Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/e4e9881e-159c-3652-8e1f-db181f6e764b.roa
File: e4e9881e-159c-3652-8e1f-db181f6e764b.roa (raw, json)
Hash identifier: 4P7BQoIgmunDb7KYNuC1hecfbyOhDsTNpGwxjw7AHsQ=
Subject key identifier: 64:47:D1:8A:EC:87:5A:13:78:73:B4:2E:DF:56:CB:AC:38:54:CC:87
Certificate issuer: /CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Certificate serial: 010D0C9F432858485470316DCED617D7DC8A1500
Authority key identifier: 09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/e4e9881e-159c-3652-8e1f-db181f6e764b.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 65224
IP address blocks: 199.212.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:31:6d:ce:d6:17:d7:dc:8a:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe4e29c-f3ca-4ee5-92da-4443969e3deb
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=3a592432-4220-418a-b322-32214179a8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:46:a2:78:45:c4:6f:4f:ce:1c:b5:ff:c8:85:
eb:dc:1b:61:b6:44:37:6c:fc:0c:9b:43:70:41:65:
1e:f0:04:3e:6a:bb:6f:fb:23:6e:61:5e:4a:0d:c4:
fb:f9:a5:55:6f:e7:2d:31:04:0a:5e:10:c3:bc:57:
20:1b:2a:f9:9b:91:0c:17:b1:b7:15:1e:0d:d0:9f:
f8:98:7c:03:ab:e0:11:2f:25:e4:94:14:07:26:60:
cc:97:20:cb:b5:2b:df:4c:1a:af:a5:3a:7e:6b:68:
ed:1f:31:39:a2:ea:9a:bf:e6:36:ca:8a:44:28:31:
f3:41:07:f1:31:82:20:c9:3c:28:c0:8d:29:6e:59:
4c:70:be:10:03:1c:2a:d0:88:7a:ba:16:98:09:73:
44:f7:2e:4f:d2:fa:3d:0b:53:65:d9:92:42:09:06:
08:8b:e6:2a:11:94:a2:01:96:4c:f2:b9:25:af:0e:
c2:89:7d:bb:ba:ee:b5:de:67:0d:3d:41:57:98:76:
97:40:15:12:49:82:e6:4a:f3:5b:b9:41:7f:ee:41:
ad:1b:81:d3:5e:1d:63:3c:8c:5e:f2:1c:b1:61:4c:
d1:a3:07:f7:8c:96:b8:fb:8e:ef:05:0d:82:95:1a:
de:82:17:3d:49:d2:dd:66:d4:64:2a:87:16:44:e6:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:47:D1:8A:EC:87:5A:13:78:73:B4:2E:DF:56:CB:AC:38:54:CC:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/e4e9881e-159c-3652-8e1f-db181f6e764b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.crl
X509v3 Authority Key Identifier:
keyid:09:B5:C9:F4:9A:DD:E7:D5:0E:E8:DB:6E:F5:11:49:5E:86:E6:16:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1fe4e29c-f3ca-4ee5-92da-4443969e3deb.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:f5:3b:52:32:2a:4b:e8:e3:41:21:1b:ba:f1:53:fa:25:09:
97:25:3f:71:38:fe:1b:e9:6c:69:0b:c3:ed:76:90:66:d8:6a:
47:c7:80:f1:7f:ef:46:d3:10:52:76:fb:cf:d3:37:7d:81:6b:
81:f8:fe:cf:42:2f:83:05:ca:98:ac:46:d8:0f:94:42:a9:6e:
7f:5c:2d:29:aa:0d:fe:2b:83:d9:e1:f4:b5:ae:a6:f2:bf:b0:
ef:1f:96:22:dd:94:39:2c:cb:3b:19:6d:dd:0f:97:e8:95:56:
df:00:3f:4b:1a:50:c0:1e:b2:7a:9a:e7:8c:97:78:9f:96:73:
a7:a6:5b:13:88:7f:98:a2:a9:cd:b7:b0:c0:00:43:d8:3a:12:
ed:bc:1f:1e:f3:99:26:b4:76:f9:88:1d:4b:80:1c:02:56:9e:
78:be:11:e4:a5:d6:85:60:34:7f:99:89:3f:44:8f:b8:7c:bd:
90:b7:bd:c3:b5:28:b0:49:8a:9c:18:3d:66:b1:a2:19:c8:58:
2c:2c:23:d1:37:c0:1d:f9:d1:46:6e:d2:2e:9d:62:07:79:06:
7a:73:c3:9a:bc:5f:3e:20:09:83:4f:52:39:67:91:0d:c0:29:
20:ae:0a:9b:de:02:2f:41:ab:6e:7a:47:b5:52:df:f8:01:ac:
7d:54:db:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:57:26 2025 by rpki-client