Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa
File: 8f41887f-e02f-3b1f-9011-a36a71b35c82.roa (raw, json)
Hash identifier: ImgqD1Sf1neUkCc+x4GVmEmxEBysetmgQaWOcZe+xvg=
Subject key identifier: 30:2E:A7:19:4B:A9:52:E5:2B:42:60:B7:E5:81:51:3B:B6:BC:DF:18
Certificate issuer: /CN=688a78fa-2d94-478e-900a-a1fec661b769
Certificate serial: 010D0C9F432858481F6525255495F71FF6E30680
Authority key identifier: 90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 58580
IP address blocks: 199.101.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:25:25:54:95:f7:1f:f6:e3:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688a78fa-2d94-478e-900a-a1fec661b769
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=3d621769-1f27-4cc3-9540-37055809e40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:5a:66:cf:6d:07:e3:9b:10:8f:f6:58:9a:
1d:ec:84:fe:85:db:05:3f:94:8e:d7:08:0b:ac:0c:
a2:23:91:7a:04:13:c4:b2:b0:bb:91:b4:1e:1f:4e:
f6:67:cc:f8:ae:6f:60:27:49:38:f0:71:d3:95:28:
80:f7:91:6e:3a:74:f6:94:25:13:78:cc:80:6d:3c:
c7:91:02:ad:00:ad:18:c9:93:c1:b3:0d:6c:83:9d:
3e:e2:5f:f4:01:be:1d:d3:59:bc:a3:9f:c1:fe:80:
7b:78:02:31:af:cd:b3:ba:1c:3d:a4:a8:f9:97:d5:
3a:60:a4:92:39:43:d9:bd:fe:0f:ad:8a:63:a0:f4:
db:8f:b4:f5:72:e8:67:fd:12:4a:64:0a:4e:77:ab:
76:0e:74:7f:85:53:3c:fa:00:16:af:fd:93:ec:84:
cd:a4:b2:cd:c9:24:3d:79:7a:bd:18:5d:a9:28:30:
32:c7:0a:c6:23:51:7d:6d:c0:97:de:47:50:e7:77:
08:8e:79:49:bd:7b:43:dd:11:e0:6c:be:6c:7e:12:
25:1e:fb:05:3b:36:44:95:13:28:c2:02:1d:b8:46:
bd:ec:37:dc:6d:f9:da:cd:07:fa:34:c0:96:89:ee:
fe:83:d6:b2:58:31:d8:36:74:8e:c0:42:3a:90:9c:
7e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2E:A7:19:4B:A9:52:E5:2B:42:60:B7:E5:81:51:3B:B6:BC:DF:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/8f41887f-e02f-3b1f-9011-a36a71b35c82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769/688a78fa-2d94-478e-900a-a1fec661b769.crl
X509v3 Authority Key Identifier:
keyid:90:5B:E8:2C:10:72:9B:04:06:F5:CA:5A:16:4C:22:B2:DF:64:86:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/688a78fa-2d94-478e-900a-a1fec661b769.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:ff:da:07:94:b3:5b:3b:03:0c:6a:af:34:65:d7:16:ba:44:
8c:38:51:62:1d:c2:14:35:52:0b:a5:cc:23:cb:55:9e:8e:2d:
86:1f:d5:cd:4d:64:fd:ed:c1:2f:bd:31:3b:fb:0b:56:b7:45:
19:12:8e:bc:ca:c0:5a:b1:a3:03:57:54:85:8a:6b:54:29:5e:
6b:9f:27:ab:32:71:be:30:00:08:74:b1:d1:40:e8:23:ee:90:
3e:30:77:f8:98:3f:8c:e6:ac:05:a2:5c:1d:f7:7a:04:48:22:
b9:62:9a:75:6f:78:8b:ac:56:94:00:e0:e8:d8:75:eb:5b:42:
7c:53:29:65:20:4b:73:b0:18:7e:cf:b6:ce:36:e9:ad:d2:57:
c6:24:4a:6f:40:58:f0:31:e9:49:29:ee:b4:07:49:fe:01:8b:
ab:b1:df:30:8c:dc:37:a4:85:81:3e:b0:77:6c:b5:b9:6b:7d:
90:9a:f9:78:79:de:36:30:a2:7f:40:26:d0:bf:2c:1f:b5:44:
84:e9:7f:35:86:cb:7d:83:80:90:98:ad:c1:be:6b:46:fb:47:
0a:6d:91:78:7a:ba:76:87:1e:c5:15:21:f1:af:f5:36:14:29:
56:45:12:02:02:69:b0:18:31:be:c2:00:4d:5b:34:2d:c9:bd:
7a:10:a7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:24:09 2025 by rpki-client