Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5de23c1b-a615-3b9a-97e2-00bb040730e4.roa
File: 5de23c1b-a615-3b9a-97e2-00bb040730e4.roa (raw, json)
Hash identifier: ICn1W9K2pYlr7tAhAE8UzhuNqqVeCS6yoC9SpAEF09A=
Subject key identifier: B5:A8:AF:8D:A6:BB:4F:B3:0D:99:43:37:B1:50:BC:A1:5C:24:B2:AD
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F43285848305D36C644DF4A93F4BFB380
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5de23c1b-a615-3b9a-97e2-00bb040730e4.roa
Signing time: Fri 13 Dec 2024 03:53:30 +0000
ROA not before: Fri 13 Dec 2024 03:53:30 +0000
ROA not after: Thu 13 Mar 2025 02:53:30 +0000
asID: 13335
IP address blocks: 199.27.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:30:5d:36:c6:44:df:4a:93:f4:bf:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 13 03:53:30 2024 GMT
Not After : Mar 13 02:53:30 2025 GMT
Subject: CN=df1db7b8-1aa4-41dc-af46-6dd8f1242307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3a:9d:61:fd:d6:7d:b3:9a:27:77:93:58:a2:
35:a9:dd:6f:f0:35:c1:e9:f8:f5:69:76:2b:63:92:
00:13:77:0f:60:22:f8:79:71:ae:f9:d9:c3:59:3d:
f5:02:55:07:59:b9:ea:be:ff:c4:93:c3:7f:68:2b:
38:52:39:8d:dd:87:90:2e:b5:70:9c:01:ec:45:04:
b3:08:5f:cf:e0:fa:8a:e4:54:a9:8d:38:11:41:3b:
6c:49:02:a5:d5:95:b5:9a:b0:74:46:2b:1c:1e:d9:
8a:2c:5e:ac:87:5f:3b:a9:33:a2:c4:2a:10:84:c1:
d8:83:8d:71:6b:10:07:7b:e7:17:58:c8:29:29:13:
c1:d9:d6:62:78:ff:af:78:60:f5:e4:85:8f:16:92:
0a:0d:fd:96:6c:56:e3:b8:e5:00:2a:ad:b2:88:64:
c2:83:90:1c:b2:07:5c:83:17:0a:d8:5e:99:54:86:
08:bb:46:0a:a0:58:a0:2c:37:ee:48:dc:3b:8b:26:
fa:30:0e:5d:0f:24:c1:cc:76:8e:11:84:29:24:e8:
93:22:1c:58:16:fb:e9:1a:bf:22:9d:d2:ee:70:14:
24:c9:cb:60:b8:05:d3:b1:13:d4:dd:fd:fa:41:b0:
d7:fd:2c:fb:07:51:38:ec:9c:42:7c:ad:49:0b:54:
d3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A8:AF:8D:A6:BB:4F:B3:0D:99:43:37:B1:50:BC:A1:5C:24:B2:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5de23c1b-a615-3b9a-97e2-00bb040730e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
199.27.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:79:8e:4e:56:76:e2:03:2b:2f:1d:aa:b8:18:bd:93:72:b8:
67:dd:d3:69:94:7c:e2:63:34:1f:aa:55:54:d0:5e:61:10:ee:
7f:34:37:01:ad:c4:5e:3a:3d:67:07:ee:d0:b5:03:1c:e1:cb:
65:6d:6e:43:4f:18:6b:d4:15:1d:96:08:1e:33:04:34:be:b3:
c3:b4:7f:bf:de:1a:55:90:d4:e8:78:5c:33:91:89:2f:7c:4d:
2a:4f:f9:d5:b4:01:8b:54:d3:3f:60:e8:bc:85:fe:cb:84:86:
99:c7:0a:25:31:00:80:03:af:3d:b4:66:03:a5:67:ee:2e:91:
9e:90:89:e9:47:e6:64:1a:c3:31:e3:7a:22:d7:cb:9f:81:18:
5b:2c:a6:0d:27:4d:0f:48:36:13:96:66:79:72:00:8a:28:be:
55:43:f9:f7:ed:fb:35:9d:bf:cb:f9:ce:36:e7:ea:30:b9:9c:
eb:ab:de:7c:ca:77:34:4f:74:61:b7:ef:02:c4:64:fc:34:74:
ff:54:a5:06:9f:f8:c3:d4:71:43:62:4b:75:ac:30:39:1d:b0:
59:02:55:fe:36:cd:a3:3a:e7:5a:98:eb:69:59:fd:78:b0:64:
ec:88:53:72:e1:fa:d9:ec:43:ba:f6:94:8a:42:18:7e:d3:d2:
d3:a1:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:08:33 2025 by rpki-client