Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa
File: f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (raw, json)
Hash identifier: 2RVwhrZiC9JW83P3tX/8ElqH3gucmhaXmAHCpVrehY0=
Subject key identifier: D8:78:51:2C:6D:19:F6:A4:8E:C4:3F:7E:A4:EF:70:2A:5C:FB:74:E1
Certificate issuer: /CN=f0ba84c0-5d44-4547-a368-e574b20611e4
Certificate serial: 010D0C9F432858484945649CCF56D812E24C4980
Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 33040
IP address blocks: 199.48.216.0/21 maxlen: 21
2605:3d40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:64:9c:cf:56:d8:12:e2:4c:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=dd0712a7-287b-4fe8-89c9-2f79ff64b2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:58:5a:66:c1:97:4f:a2:18:cd:dd:65:92:
b2:4a:ba:ff:aa:55:5b:74:08:bc:04:c5:d0:fc:e4:
b3:75:1f:a9:51:44:b9:3d:d9:d9:20:04:a9:c2:c0:
81:eb:70:d4:a0:6b:ee:d0:12:f5:45:04:0c:8b:93:
70:7f:5f:54:f0:bf:4e:6d:18:94:02:de:eb:71:1b:
7c:08:58:73:a6:d3:7f:6b:80:1c:2b:47:b5:a1:d2:
db:80:ed:0f:fd:e7:8a:50:48:e7:2d:cd:df:87:ff:
83:f1:b3:3e:b6:67:8b:2b:4a:c6:f6:cb:18:29:7a:
6f:58:bb:d7:72:2c:5d:92:b1:56:9f:ad:6a:35:39:
42:5b:71:fa:2b:95:f0:bb:09:7d:18:16:0f:63:3c:
4c:52:2e:3a:12:a8:11:1b:9d:25:10:05:8c:cc:65:
76:48:2c:71:56:fb:52:23:51:95:db:5c:80:c5:ee:
07:2d:e9:f9:d5:66:d5:00:6f:5f:88:f5:9f:d8:ab:
1d:30:fb:ba:55:1a:cb:01:88:01:34:94:e2:2e:dc:
1d:60:09:2b:b6:e0:56:84:bd:f6:99:a8:cc:02:01:
33:8e:f8:12:f2:c8:ad:3f:0a:11:b8:be:ad:fb:8d:
ff:95:23:13:57:68:6f:ea:cf:70:9e:a4:e5:f0:ce:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:78:51:2C:6D:19:F6:A4:8E:C4:3F:7E:A4:EF:70:2A:5C:FB:74:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f3849e8a-379a-30e7-aaef-8d8746b99eac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl
X509v3 Authority Key Identifier:
keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.216.0/21
IPv6:
2605:3d40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:a8:62:d0:a5:5e:10:9a:c8:58:c2:42:85:90:36:03:d1:70:
b7:39:a5:7a:0d:99:35:50:c5:d7:7a:b3:32:9a:3a:d8:f6:7b:
fb:69:1d:b7:14:5b:e2:df:28:d8:02:05:42:d8:e8:87:0c:5f:
48:44:98:64:dd:01:e7:cc:07:d9:28:49:f0:01:21:7d:74:e7:
e8:ee:e2:27:5c:80:c8:a3:13:94:dd:cb:e1:a4:0a:cc:a7:9b:
7d:4d:0a:c9:28:86:90:7e:f5:9c:b4:88:d8:de:e1:50:07:b7:
fd:5e:e3:66:c7:54:d1:0a:e7:fe:98:47:63:66:d1:c4:90:99:
5c:95:f8:fc:53:4b:d1:d8:53:66:4e:c7:43:0b:36:ee:b5:fc:
4e:b8:44:13:ee:c3:e8:b7:d2:3b:99:a7:6e:c9:9e:c2:70:0a:
35:29:70:7d:1d:ab:a0:e0:da:4c:53:ab:71:82:5c:70:dc:2c:
7b:f5:26:b5:0f:a5:42:7e:cf:86:91:39:33:52:51:d3:29:fe:
4a:91:10:6c:f7:91:47:15:48:c7:42:db:47:22:3f:ce:e3:cb:
7c:7b:c2:86:d2:7a:a7:49:62:10:b9:a8:eb:2f:17:2b:5b:95:
a7:f6:a9:1e:37:09:a4:80:3c:b3:e0:00:38:1c:c9:ae:e3:ed:
3f:0d:ca:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:46 2025 by rpki-client