Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa
File: 2938d50c-8e48-36b6-993b-1b4431994e3b.roa (raw, json)
Hash identifier: pw0aVgqFYrvSmdaWt+eu5AFcm7V+QYK9EzR2gj3K0oY=
Subject key identifier: 3A:75:18:42:2F:92:28:16:8F:AF:52:DF:82:89:F8:7B:C3:5E:0A:01
Certificate issuer: /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Certificate serial: 010D0C9F4328584839EABFC8D8896AC5EBE4CB00
Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 53589
IP address blocks: 199.188.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:bf:c8:d8:89:6a:c5:eb:e4:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=d8531df5-061e-4a14-aacd-2e9a6210233d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:a1:02:3e:e1:68:e6:af:68:7b:47:16:93:
a4:a1:1a:e2:81:9c:e1:23:94:e2:d7:fc:15:4d:a1:
ad:45:37:be:0b:a2:f9:e6:9a:13:c5:c7:68:82:c4:
49:20:ed:be:d3:2e:84:be:f4:62:17:2d:dc:83:c8:
30:b1:a3:a0:4f:69:31:17:bc:f7:81:22:59:83:ed:
86:3c:54:0b:82:a8:cf:48:c7:b6:d0:61:ed:34:71:
9d:94:c5:ab:04:4c:8f:79:9e:8e:d6:51:db:4a:98:
e3:93:41:61:fa:b9:ff:40:0d:ce:d6:ac:ea:71:86:
f3:09:5a:59:cb:35:9a:c3:9c:6c:ba:45:6b:8a:c2:
0c:f4:1f:ed:7a:e1:30:4e:59:18:fc:9f:ef:e9:cb:
96:34:6d:01:47:e5:fd:0b:17:d1:d2:11:9d:8b:ec:
85:1c:fd:ef:98:af:8b:b8:a4:ac:a2:69:bd:48:65:
3a:a9:82:70:7b:7e:b5:d9:e4:4b:12:76:55:63:6c:
6d:1c:fb:a2:2b:72:61:ac:3b:f0:b8:29:86:1c:e3:
6a:45:51:5f:1c:06:21:a9:45:62:be:ab:51:6b:36:
22:0f:19:88:aa:a8:3e:6f:49:b0:b0:ba:98:0a:16:
a9:71:2a:3e:fe:e1:1e:7f:2e:48:09:23:f4:2a:73:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:18:42:2F:92:28:16:8F:AF:52:DF:82:89:F8:7B:C3:5E:0A:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/2938d50c-8e48-36b6-993b-1b4431994e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl
X509v3 Authority Key Identifier:
keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
sbgp-ipAddrBlock: critical
IPv4:
199.188.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:06:6b:cb:9e:6a:20:09:99:0f:b8:c7:fc:7c:bb:c5:f8:01:
f4:c4:2c:b8:ee:29:9b:b6:b9:60:62:8e:dd:c4:16:e4:bd:ad:
9e:a6:fc:1e:59:a0:cd:c0:67:b0:66:1c:04:06:30:84:2d:df:
11:37:04:df:ad:07:59:4b:cd:9a:60:75:ef:69:8d:88:97:a5:
bf:c6:a4:26:60:dd:fb:33:c0:a0:19:0b:7b:3b:d7:47:6c:78:
55:23:66:22:c9:35:65:d6:f0:86:7a:60:0d:ef:3d:d5:80:dd:
ae:04:51:7b:e6:c8:cf:ed:6b:af:72:41:77:78:ec:90:81:3d:
b0:55:5e:f9:df:5e:ff:7d:e3:fd:53:c5:8d:66:4c:1c:36:c6:
a3:da:f3:dd:dc:27:35:24:79:26:2a:e3:72:81:63:b1:a0:ea:
5a:ee:31:71:4a:7f:d3:dc:69:98:05:cc:ba:e7:86:62:30:fe:
92:53:07:31:ee:b0:c1:2f:c5:db:ed:48:e4:ea:bc:8d:e1:ea:
39:77:6a:27:9b:b3:e5:84:82:82:42:16:ef:54:3a:0a:47:29:
47:fe:48:03:b1:0e:18:1d:7b:98:71:75:e1:9c:6b:10:eb:10:
e3:9e:37:35:34:8f:14:a0:f5:b6:6f:08:f3:36:bb:92:02:55:
09:c2:fd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:52:53 2025 by rpki-client