Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa
File: daab233c-3584-3069-b9e0-933500bc4f22.roa (raw, json)
Hash identifier: fYJM7AmLqKmiP2gLcGmuMyyzqblbJkZIVXPfk06uKxg=
Subject key identifier: B1:56:F9:94:BC:54:F7:09:77:B1:4D:F0:A7:A2:1F:93:CE:D6:7F:D2
Certificate issuer: /CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
Certificate serial: 010D0C9F4328584891DB3173AAAC38E5BB3A1800
Authority key identifier: 93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 20371
IP address blocks: 199.202.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:31:73:aa:ac:38:e5:bb:3a:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b1b458-5261-4e4a-a0fc-1757fe461f75
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=12d65d32-b109-4ee7-b38e-69d76c44f761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7b:f4:54:80:4b:6f:9a:85:21:ca:3a:f0:44:
ab:03:e2:73:4e:33:b0:59:4f:6c:04:8e:f4:6e:45:
a2:71:bc:69:52:cd:27:0b:b6:f7:01:c4:e9:0f:e3:
b0:1f:2a:a3:4b:d3:a3:53:37:39:6b:37:92:1c:58:
f7:70:7a:d1:4e:c0:b6:78:30:e5:d5:3e:9e:d9:99:
ce:a3:23:db:bb:fd:56:c8:41:7d:65:9a:85:a5:e3:
17:6e:65:9c:2c:b2:03:ce:b8:f5:82:49:55:7a:d3:
34:fb:23:42:18:f2:c7:41:5f:11:6a:a1:0e:40:d7:
83:90:25:63:7c:8b:28:9f:ab:62:7f:f5:70:93:2e:
44:ce:0b:3b:8a:a8:65:7b:13:13:76:29:95:b6:fa:
59:36:a0:46:d1:6a:91:19:76:58:f3:91:94:3a:91:
38:c3:4e:64:99:21:be:97:54:eb:a1:e4:17:bc:f3:
a3:72:a6:2d:ae:23:8e:5b:0a:8f:cf:4b:f5:09:1b:
dd:21:25:53:f3:a5:99:6e:c9:7a:ef:2d:64:b3:9f:
79:11:ed:f0:4b:f7:23:66:7b:d7:f3:3a:8d:6d:65:
28:ab:b0:95:01:4a:b2:11:08:39:7b:c7:82:14:cc:
ae:60:62:aa:e6:87:b0:bf:f6:8c:0c:a4:8b:89:61:
9b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:56:F9:94:BC:54:F7:09:77:B1:4D:F0:A7:A2:1F:93:CE:D6:7F:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/daab233c-3584-3069-b9e0-933500bc4f22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75/07b1b458-5261-4e4a-a0fc-1757fe461f75.crl
X509v3 Authority Key Identifier:
keyid:93:6E:45:7E:D8:C9:63:EE:99:E8:2F:26:1A:3D:10:CE:14:AA:B6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/07b1b458-5261-4e4a-a0fc-1757fe461f75.cer
sbgp-ipAddrBlock: critical
IPv4:
199.202.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:b3:4f:ef:0f:81:82:74:87:28:dd:2a:61:03:ed:d4:ea:09:
df:a0:45:da:d3:e0:7d:f5:24:46:58:4f:6f:73:41:19:10:6a:
32:35:88:35:16:0d:48:16:98:09:bf:3c:dd:06:e3:c5:42:d4:
dc:0b:33:6f:ad:a9:fd:1e:4c:ce:e6:43:52:d1:3d:74:05:74:
87:85:21:86:07:51:c3:94:82:8c:71:5d:49:39:5d:e2:0a:44:
25:b3:a6:b8:df:6c:b9:64:02:a4:5b:32:7b:93:d5:40:6b:eb:
2e:bc:75:60:ab:fa:08:a5:f9:a0:c2:21:ab:19:61:85:fe:b2:
ca:9c:dd:9b:40:ec:09:92:66:82:57:4a:ba:81:4a:11:02:a5:
c7:f4:b7:23:93:b9:57:7f:37:dc:b9:d4:dd:1e:e5:20:27:17:
6c:e8:1b:bf:30:e3:3d:5b:1a:e3:34:4a:18:8e:d0:ad:01:bd:
d0:5a:87:62:61:67:19:21:20:df:4b:15:d2:c8:b1:ee:7c:b0:
0b:63:bc:93:9a:4f:10:eb:3c:42:e7:3a:c6:71:86:a3:f5:36:
19:83:e7:92:da:70:54:a3:57:c2:e6:6b:8f:d0:6b:04:eb:c0:
fb:51:b8:b2:8f:59:93:3f:04:2c:ed:b1:26:c4:4e:f7:86:73:
3e:9e:cc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:03:32 2025 by rpki-client