Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/554b5153-bd14-3fa2-b11e-cd539e6e2916.roa
File: 554b5153-bd14-3fa2-b11e-cd539e6e2916.roa (raw, json)
Hash identifier: ImHRJl2037b283ofVwBJY14cHO2BqygKUszJwxKhVs4=
Subject key identifier: 15:4A:10:44:1D:D6:BC:8D:D2:E4:50:51:F4:DE:52:7A:3E:BE:E7:EB
Certificate issuer: /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial: 010D0C9F43285848064506E9D8DC6903DAA49F00
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/554b5153-bd14-3fa2-b11e-cd539e6e2916.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 65104
IP address blocks: 199.212.84.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:06:e9:d8:dc:69:03:da:a4:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=0850655b-be7c-4dc7-956a-b9a039393549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:02:9c:9a:74:50:f8:dd:70:81:8e:d0:4f:
8e:54:df:54:29:a7:4b:40:7d:9d:77:b3:ba:ef:ce:
f7:65:4b:ed:b1:09:4b:0b:73:43:cc:ca:de:e0:ba:
9a:32:ae:14:3a:2f:98:88:68:8f:02:d6:83:0e:31:
80:07:a1:c8:ec:6c:39:d8:d2:78:f2:d2:08:01:e8:
3c:fc:d3:b3:e0:ac:d4:92:47:99:41:95:77:d7:50:
ff:f5:35:2f:da:4e:62:b6:43:fe:d3:05:08:51:e7:
e3:ba:fa:29:f0:7a:3c:65:b4:1b:6b:6f:0b:78:f7:
0a:a1:1d:22:5b:01:18:77:39:24:44:4a:14:0d:4b:
51:30:1d:b3:e8:3e:7e:c0:7e:66:23:a0:64:84:f8:
30:c6:72:5e:46:0a:fa:01:92:0c:27:dc:39:7d:cc:
fb:7f:61:f3:3d:1c:f4:37:49:ea:86:23:a2:54:44:
b3:45:9d:32:71:50:6a:e7:45:c9:96:d7:b8:d2:d3:
76:90:e4:e4:9f:33:17:68:2d:7b:a5:49:5f:a0:38:
cc:b3:4f:0d:53:54:62:6e:1d:a9:0a:4a:c0:17:5a:
0b:2a:78:31:36:10:7f:37:b9:f1:69:6c:76:5d:cc:
e1:48:59:82:73:ef:0d:88:36:29:55:ec:29:b0:9a:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4A:10:44:1D:D6:BC:8D:D2:E4:50:51:F4:DE:52:7A:3E:BE:E7:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/554b5153-bd14-3fa2-b11e-cd539e6e2916.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl
X509v3 Authority Key Identifier:
keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
sbgp-ipAddrBlock: critical
IPv4:
199.212.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:69:b9:96:ae:af:04:07:8c:37:2a:78:f6:76:28:59:55:7f:
f5:fa:15:80:3e:6f:ac:16:59:8b:ab:71:89:cc:cf:a4:4d:06:
79:0c:09:f3:6b:5f:bb:af:cd:0d:1f:95:21:53:05:67:b9:3c:
85:46:93:7e:a8:4d:88:8d:bf:55:de:27:c0:30:5a:61:87:df:
06:d0:82:4e:e2:63:69:32:09:9c:5f:e3:09:1b:ba:3e:0e:11:
90:fe:53:14:0a:c4:d7:7c:8a:7d:4f:7b:3f:70:2e:45:73:3e:
24:b2:26:fa:d2:e9:b0:93:4a:f6:8b:b2:71:02:c7:73:33:df:
1c:8b:fe:65:c1:ef:84:b3:6c:49:1c:10:dc:d3:63:a5:0c:7a:
f9:0c:bf:16:43:c4:2b:87:ca:ca:f1:79:dd:f1:5a:c1:54:ae:
35:ba:cc:00:3e:bd:4c:d4:2d:b5:a9:5f:27:c9:5c:ad:d8:19:
47:9e:7f:15:c4:c7:31:9d:1f:1e:2a:c9:c6:f8:2b:6c:13:07:
66:34:56:26:3b:03:70:43:34:6a:07:c5:9c:5e:29:5e:ad:5c:
1f:26:19:39:bb:9b:77:9c:92:ac:d7:3c:0f:96:7f:3b:a9:99:
75:4f:3d:55:06:31:49:bd:04:7a:03:da:07:e1:3a:43:6e:1d:
48:06:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:21 2025 by rpki-client