Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5fce096e-c3a2-3de3-83f9-796db1c6ccec.roa
File: 5fce096e-c3a2-3de3-83f9-796db1c6ccec.roa (raw, json)
Hash identifier: 5nvzYWY4tz+kJHZMn+zTgyI7cbX5hZ7DzB42qo1++Fs=
Subject key identifier: EE:D3:9A:BA:A6:28:D3:7A:EB:CA:01:3D:BC:C5:6E:6B:F7:90:FC:B7
Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial: 010D0C9F43285848159FE4D79DDEC2EBDB19F600
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5fce096e-c3a2-3de3-83f9-796db1c6ccec.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 30133
IP address blocks: 199.6.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e4:d7:9d:de:c2:eb:db:19:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=acbcaf6a-f751-441d-864b-351be2589431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:fd:d8:d3:84:b8:fc:ef:9c:a3:27:69:fc:
c1:20:ad:a8:29:b9:3f:22:67:b5:42:3d:f9:af:c1:
96:44:6f:ab:54:74:13:d5:fb:d0:64:20:2e:05:5b:
be:83:3e:f6:86:f5:14:c7:f3:70:aa:bd:00:7e:68:
ce:8d:04:d8:c0:bc:30:50:03:af:9a:f4:14:7c:fb:
e4:ae:8e:c1:7c:d6:85:fc:0d:4c:66:f6:ef:bf:90:
17:08:b8:e0:0c:f1:9b:ce:b6:7a:0e:c0:57:60:fe:
60:e7:d8:99:68:c0:65:b9:4c:5c:77:d7:3c:72:06:
7b:51:aa:21:ba:54:11:aa:17:66:34:da:38:c1:2f:
d3:70:f1:c5:5d:0a:bb:97:d1:fa:e2:3f:6f:b2:9e:
1a:a7:27:ac:b8:f4:1c:d2:fb:9f:61:01:c6:4e:70:
26:a3:f9:86:50:d6:1b:6c:50:c3:d8:da:c8:8b:08:
a0:3e:ba:87:e6:2d:47:06:83:7d:c5:b0:41:ce:52:
a4:80:fb:12:c7:71:61:fe:fd:5d:d5:da:cc:b4:e3:
93:10:26:42:8a:fc:2f:7c:7a:c3:1c:b5:bf:bc:34:
f2:d6:bc:43:5c:72:ad:af:c5:26:b4:58:83:39:a2:
cc:fc:f9:2b:09:6b:d2:d5:31:8c:79:79:e1:e7:4e:
af:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D3:9A:BA:A6:28:D3:7A:EB:CA:01:3D:BC:C5:6E:6B:F7:90:FC:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/5fce096e-c3a2-3de3-83f9-796db1c6ccec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
X509v3 Authority Key Identifier:
keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
sbgp-ipAddrBlock: critical
IPv4:
199.6.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:99:1b:af:33:44:04:f7:48:69:52:75:d6:03:be:6a:f4:1d:
94:46:a6:a2:e6:1f:96:bc:93:94:d3:30:26:15:28:b6:86:9c:
68:cd:7b:16:94:5a:90:43:a8:72:dc:88:9a:7f:0d:5b:63:49:
eb:7f:59:1d:2a:92:57:86:e0:f1:e5:79:a0:2e:f0:c3:52:6d:
9c:6c:c0:3a:f2:96:31:18:4a:f2:03:9b:50:62:0e:9f:9f:f1:
bd:bd:53:70:b9:4a:bd:04:a7:a8:83:78:d7:7d:24:46:15:83:
c9:e6:23:9f:fc:08:e0:03:e2:62:b2:d1:35:ca:a5:65:04:a2:
47:db:38:d2:1b:63:25:57:9e:74:b6:6b:89:e4:98:af:53:c3:
99:3c:77:57:85:1d:2d:e2:a9:52:ed:27:27:90:74:43:6d:64:
c1:67:1f:f5:a8:23:51:25:e9:bc:af:e0:d1:8f:73:eb:59:78:
9b:ba:7d:93:84:09:60:18:d7:8f:81:35:43:b8:0a:6c:da:1c:
ed:3f:f9:a1:e6:fa:1d:fe:62:3c:69:ed:9b:fd:0b:ec:6c:73:
5c:46:57:61:1a:92:d2:41:50:1b:f3:ed:fe:41:8a:3d:00:c3:
33:7e:e4:55:6b:8a:71:df:3c:b4:b5:bf:6c:f8:0a:cf:33:f5:
1b:1c:f0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:19:24 2025 by rpki-client