Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/657a060f-11de-3437-8e3b-e36a3da029c5.roa
File: 657a060f-11de-3437-8e3b-e36a3da029c5.roa (raw, json)
Hash identifier: LuUA/Il61LLmoZX4JTlWNe/umFu0AJDoMWKMhhwh1fE=
Subject key identifier: D5:BC:EA:8A:E5:D2:4D:0B:DD:0F:8F:62:59:44:75:FF:17:27:CF:7D
Certificate issuer: /CN=5886029e-a569-4937-b21c-91a2f3965848
Certificate serial: 010D0C9F432858484945633E9CD36B2793920900
Authority key identifier: 6F:EC:B4:C9:A1:C0:84:F9:57:43:1E:FD:87:D4:0D:0E:F9:35:7F:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/657a060f-11de-3437-8e3b-e36a3da029c5.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 16509
IP address blocks: 199.196.234.0/24 maxlen: 24
199.196.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:63:3e:9c:d3:6b:27:93:92:09:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5886029e-a569-4937-b21c-91a2f3965848
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=cf384472-8a95-4eb2-ad31-995af7d227b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:84:b5:be:d0:af:ce:c3:68:0a:41:48:6c:74:
ff:ee:46:12:de:b8:d4:25:c2:11:f8:03:83:e7:cd:
2a:0b:ad:ee:d5:6a:b0:d2:24:58:33:e6:36:84:18:
58:e6:2e:22:62:73:22:af:cf:6c:01:61:3b:60:bf:
b2:98:9a:a8:4d:21:57:8b:88:56:4d:db:c9:8e:06:
c0:99:88:44:0d:8e:ef:b3:1d:6c:90:41:09:2e:6c:
a5:db:fb:27:0c:02:55:ad:11:b7:f9:42:95:dd:ec:
b3:30:83:59:3c:e9:eb:48:42:d3:d4:91:1b:1f:36:
d1:4d:47:5d:a9:50:67:d5:51:80:e8:c0:c6:e9:cd:
76:5e:9d:b2:bf:a1:bf:e9:55:24:30:93:54:2f:b0:
90:78:59:84:f8:d4:6d:ef:1a:d8:d6:83:cf:50:7e:
8a:7d:4b:79:83:88:52:97:07:bf:ee:d5:aa:26:0f:
bc:1b:82:32:90:53:bd:75:3d:fe:c0:dd:1f:4d:6f:
a8:c9:09:95:c4:2b:29:46:58:f3:02:77:95:f6:6a:
72:3a:8b:14:ec:c6:d7:89:bc:c3:aa:ac:90:1d:47:
5a:c9:62:a0:13:1d:3d:b2:f1:d7:86:d3:b4:93:41:
3f:b5:7c:0c:6e:80:8e:c1:b9:4c:1f:0e:d5:69:96:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BC:EA:8A:E5:D2:4D:0B:DD:0F:8F:62:59:44:75:FF:17:27:CF:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/657a060f-11de-3437-8e3b-e36a3da029c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848/5886029e-a569-4937-b21c-91a2f3965848.crl
X509v3 Authority Key Identifier:
keyid:6F:EC:B4:C9:A1:C0:84:F9:57:43:1E:FD:87:D4:0D:0E:F9:35:7F:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5886029e-a569-4937-b21c-91a2f3965848.cer
sbgp-ipAddrBlock: critical
IPv4:
199.196.234.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:39:f0:a5:c9:dd:6f:ac:b4:74:b1:6b:66:f7:c9:04:2d:58:
13:49:31:f6:80:08:d4:46:17:f4:d8:c1:e4:11:d2:5d:52:e4:
12:9f:f8:3f:ba:74:76:96:e5:26:e1:51:25:85:1a:48:82:45:
3e:1a:89:29:bc:f3:fd:3d:9d:c4:30:f0:48:58:34:93:92:d9:
d9:32:71:c7:91:3f:fe:e6:7c:63:b7:da:eb:fe:d8:1b:a5:fd:
8f:16:86:a2:60:6f:a9:d3:48:8c:3f:4f:4c:2e:9a:3b:3b:dd:
e4:51:03:4b:6a:de:ab:bb:64:1a:40:10:61:38:46:7c:62:b2:
33:8b:4c:bf:3c:76:e3:1e:7a:98:ee:7f:1f:d6:53:64:8c:d0:
60:65:1f:41:1c:91:0f:29:e2:07:7e:41:c6:12:79:12:4a:9c:
95:dd:eb:53:16:41:8d:5f:1b:3d:c1:d6:e7:67:72:ca:a0:40:
ee:b3:4f:3c:d6:62:00:41:b2:8d:2f:6c:96:53:ec:d5:f4:1a:
86:3c:5e:13:03:e1:6b:c3:24:6c:e9:4e:e9:fa:78:66:da:54:
59:00:d5:24:bc:59:6f:d4:fb:c0:37:b0:dc:cc:f5:a9:f9:1d:
63:8a:9e:d6:41:35:fe:14:de:50:bb:77:1d:5c:02:5a:5d:0a:
81:22:7c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:12 2025 by rpki-client