Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e0ad3b0f-7869-3619-ab7f-8889d031055b.roa
File: e0ad3b0f-7869-3619-ab7f-8889d031055b.roa (raw, json)
Hash identifier: 7SOcd8Vo9BCv6aYwSw7ybyYpSMywGq2ZCIm5AKdMZRQ=
Subject key identifier: FB:C2:11:B5:27:DF:29:30:AE:E7:46:A4:92:F5:A2:50:BF:64:AC:C2
Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial: 010D0C9F432858485040353E0B2121357DEAF340
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e0ad3b0f-7869-3619-ab7f-8889d031055b.roa
Signing time: Tue 24 Dec 2024 14:00:53 +0000
ROA not before: Tue 24 Dec 2024 14:00:53 +0000
ROA not after: Mon 24 Mar 2025 13:00:53 +0000
asID: 394094
IP address blocks: 65.99.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:50:40:35:3e:0b:21:21:35:7d:ea:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Validity
Not Before: Dec 24 14:00:53 2024 GMT
Not After : Mar 24 13:00:53 2025 GMT
Subject: CN=9397cd36-da5d-47d1-9993-898a3222954e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:10:15:c1:a2:db:a9:a4:5f:25:3e:15:8f:
4c:f5:71:c8:46:f4:a9:96:29:5f:d9:9c:4b:bd:22:
da:93:a9:f1:c0:9a:ce:91:e8:d2:15:de:38:06:1c:
0a:14:a9:e6:e4:40:f7:b3:ce:ae:c7:d6:9a:98:9d:
5d:94:d2:d8:83:58:e4:6d:73:26:e9:66:ff:77:68:
4f:21:76:e6:b8:40:1d:fd:e8:e4:22:27:8d:ec:cf:
54:a1:47:22:a6:f5:71:79:45:50:b5:51:85:64:fb:
94:54:f6:8e:93:de:25:80:bf:5f:d6:bf:2f:eb:e7:
60:46:1e:6f:c3:7b:fc:c6:fc:af:85:e4:86:f0:9b:
3e:80:ee:1c:33:84:20:77:eb:54:64:cb:3d:60:5a:
aa:2d:2e:9c:0f:0f:a4:57:25:f6:74:05:b3:bf:98:
c7:f3:ee:ff:0c:a8:75:58:61:86:e3:b3:4e:49:ac:
46:47:d7:77:f3:e9:f9:d3:83:25:c1:51:f1:1e:44:
b8:1f:10:73:e4:2e:57:71:67:e9:e6:a5:f5:d6:1a:
58:c5:08:82:1e:09:79:c5:c0:65:fd:5c:65:3f:3b:
b9:a6:9e:64:94:94:64:1a:1e:8e:dd:4e:26:1b:8d:
a7:0b:29:3a:58:29:f3:69:4b:d5:ad:a7:1c:d9:6e:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C2:11:B5:27:DF:29:30:AE:E7:46:A4:92:F5:A2:50:BF:64:AC:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e0ad3b0f-7869-3619-ab7f-8889d031055b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
X509v3 Authority Key Identifier:
keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
sbgp-ipAddrBlock: critical
IPv4:
65.99.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:ab:af:06:04:dd:15:d9:12:fa:b0:b6:9a:d4:a7:13:ae:4e:
00:a0:c6:49:d7:65:b0:a8:cc:59:b9:12:a0:76:3e:d5:db:35:
49:33:b3:7c:22:1c:d2:fa:12:da:13:5d:5b:e6:07:fc:d7:1c:
d8:88:f5:b2:09:0b:fe:a2:fd:8d:2f:af:2f:fb:b2:80:d1:d2:
dc:52:dc:54:15:98:d5:e3:0e:18:8b:11:65:2b:7c:2c:5d:83:
0a:da:dc:b0:b4:d4:9a:6e:df:b5:7b:c2:ea:65:64:e5:9a:bd:
81:e1:7d:69:3b:c5:7b:47:71:8a:48:0b:16:20:40:a3:b8:9e:
ad:a9:8c:bd:f9:66:a8:0f:40:ca:47:de:d8:f2:4d:60:db:c9:
f0:29:6f:1b:d9:8a:92:06:d7:78:79:c4:e9:5c:f0:d1:53:79:
6c:00:0b:98:e8:13:25:ca:f6:e8:41:4e:41:e2:b3:ed:18:78:
dc:8d:80:45:51:52:c3:5d:70:f9:93:d3:5e:2f:6c:80:3c:99:
00:41:7b:fb:7e:84:bc:10:39:2a:fb:5f:80:87:82:54:53:c0:
c7:ed:b6:b5:d1:3d:dd:e8:94:b4:db:10:72:7d:64:4d:94:21:
09:4c:73:df:c1:07:f9:b7:a3:c1:be:1b:f1:6d:de:fe:9e:30:
8f:b4:22:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:13 2025 by rpki-client