Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9afd038-6c26-42a9-a216-ccb00c16c4d2/41d9d6c7-d382-3809-be0c-b78dfba0d9f0.roa
File: 41d9d6c7-d382-3809-be0c-b78dfba0d9f0.roa (raw, json)
Hash identifier: 3AiTGtPgnc4oaSpuQf1763tZ3bWT5Eriscj81yS6qqg=
Subject key identifier: 38:2D:22:B4:C8:AC:48:E9:63:E8:9C:20:2F:71:F4:D7:E5:9D:F6:79
Certificate issuer: /CN=f9afd038-6c26-42a9-a216-ccb00c16c4d2
Certificate serial: 010D0C9F4328584810F35CB4FCCBC59ACC71CE30
Authority key identifier: 95:09:66:D9:F8:F3:69:01:84:4C:A7:B4:A1:C2:B8:60:B0:DD:89:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9afd038-6c26-42a9-a216-ccb00c16c4d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9afd038-6c26-42a9-a216-ccb00c16c4d2/41d9d6c7-d382-3809-be0c-b78dfba0d9f0.roa
Signing time: Sun 01 Dec 2024 21:50:10 +0000
ROA not before: Sun 01 Dec 2024 21:50:10 +0000
ROA not after: Sat 01 Mar 2025 21:50:10 +0000
asID: 398647
IP address blocks: 199.73.93.0/24 maxlen: 24
199.73.94.0/24 maxlen: 24
199.73.95.0/24 maxlen: 24
2602:fbe0::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:f3:5c:b4:fc:cb:c5:9a:cc:71:ce:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9afd038-6c26-42a9-a216-ccb00c16c4d2
Validity
Not Before: Dec 1 21:50:10 2024 GMT
Not After : Mar 1 21:50:10 2025 GMT
Subject: CN=3065618a-9c1e-46b2-8d15-9e8740eb5c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:69:31:4d:bd:e8:17:8a:92:0d:6b:60:3e:85:
37:2f:4e:cc:20:44:9b:94:fe:35:b7:90:05:39:1d:
d6:78:e1:dd:9e:51:49:32:11:e4:b0:86:2f:f9:24:
92:e8:ea:d2:92:48:37:be:0b:60:d4:18:08:a3:32:
39:f7:10:4a:e2:31:d6:00:b4:e0:65:8a:3e:b4:6f:
46:63:26:f5:4e:83:03:bb:e3:d1:e7:d3:05:61:97:
c3:5e:6f:95:0c:e8:23:df:0f:94:3e:7c:85:6c:3e:
6c:22:b0:5c:83:9a:b0:9a:8d:48:38:9a:bf:ea:da:
45:a7:75:fc:7c:84:32:54:6b:54:08:18:0e:bd:bb:
90:15:32:b3:bc:bb:ad:38:92:5f:0d:7e:38:79:bf:
53:f6:2f:22:ae:69:ca:6b:d2:a2:3d:d9:5f:41:63:
1f:51:9b:a1:8e:58:0f:43:24:33:56:46:e6:87:4d:
b9:b0:e9:12:25:63:52:47:67:b2:62:30:52:cc:0c:
55:e0:c9:bd:9b:27:d5:ea:be:eb:a3:b4:ea:2b:a5:
a8:f2:dd:80:b2:16:0c:9e:f7:a4:2c:9a:27:43:d9:
e4:49:8b:7f:f4:64:b5:e0:f1:c9:75:33:4b:4a:81:
3f:0c:3d:d1:39:2f:c0:a5:4b:8d:1b:92:51:c2:01:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2D:22:B4:C8:AC:48:E9:63:E8:9C:20:2F:71:F4:D7:E5:9D:F6:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9afd038-6c26-42a9-a216-ccb00c16c4d2/41d9d6c7-d382-3809-be0c-b78dfba0d9f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9afd038-6c26-42a9-a216-ccb00c16c4d2/f9afd038-6c26-42a9-a216-ccb00c16c4d2.crl
X509v3 Authority Key Identifier:
keyid:95:09:66:D9:F8:F3:69:01:84:4C:A7:B4:A1:C2:B8:60:B0:DD:89:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f9afd038-6c26-42a9-a216-ccb00c16c4d2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.73.93.0-199.73.95.255
IPv6:
2602:fbe0::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:8c:da:01:e8:b5:f7:64:86:b2:e2:51:13:cd:98:b1:99:87:
16:b2:ff:c7:1c:2a:66:0b:2f:b1:4e:a1:fc:30:9c:50:04:af:
a9:00:2d:d2:14:05:95:91:ed:eb:4a:2a:c6:c0:43:b5:9b:f2:
f0:84:3f:da:19:1e:82:4d:57:1d:c8:b1:dd:8e:9b:34:b6:28:
13:20:90:a6:e8:dd:74:d5:e9:bd:90:69:f3:fd:da:a5:88:8e:
af:c1:4e:9c:9a:83:64:8e:17:52:1d:59:4c:74:74:66:25:82:
0f:42:fe:b2:56:e9:4d:a5:ba:e5:d9:54:78:e2:27:41:92:23:
f2:86:a2:8f:65:11:18:b2:24:ab:28:a3:88:f0:6b:47:d1:4d:
23:ea:61:21:bb:8d:82:31:ac:77:d9:5d:bb:4d:4d:ee:00:93:
be:77:af:f4:a9:28:44:15:81:e3:11:74:fa:5a:35:c9:2f:3e:
f4:2f:c3:f6:43:d3:2e:51:2b:dc:20:1c:2b:e5:3b:6c:2b:fd:
59:e0:8e:eb:5e:0c:fa:5f:3e:a0:3e:df:70:5e:be:f1:96:58:
fe:3e:f1:da:e8:17:93:c2:8a:b9:9f:b1:9f:13:33:ca:65:61:
dc:da:d2:f4:d5:3c:ae:cd:dd:fb:64:7d:0f:26:f0:30:ac:3b:
4e:72:23:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 4 23:36:26 2025 by rpki-client