Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/2068d72c-6558-301e-83be-f2515979c63c.roa
File: 2068d72c-6558-301e-83be-f2515979c63c.roa (raw, json)
Hash identifier: BClitth0OWz87FJArsctsHTPuSNuupirkBxYD4u13j4=
Subject key identifier: 97:B0:63:B3:11:E6:3F:EE:42:21:4E:3C:3C:1E:44:AD:78:80:8A:D0
Certificate issuer: /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial: 010D0C9F43285848292A9F9DFAEE7B5DA2FA9F8A
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/2068d72c-6558-301e-83be-f2515979c63c.roa
Signing time: Tue 10 Dec 2024 14:00:52 +0000
ROA not before: Tue 10 Dec 2024 14:00:52 +0000
ROA not after: Mon 10 Mar 2025 13:00:52 +0000
asID: 14618
IP address blocks: 199.167.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:2a:9f:9d:fa:ee:7b:5d:a2:fa:9f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Validity
Not Before: Dec 10 14:00:52 2024 GMT
Not After : Mar 10 13:00:52 2025 GMT
Subject: CN=5f71a348-6d90-4d78-b868-8241a5a13ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e0:52:14:ac:6d:ff:d8:6b:59:fe:85:4d:f0:
6b:b1:30:be:3d:fc:d4:36:89:98:c8:f8:ca:51:89:
29:45:8a:cb:5f:ba:9a:1d:af:4c:b3:d9:d1:00:9c:
fa:de:1b:5d:f8:ef:54:41:af:17:06:42:7b:a6:bc:
30:a1:cd:93:22:3a:19:c8:f7:d0:d7:10:7f:43:3a:
72:fb:46:93:96:c9:9f:28:cd:13:8c:e9:89:4b:01:
9c:4a:6e:7f:0d:8d:7d:98:85:22:e9:13:28:1b:9d:
92:50:c0:de:98:84:59:95:0e:f4:56:63:47:58:e7:
38:ea:56:2b:09:14:72:01:80:61:bf:29:3b:8a:51:
b6:e8:3b:b1:b6:a0:49:fe:65:e5:c9:b6:95:60:86:
ab:a7:a7:f8:d7:59:ae:7f:d5:4a:63:3a:5b:85:37:
fc:41:e5:b9:eb:eb:40:ef:ba:d0:3d:00:67:93:47:
ab:b6:59:d0:56:52:f0:85:a9:a0:a4:85:ca:9c:1f:
16:bb:36:1d:e9:35:4d:2c:6c:dc:21:78:ed:1c:b6:
e1:ce:de:b2:c6:45:be:b4:e4:84:29:c1:dd:e1:f5:
26:af:5b:39:4f:28:09:7b:2c:99:d8:a8:9b:0a:c7:
e7:8a:ea:03:18:24:c6:c9:61:18:b6:c0:f9:ff:44:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B0:63:B3:11:E6:3F:EE:42:21:4E:3C:3C:1E:44:AD:78:80:8A:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/2068d72c-6558-301e-83be-f2515979c63c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
X509v3 Authority Key Identifier:
keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
sbgp-ipAddrBlock: critical
IPv4:
199.167.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:04:b5:dd:32:9c:0e:8c:8a:e3:8d:02:b6:9c:1f:5b:a5:a1:
6e:2f:13:f3:ed:d1:27:bf:2d:41:7e:e8:52:2c:76:16:3e:01:
8f:2c:98:97:dc:b1:d9:4e:8d:b7:47:bf:a3:6f:c0:bc:e3:61:
e2:4e:5b:3f:0a:e3:4b:3f:72:b0:4f:79:2f:16:c8:ae:88:83:
b0:1d:a9:2b:9c:a0:39:1a:f7:70:62:05:39:83:fe:3b:8a:2c:
f8:30:65:df:db:7f:2d:c7:c0:2f:55:05:eb:b5:48:94:10:39:
27:ef:f6:e7:24:c2:1c:5b:6d:51:b7:27:9b:5d:f5:5f:99:72:
5e:43:d1:a4:29:9b:3d:ed:0b:32:88:83:6c:65:7e:0e:53:38:
4e:bc:2a:7f:1f:f4:29:07:c9:0e:29:6e:12:61:0a:4a:40:af:
ba:04:5c:4c:64:a9:24:33:39:d9:4b:c1:ed:e7:21:b3:e1:7d:
09:53:4e:09:a4:2d:64:d9:07:ee:82:ea:99:e2:4e:84:10:dc:
e1:15:d7:9e:ce:3a:8f:7c:1e:5e:e1:9e:3b:7a:c5:bd:4f:eb:
ed:a8:83:7f:f6:90:04:6f:33:83:7b:52:4a:7e:8a:de:ed:97:
0c:da:0d:a4:78:f1:e5:75:0c:41:fd:9e:73:1a:98:ad:0e:e5:
1f:b6:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:10 2025 by rpki-client