Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d92df1bc-9773-35dd-bdd7-aadba8945c62.roa
File: d92df1bc-9773-35dd-bdd7-aadba8945c62.roa (raw, json)
Hash identifier: jSxxZ17QzfPGKzuWUwIdd+6fImt1tnI1Bt9PiugpRLk=
Subject key identifier: 8D:C2:6D:5C:EF:8B:B9:D5:60:82:B1:A8:C9:9E:A1:8E:51:44:AF:5E
Certificate issuer: /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Certificate serial: 010D0C9F432858482A8FE25B8CB3FCBC0D4A4780
Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d92df1bc-9773-35dd-bdd7-aadba8945c62.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 16509
IP address blocks: 67.199.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e2:5b:8c:b3:fc:bc:0d:4a:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=2920a6cf-9a9b-4f53-9dbd-f07bb9ac7b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d0:c7:04:ee:0d:23:67:c4:64:c6:7b:ca:ad:
79:fd:6e:79:5f:d0:e7:25:79:6e:87:bd:b5:6b:11:
ae:a5:2f:56:2b:91:cd:29:21:e5:0c:10:cc:0b:14:
18:77:bb:b6:22:06:d5:7d:0c:9c:14:36:17:ac:cf:
e5:b2:c6:80:04:c3:5b:8e:c6:6b:53:c4:33:23:68:
33:0f:bd:13:36:c9:f0:dd:96:5f:58:a6:91:df:db:
1d:6b:c1:33:4a:41:51:06:ae:e9:6e:42:d7:81:eb:
3f:b7:f7:fd:02:e1:b0:5c:7e:c9:5f:2d:90:54:2c:
bf:c2:a9:56:11:95:1f:62:f8:d3:6c:e2:57:e8:b1:
30:d2:eb:47:c5:e6:2e:c1:8d:44:78:cc:e8:80:63:
12:ff:d3:7f:4f:28:5d:e0:31:e4:cc:05:0d:16:f5:
55:05:32:62:96:c3:3d:7e:f1:c3:2f:9d:76:48:7c:
06:57:50:93:4f:b3:b3:ed:f5:be:63:be:61:27:59:
e9:51:a6:d7:94:00:43:e5:be:f1:0f:d0:7a:74:de:
a5:3b:2b:7e:c6:e6:9d:57:cf:8a:44:d4:5c:a5:59:
ab:11:69:74:c5:3a:aa:83:82:14:ba:e6:c7:67:de:
d8:e0:ae:85:6e:e1:3e:0b:28:49:12:a1:25:3d:09:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C2:6D:5C:EF:8B:B9:D5:60:82:B1:A8:C9:9E:A1:8E:51:44:AF:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d92df1bc-9773-35dd-bdd7-aadba8945c62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl
X509v3 Authority Key Identifier:
keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
sbgp-ipAddrBlock: critical
IPv4:
67.199.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:9a:1a:f0:4d:d0:77:d9:0e:cb:12:b1:fa:a8:bb:fb:e2:8e:
0c:97:9c:04:7a:ac:73:b7:96:d1:ed:8b:fa:53:29:3f:01:3a:
13:93:1f:b8:40:17:2a:0f:be:8e:f3:a4:be:55:17:48:5e:bb:
af:16:b1:16:74:23:38:c8:8d:95:2d:53:0e:e2:ee:8c:4f:80:
53:1e:a1:cb:ef:9e:d8:ce:1a:06:8d:52:bb:02:b9:7d:75:85:
eb:b4:f1:09:ae:43:8a:aa:6b:f0:03:55:6d:92:af:87:28:e6:
02:87:38:83:24:a8:bc:6c:83:72:7a:24:08:cc:a8:ec:10:c9:
37:91:5a:50:73:bd:9e:16:74:f6:94:14:86:b9:fb:5c:11:f6:
d2:12:f6:70:84:bc:ae:2f:49:4e:5e:21:cc:95:cd:f0:da:07:
a9:43:8b:00:a9:c4:52:61:2d:e9:ed:ea:7c:df:0d:76:ee:45:
d9:da:13:9f:1f:a6:7e:c0:00:77:56:7b:e2:ce:b0:03:3b:23:
9a:30:40:3e:9e:21:c1:5e:8a:00:87:93:67:ee:56:f1:9c:cf:
e2:b4:88:34:91:56:2d:1d:cf:0b:cf:55:3f:7c:35:f0:f3:ba:
05:54:25:5a:29:ff:44:1d:9e:33:8b:6e:06:0b:c7:61:01:ca:
8d:b8:1a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:09 2025 by rpki-client