Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/599a4abf-0151-3767-b925-760ecad0dd92.roa
File: 599a4abf-0151-3767-b925-760ecad0dd92.roa (raw, json)
Hash identifier: z+jk0lmHNWvkMd67AEWlPro6ouxTjxcF8UACeQBcjxk=
Subject key identifier: 58:35:B7:17:24:F2:0C:64:7D:90:0F:67:AA:2F:62:27:7B:AC:67:26
Certificate issuer: /CN=900d3223-79ad-4ee2-af23-163d305bdd0a
Certificate serial: 010D0C9F43285848037B5F7584FB0C21C4FEA280
Authority key identifier: 7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/599a4abf-0151-3767-b925-760ecad0dd92.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 208.64.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:5f:75:84:fb:0c:21:c4:fe:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=900d3223-79ad-4ee2-af23-163d305bdd0a
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=ecd00a91-fb65-4a44-a6b9-de3727e9760f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:9c:f6:15:26:0b:5c:6b:5b:8d:98:6d:e9:
53:7b:07:ce:f9:4a:03:74:d5:c2:1a:fd:4a:8b:e5:
e4:23:ba:69:5b:1f:a3:cd:91:7f:ab:60:75:48:8f:
50:d2:0c:68:e0:ae:d2:0b:9a:84:5c:db:9a:aa:41:
89:41:b6:3f:47:13:2c:18:b4:bc:1f:58:5b:98:08:
d3:0e:34:c6:97:44:f1:d0:38:95:34:a9:54:d6:28:
79:56:e7:2b:d3:40:aa:aa:a3:4c:87:16:2b:39:96:
dc:a5:df:33:3b:44:46:12:18:4e:34:d0:84:6d:fc:
01:a1:40:4d:3a:8a:22:37:51:34:de:1f:35:e7:fb:
8a:6a:01:0d:8f:da:75:0e:66:15:6e:1b:96:fa:bb:
67:d7:cd:11:9f:26:f4:09:01:39:e8:8d:ce:a1:1a:
63:e9:06:78:d5:f0:ae:5b:52:1e:c6:8e:77:ba:93:
3e:f8:12:c6:3f:24:23:07:9e:3e:f8:ed:09:d8:79:
68:79:4f:18:26:eb:ef:7c:f8:c7:a0:7f:bf:f6:bd:
c8:6e:29:3e:cc:98:58:fa:5d:f5:83:d3:12:f3:52:
97:c6:f4:95:6f:d5:f9:bf:c1:51:bf:31:b6:97:df:
61:47:67:32:e1:57:d4:66:7f:03:ad:1c:4b:27:ac:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:35:B7:17:24:F2:0C:64:7D:90:0F:67:AA:2F:62:27:7B:AC:67:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/599a4abf-0151-3767-b925-760ecad0dd92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a/900d3223-79ad-4ee2-af23-163d305bdd0a.crl
X509v3 Authority Key Identifier:
keyid:7D:D6:33:9D:D2:D7:AE:48:75:4D:EE:25:DD:4E:7E:D5:65:C5:3A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/900d3223-79ad-4ee2-af23-163d305bdd0a.cer
sbgp-ipAddrBlock: critical
IPv4:
208.64.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:ab:ac:bd:42:d2:6e:33:14:11:ea:f6:a3:fc:70:47:a6:8a:
5d:84:10:01:51:eb:16:ed:1f:2e:96:5d:c5:d8:55:6f:53:a0:
5f:5b:8e:07:a5:48:ff:98:81:ff:63:86:37:06:63:b1:7d:76:
8b:29:14:a7:6d:5f:67:7e:eb:bf:40:a1:c3:8a:8f:d7:ed:cc:
32:3b:0d:57:b9:ff:55:07:b7:40:35:d6:d9:41:ec:48:ad:20:
50:f6:dc:21:ad:8a:04:b5:e8:20:49:62:f2:67:1a:0a:d1:45:
cc:7b:89:40:e6:b0:b5:85:1f:8e:1d:18:31:7b:dc:ad:d1:e4:
4e:a4:44:cc:88:27:9b:4f:9f:2c:27:ea:48:ee:b5:ab:2b:0c:
5a:2b:be:90:55:01:e3:ea:a3:a9:5f:5c:86:60:35:76:e9:bb:
e6:4e:44:af:3d:80:af:7b:bc:ca:66:e2:5a:f0:c0:0d:cb:0a:
b0:ca:93:03:01:65:b8:2a:c0:c4:b8:83:60:0f:86:e4:5f:47:
52:e6:45:8c:f9:d8:08:a8:7f:27:68:db:8a:09:de:62:fa:fb:
e4:24:d2:21:1d:58:53:1d:51:92:f7:19:e8:b4:38:09:1b:aa:
25:12:c7:dd:fc:24:e8:7c:18:12:2f:3f:a8:18:d2:59:18:79:
e6:40:0d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:20 2025 by rpki-client