Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa
File: d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa (raw, json)
Hash identifier: MaceyKa7N4oynMnEACuafJZ4oyGVf1sVKgrAIWCVZ58=
Subject key identifier: D1:B5:6A:E6:27:10:A1:61:C5:8D:BC:81:6A:CF:45:F3:6A:67:10:66
Certificate issuer: /CN=53ff129b-845f-449d-8e32-2b24ecbefea4
Certificate serial: 010D0C9F4328584819CFE24EC36501F59B8A26C0
Authority key identifier: 0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 8075
IP address blocks: 199.65.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:e2:4e:c3:65:01:f5:9b:8a:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ff129b-845f-449d-8e32-2b24ecbefea4
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=dff3df72-d944-4ad8-912a-6ecdcd6233cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:14:4b:e8:ce:3c:0b:17:ac:e8:f7:41:cd:
f0:94:20:42:2a:98:99:a5:61:4e:7e:5c:90:e8:03:
2a:ec:a0:e3:83:c9:3f:d7:00:54:dc:a3:fe:7d:2b:
4a:e7:11:b7:c7:5e:bc:62:1a:de:2c:b8:53:14:a7:
50:79:cf:1c:b7:c7:48:21:18:0c:87:6e:f4:fe:42:
56:ef:bd:8b:80:46:2f:46:7b:5a:7a:db:02:f8:f7:
48:44:0a:08:66:25:a5:93:ea:9b:9a:31:da:ef:58:
d0:d6:70:83:82:b7:6d:db:67:42:7e:5c:c9:ce:ee:
75:3a:7f:ad:f3:09:9d:01:fb:82:b1:8c:a8:a2:34:
cb:c4:25:6a:6e:32:ce:d8:79:8a:9e:0a:53:a8:65:
46:c3:cf:c2:4a:6f:98:41:b7:64:03:68:7c:99:9b:
4c:5f:81:8b:22:fb:5d:4a:02:80:23:7b:e1:1f:09:
b9:42:bf:b7:2f:fb:34:72:53:8b:8b:e7:ea:7e:43:
3a:d4:f2:5b:0e:2c:c0:83:1e:df:df:d8:34:ef:0b:
4d:b7:53:29:2f:7a:76:5f:c6:e2:88:e9:99:74:32:
9d:1a:b2:1a:74:0d:c3:b8:14:1b:ca:ee:d9:b3:0d:
90:32:a5:95:13:3d:73:0e:2a:29:6d:87:8a:33:6e:
5c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B5:6A:E6:27:10:A1:61:C5:8D:BC:81:6A:CF:45:F3:6A:67:10:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/d29eeb0a-46e9-304f-beb2-e9c0a5827757.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4/53ff129b-845f-449d-8e32-2b24ecbefea4.crl
X509v3 Authority Key Identifier:
keyid:0C:1D:ED:25:A1:15:F2:35:C9:47:C5:6B:9D:08:A9:BE:08:E8:35:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53ff129b-845f-449d-8e32-2b24ecbefea4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.65.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:69:76:f9:2d:34:29:81:e2:01:33:06:fb:44:95:a9:9c:49:
4c:df:3f:92:20:d5:89:5b:a3:84:86:c0:6c:8a:0b:e0:a2:5b:
ec:0d:b7:de:8c:d0:0f:c5:19:43:6b:80:e4:a0:24:b8:74:51:
ec:97:5a:94:f8:49:11:25:3e:e6:3d:88:93:9c:91:cf:9e:94:
4d:69:2b:c5:b7:21:34:c1:c0:35:3a:77:99:23:d5:0c:bb:1f:
c4:03:00:02:89:14:b4:28:73:48:c5:fd:97:84:0a:25:81:42:
0a:6b:95:7a:2c:d6:62:53:71:ce:1c:f2:11:ca:aa:6d:07:80:
71:66:2d:60:6a:5f:9c:2d:65:e0:cc:4c:43:af:bc:21:3f:c1:
c4:7f:98:0c:2f:a2:47:67:09:dd:f8:08:45:35:31:30:cb:72:
9e:53:a3:89:92:ec:0a:dc:ec:23:97:fb:8a:0c:91:66:19:c7:
05:41:85:72:4e:d3:47:54:46:1e:57:fa:c7:9f:0d:1d:30:dc:
46:b4:dd:c8:5f:f3:bf:b5:25:06:7d:98:cd:4e:23:48:17:54:
36:e4:7e:a0:3e:f0:ec:72:78:e7:eb:31:1b:af:13:94:5d:dd:
8e:cf:ee:60:3e:c9:b4:88:80:44:f9:88:0f:1d:84:83:e1:ec:
99:67:cc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:39 2025 by rpki-client