:c2:e8:aa:8f:ad:98:04:66:
42:e5:ad:b5:f8:d8:94:87:07:3b:c6:29:d0:3e:4d:
b6:1a:fa:46:d3:5a:6e:95:cf:ad:9e:8c:19:48:38:
07:6f:d6:d5:cd:a5:de:73:b8:dc:2a:9c:65:8d:03:
ea:07:61:6a:2e:8e:2d:5b:a9:9d:9e:a0:6e:d7:b4:
55:ca:8f:8f:8f:7c:c6:7c:c9:8d:90:e2:3d:24:d4:
9d:bb:f5:35:d2:09:53:06:d4:90:1c:00:00:27:d8:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3F:A2:F8:BF:AA:E2:A6:54:6F:BB:FF:E0:E5:D3:37:CA:93:87:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/9b028df0-ef35-3987-ae87-6cfc3001a9f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.crl
X509v3 Authority Key Identifier:
keyid:B4:C5:18:9D:6C:7A:9B:3C:C8:5B:75:A6:6D:C3:8A:A2:F0:F1:C0:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ecc87e4f-7e3a-437b-9f59-2f2863b974dd.cer
sbgp-ipAddrBlock: critical
IPv4:
199.43.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:24:78:96:e8:7d:f3:03:cd:ec:4b:0b:26:bf:af:f1:02:69:
55:29:72:59:f2:ce:37:fd:ef:38:b6:22:f5:7d:36:d3:91:60:
07:bf:00:cc:1e:88:89:81:36:06:be:0a:b2:15:d7:34:85:aa:
8a:22:84:ae:1d:4e:ca:bc:b5:70:b0:09:cb:9a:b7:d6:ff:e0:
cf:a5:1c:4d:99:75:34:43:f5:57:e0:f1:e2:26:af:76:f8:fc:
11:db:75:0f:5a:5d:b2:0a:80:e8:1e:ea:5a:db:c7:22:eb:9f:
0b:22:1c:b9:88:af:ee:f3:b9:5f:37:cb:de:e6:98:9e:68:cf:
67:7d:9f:57:6b:e4:e3:31:bf:ac:84:e2:f9:e5:9a:24:81:33:
53:a3:24:d2:53:23:a5:9f:c5:4c:39:bb:53:d2:cf:ae:6d:bc:
d0:5b:b2:07:53:fd:38:f3:3b:02:be:05:be:0c:ab:23:22:fa:
5d:b0:72:90:82:93:24:3e:7b:92:f5:f1:7e:6e:95:d2:25:da:
02:6e:f7:7b:69:4e:24:fb:c1:34:15:de:a1:89:43:46:a0:a9:
94:f0:6d:22:38:e7:fa:6e:55:de:98:fb:97:03:41:e4:c8:26:
04:84:94:50:0a:6e:c2:4e:fa:f7:84:3b:d3:c2:49:7d:04:7c:
ff:a3:33:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:24:13 2025 by rpki-client