Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa
File: d3a5dd72-8e2a-305c-8745-ad834707c297.roa (raw, json)
Hash identifier: xqWq5QWiMP6ccZ6T9fdMdTzpJEk5xRC5gEOM+YyrmUk=
Subject key identifier: 70:CE:44:64:9C:36:46:3B:D6:EA:4A:43:FC:72:DA:6F:6D:0A:23:96
Certificate issuer: /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial: 010D0C9F432858481C9A8CE40284A1DDB8433E80
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 211440
IP address blocks: 199.48.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8c:e4:02:84:a1:dd:b8:43:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=22a273c4-c341-4130-9a5f-7df192ad5ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1c:74:18:eb:37:6f:d2:ae:72:86:97:7e:5e:
37:cd:52:b7:cf:4f:d7:a8:56:0f:d8:b2:5f:4f:73:
a1:80:92:8a:f6:c2:b6:21:71:09:13:e3:30:d3:73:
5d:3f:99:76:c5:aa:73:32:f4:02:f7:8b:98:22:8a:
f1:e0:77:b2:d7:50:19:b0:2c:31:df:d7:5f:68:eb:
8a:82:fa:33:a9:15:e2:4e:00:00:53:c0:a5:d2:ce:
9b:32:88:db:0e:91:d0:bb:a8:43:9c:07:0b:6b:de:
1b:6d:3b:00:ae:72:9c:91:53:be:67:e9:80:8c:d9:
ea:ea:4e:4e:32:05:3a:9a:65:f3:b4:9f:8c:72:9d:
1e:36:5e:19:d7:b6:95:f1:c3:d5:42:24:0c:54:b2:
ac:c7:7c:7d:a4:61:95:c9:81:24:42:21:81:6c:8a:
a4:68:3b:94:67:28:57:1e:80:44:45:24:ef:ab:44:
85:d4:c6:2b:70:25:6e:07:32:6a:62:b1:a3:a9:f8:
e0:fc:c1:e8:80:e8:a8:45:99:70:be:66:fd:45:cc:
82:57:2f:bd:b3:b0:72:36:5a:4d:ba:7c:3d:f6:c6:
3f:23:69:f5:23:f4:3f:e5:c3:ea:37:d0:3d:a5:37:
76:56:5c:58:16:5e:30:db:c1:7e:f7:a8:8d:c8:28:
ac:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:CE:44:64:9C:36:46:3B:D6:EA:4A:43:FC:72:DA:6F:6D:0A:23:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/d3a5dd72-8e2a-305c-8745-ad834707c297.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
X509v3 Authority Key Identifier:
keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
sbgp-ipAddrBlock: critical
IPv4:
199.48.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:5f:2b:49:bc:9b:0f:15:ed:61:63:b3:78:0a:0e:63:c4:9a:
cd:e9:8c:9e:03:02:9f:60:a7:d9:d0:4b:0f:8b:18:7e:b6:c8:
12:09:ee:25:7d:03:be:e4:11:00:f7:06:2c:f3:08:67:84:bf:
21:ea:28:34:ec:eb:cb:30:98:27:e5:75:e4:c8:6b:ee:c1:e4:
b0:dc:39:1d:65:a8:b9:1d:ea:4f:1a:7a:6f:bd:35:eb:96:28:
eb:c5:95:b1:c2:67:d2:af:a5:ab:f5:94:68:86:df:da:5d:2e:
78:80:54:81:9f:5d:5a:6d:09:7b:9e:93:cf:52:ef:0c:24:7b:
ed:be:26:84:66:6a:ba:b5:2a:f5:20:75:35:e0:eb:eb:11:af:
4e:fe:bb:73:15:54:a8:8b:d4:4f:e9:36:49:42:f6:f2:e6:52:
bd:96:a5:d1:a5:df:7e:0b:16:65:11:8a:4e:06:ef:b1:a8:dc:
99:4c:85:fc:56:f0:79:e8:47:02:be:93:d5:30:e4:80:20:1f:
22:f7:35:62:c8:3c:8c:d7:a3:9f:64:49:44:d3:05:40:6a:18:
93:c9:41:09:6c:7d:d5:94:e8:a9:80:7f:c4:97:b9:c6:5c:d7:
8d:2e:ee:f6:71:75:ac:fa:e8:ae:b8:58:d2:12:21:9c:7f:9e:
26:33:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:01:12 2025 by rpki-client