Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/200ead2f-5307-3cd8-add7-21bfdad71d70.roa
File: 200ead2f-5307-3cd8-add7-21bfdad71d70.roa (raw, json)
Hash identifier: 3B6vyqgDqkEF4PlvGt44K0tx9ahHux9NWv1nD2SRC/M=
Subject key identifier: 9D:DB:C5:0D:90:96:80:C6:C6:7B:2E:44:E3:EC:3C:7A:81:05:15:8B
Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial: 010D0C9F432858482D5A8F6B08A13504DA6C1B80
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/200ead2f-5307-3cd8-add7-21bfdad71d70.roa
Signing time: Thu 12 Dec 2024 02:00:38 +0000
ROA not before: Thu 12 Dec 2024 02:00:38 +0000
ROA not after: Wed 12 Mar 2025 01:00:38 +0000
asID: 5511
IP address blocks: 200.30.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2d:5a:8f:6b:08:a1:35:04:da:6c:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Validity
Not Before: Dec 12 02:00:38 2024 GMT
Not After : Mar 12 01:00:38 2025 GMT
Subject: CN=735bfac5-23b4-4724-92a8-a958e17a1c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2e:4c:e9:01:8b:39:ef:ac:92:88:a9:b2:df:
2b:4d:9a:e6:85:1a:93:dc:74:4f:ab:b5:96:f0:47:
7a:59:db:51:e1:fe:c6:ce:25:d7:1a:0e:4c:1e:d7:
fb:2b:f0:e6:e7:fa:25:41:3d:8c:8d:39:f5:6b:43:
5d:2b:b4:23:d4:c4:64:e7:c6:aa:83:ac:ab:00:d7:
56:5e:5f:68:bd:95:3b:0a:42:9b:5d:72:21:9d:3d:
02:13:43:d2:03:de:58:2f:a9:d9:00:7b:95:16:67:
7e:ab:d7:78:59:18:60:37:10:88:51:0e:a6:db:b7:
69:b7:7e:af:7a:b4:70:79:fe:fb:1b:0a:9a:b2:93:
e7:48:72:0f:9f:1c:4a:b3:e6:a3:d2:b2:b1:7f:b3:
89:ee:2f:a3:d3:f8:82:45:30:8f:98:6b:86:73:79:
75:71:e0:ee:a3:16:95:fd:92:0c:5c:63:a5:ec:09:
df:9e:c1:6d:f3:3f:31:fc:94:c3:4c:a7:96:8e:9a:
be:20:ca:64:45:c5:48:cf:72:05:1b:b3:47:81:e6:
87:0f:1d:6f:c0:a7:de:bc:6d:69:a0:96:a9:c8:b5:
c0:37:0b:99:21:41:2c:ef:45:ea:b8:ba:86:78:9b:
1c:e4:ca:24:2c:49:eb:0b:1b:4a:ed:fe:ca:b3:fc:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DB:C5:0D:90:96:80:C6:C6:7B:2E:44:E3:EC:3C:7A:81:05:15:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/200ead2f-5307-3cd8-add7-21bfdad71d70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
X509v3 Authority Key Identifier:
keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
sbgp-ipAddrBlock: critical
IPv4:
200.30.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:6e:99:60:46:6e:29:66:ef:f8:db:63:f6:78:6d:a9:cb:74:
2a:66:72:a7:a7:51:0d:5b:22:d5:ba:bc:3e:a0:21:e6:84:7f:
ab:d1:91:d8:42:f4:ad:05:85:97:c8:b1:47:dc:1f:eb:d3:dd:
db:6f:2a:9b:14:13:13:b4:4e:59:21:3c:34:93:4d:3c:e5:e4:
29:64:ea:f2:cc:a4:6b:cd:57:ca:78:1b:d5:81:43:3f:d2:cc:
dd:b9:bb:8a:53:86:e4:0b:e4:cf:3f:1e:ad:8b:af:07:71:69:
a0:df:c0:a1:87:fd:19:44:82:92:06:b7:6b:02:cf:69:29:97:
cc:10:ab:d2:ba:88:3d:c2:c6:b2:6c:a7:49:aa:be:f3:f5:55:
f0:43:18:ac:fd:49:bb:a4:1a:49:53:93:4e:e5:b5:3b:e6:54:
19:b5:86:bf:40:2b:db:1f:b5:2e:7f:f7:db:f8:97:cf:bb:5d:
8b:90:d3:2a:4f:1f:e1:c6:5a:e5:2b:ea:fe:de:6c:67:7a:4a:
a0:c4:5b:99:a0:85:8c:c6:5d:b1:7e:f5:1c:08:e6:2e:92:23:
18:58:c1:6a:d3:5d:55:bd:e9:7d:17:cc:b8:bc:7d:28:eb:1a:
d3:e0:b2:10:a3:fd:e3:41:56:27:69:9f:a5:2c:67:f1:f3:0d:
8d:08:71:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:03:43 2025 by rpki-client