Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/827d8887-e52b-303b-a249-a9d675c75f4f.roa
File: 827d8887-e52b-303b-a249-a9d675c75f4f.roa (raw, json)
Hash identifier: lVgenjjoUu3A0qGZ3c219HkKe1zwAF8R6F3bP0dVXXk=
Subject key identifier: D3:DC:29:65:6A:1A:16:38:CD:6C:35:B2:6F:19:01:47:35:0B:AD:F7
Certificate issuer: /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial: 010D0C9F4328584824FA83E207BB23B2E26E00C0
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/827d8887-e52b-303b-a249-a9d675c75f4f.roa
Signing time: Mon 09 Dec 2024 02:00:40 +0000
ROA not before: Mon 09 Dec 2024 02:00:40 +0000
ROA not after: Sun 09 Mar 2025 02:00:40 +0000
asID: 394625
IP address blocks: 199.38.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:24:fa:83:e2:07:bb:23:b2:e2:6e:00:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Validity
Not Before: Dec 9 02:00:40 2024 GMT
Not After : Mar 9 02:00:40 2025 GMT
Subject: CN=922b59c8-aba5-46da-a419-484acf2d6f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:9d:10:13:bd:b9:27:82:af:38:a9:1a:aa:
52:45:62:88:36:d3:47:d9:86:40:30:34:7c:06:d5:
c1:5a:04:01:78:7d:2c:8d:3b:80:5c:b0:bb:68:2b:
62:7b:b7:a2:4e:d0:f2:da:4e:b9:b7:09:b8:bf:e8:
8b:b5:bd:7b:68:e3:7e:be:45:9e:e8:c1:e7:bd:08:
58:67:fc:23:a4:20:86:43:df:46:b2:26:aa:93:f9:
41:88:12:5f:2d:fc:63:cf:1c:f6:34:66:73:37:e4:
df:ff:f1:9e:fb:92:7b:17:36:35:17:a5:43:9c:71:
3c:87:fb:a4:19:47:61:f6:8b:47:e6:2d:e7:7d:e3:
de:b4:61:0e:d4:37:24:b8:1e:9c:dc:ab:30:a3:db:
c1:9b:bd:49:51:75:f6:db:7c:ab:e1:a3:5a:b0:de:
c1:99:5a:90:47:64:ef:51:a3:e7:f8:3e:bb:a1:b0:
ab:b3:05:f5:9c:a3:e9:de:4f:a7:c5:07:7e:7d:da:
22:91:5f:98:9e:74:6d:b4:37:15:70:ad:64:7b:91:
e2:bf:17:77:06:a1:d0:61:82:93:73:28:c3:f2:4a:
15:45:b4:96:46:56:07:d8:d0:1c:80:65:3c:bf:32:
0f:6b:05:83:5d:bf:92:d6:10:a9:23:4a:28:03:64:
3c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DC:29:65:6A:1A:16:38:CD:6C:35:B2:6F:19:01:47:35:0B:AD:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/827d8887-e52b-303b-a249-a9d675c75f4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
X509v3 Authority Key Identifier:
keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
sbgp-ipAddrBlock: critical
IPv4:
199.38.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:35:0f:e3:9d:9c:6c:90:e4:4d:f4:f6:a0:dd:eb:7f:b0:7a:
c5:91:af:20:06:56:4d:32:2a:67:7c:40:c5:2b:9a:80:0b:7b:
9a:de:20:75:42:01:9a:00:ef:70:f5:0c:de:76:17:72:b8:cb:
c1:0c:31:94:fe:a7:5e:51:27:f2:2d:27:4e:44:f8:39:2b:82:
04:72:94:f1:af:62:c7:da:04:53:cb:ee:7f:e8:47:bb:71:30:
5a:00:82:cc:02:37:2f:f8:34:5d:ba:78:18:9a:6b:bc:68:96:
eb:f4:47:bc:f4:68:f7:66:47:3b:01:98:ad:65:cd:f2:ff:52:
6e:e3:8e:fd:bb:ab:be:9c:79:c5:36:21:4c:a8:99:67:55:b0:
92:12:4e:59:8b:25:8f:54:fc:4f:c2:7a:3e:0c:40:26:3a:12:
84:01:3f:5a:d8:1f:d7:a6:16:cf:27:43:83:df:2e:24:fc:69:
83:2d:ed:40:f8:e8:a5:f1:58:33:c6:df:70:5b:e0:66:eb:25:
c3:00:7a:cf:b0:89:71:96:65:0c:44:fe:a7:a4:b1:44:0e:0e:
76:87:dc:71:28:af:a2:a6:71:a7:fc:a4:31:bd:f8:ac:5d:a1:
9f:55:9e:97:c5:27:05:b3:95:7e:cc:46:51:a8:92:94:81:aa:
8a:f1:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:01 2025 by rpki-client