Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa
File: 204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa (raw, json)
Hash identifier: dumtpLrPzMCv5YunGYhAGK1ZbUxBGNsfTKcziGuMEfI=
Subject key identifier: 98:BC:F6:07:AD:18:A8:13:AF:44:12:3A:B1:5F:EF:02:E1:91:5D:C2
Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Certificate serial: 010D0C9F4328584837201733E2EFBFA6884C1A00
Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 53589
IP address blocks: 199.16.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:17:33:e2:ef:bf:a6:88:4c:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=aa5cf0a4-c73e-40cf-800e-4928d490229e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:79:7d:75:6b:65:7b:5f:1d:5f:53:44:e3:
01:79:81:eb:20:b4:38:e8:59:4d:56:e9:d3:d1:31:
13:e2:e0:8d:3e:84:f0:4d:d6:ed:c1:1a:a2:ff:3d:
c0:7f:b1:3f:ac:19:2f:3d:1c:56:4f:8d:e9:99:4c:
9f:ce:b0:25:eb:a9:ff:a5:a0:4c:11:ff:ea:4a:bd:
97:0c:50:86:74:91:e8:58:c8:de:14:43:cb:51:21:
0a:1e:07:f7:63:71:87:73:fc:c9:59:d7:68:e6:b1:
47:71:c5:d0:60:4d:b9:69:65:f6:a3:54:d6:74:d9:
e0:46:09:5d:ae:58:83:e2:46:59:81:6b:f3:b4:39:
8c:2e:a0:fb:38:61:da:c6:a1:3e:45:62:f5:9e:1d:
0a:ef:06:87:8c:49:a9:f3:31:d6:de:33:17:75:57:
1d:e2:d0:33:4f:76:36:4a:84:27:50:15:06:ae:22:
30:08:0c:94:47:e2:73:80:a5:ec:be:37:3e:13:db:
df:89:f7:62:7d:67:b5:9b:ee:51:13:40:b7:84:1f:
90:77:dc:94:93:62:27:16:3a:ec:3c:ad:56:c6:8a:
be:33:49:de:47:d0:a3:af:7a:09:76:67:73:07:1a:
ea:22:a8:11:0e:36:3b:04:24:49:82:9e:6a:af:9f:
68:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BC:F6:07:AD:18:A8:13:AF:44:12:3A:B1:5F:EF:02:E1:91:5D:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl
X509v3 Authority Key Identifier:
keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
sbgp-ipAddrBlock: critical
IPv4:
199.16.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:01:d3:d6:a9:5c:1c:f3:d3:31:59:93:93:30:5c:b9:02:b5:
fe:74:75:e4:1a:0d:0b:d5:cb:40:3a:4f:fe:ed:14:b3:4f:18:
b0:52:63:86:d1:a5:45:7b:f2:69:27:bf:5a:d6:13:49:79:6b:
9f:cb:ed:5e:61:3d:3e:4e:6b:4f:d9:6c:49:7a:d4:d5:4d:7f:
f0:57:a0:d2:6b:1f:f0:5a:f9:cf:4e:1a:02:05:71:d8:de:21:
b1:ff:7e:1f:09:f6:75:e3:78:5e:1c:51:0d:f7:09:48:94:fd:
58:14:8c:00:82:e4:26:d2:9f:b0:90:f3:6b:91:d8:4c:72:f4:
bd:40:20:d1:fd:80:2f:63:78:1c:ef:3f:71:ff:fb:70:ff:07:
d8:15:3f:26:d4:ba:52:b8:6c:0f:01:a1:75:8a:a3:cd:c2:05:
8a:32:3e:46:a4:b3:cb:b6:3f:48:39:e0:82:0b:0a:98:13:be:
73:fb:d7:fa:1e:36:e7:91:06:7a:a6:6a:39:fb:a7:65:0c:f7:
d7:78:40:33:dc:9c:f9:1d:4e:bb:b2:d0:0b:c2:7f:bf:22:af:
74:9b:d8:72:df:67:a8:30:8e:05:fd:ba:c3:4b:0e:dc:3d:8d:
7e:84:55:64:36:2e:81:5b:ea:f5:0d:a9:2f:38:3e:2a:69:be:
99:44:39:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:11:31 2025 by rpki-client