Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/a36a543a-5fe5-31c5-a52a-ceedc99fb7a7.roa
File: a36a543a-5fe5-31c5-a52a-ceedc99fb7a7.roa (raw, json)
Hash identifier: EwcMPr5rubkntwDFpa1HWBEijMR+qnGs/b9zgwNJKio=
Subject key identifier: 23:73:2C:21:81:4E:65:7A:9C:C1:7E:7A:5D:0D:A2:2E:DB:20:ED:12
Certificate issuer: /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial: 010D0C9F432858481F6521E1E81D46F7CFA71EAE
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/a36a543a-5fe5-31c5-a52a-ceedc99fb7a7.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 394161
IP address blocks: 199.120.48.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:21:e1:e8:1d:46:f7:cf:a7:1e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=ddab6e6d-e077-4563-a3aa-585b578e2d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1a:df:d4:c9:74:d5:8f:26:3b:70:3e:c1:1e:
d9:a1:31:a3:4c:12:54:c7:b0:4f:ba:ef:3a:c0:e4:
64:c0:0d:6c:98:49:81:41:70:10:b2:78:83:2d:49:
91:61:19:5a:b9:98:c0:41:ec:24:29:71:6a:da:0b:
06:d1:65:ab:66:27:7d:1f:6f:97:a1:24:a2:bd:99:
ed:48:e2:5f:e2:b4:f0:ec:09:ac:79:49:52:d2:2b:
7e:74:62:b5:2b:ad:6c:d1:49:08:42:74:66:10:65:
e5:21:c0:06:30:9d:a7:75:e7:68:db:a7:6b:a1:05:
a8:97:73:47:96:da:81:ad:a5:3e:e2:74:93:b0:05:
f6:f3:06:27:07:62:34:cf:4c:3f:ce:00:f6:0c:87:
7a:f4:83:5f:1e:74:fe:39:f7:61:4a:82:cb:23:af:
c3:77:b5:04:ce:6b:63:ec:e3:0e:82:6f:30:3e:46:
79:01:ab:12:88:75:63:e9:5a:21:ce:0e:e1:0e:43:
bb:03:6c:c2:0c:1f:ce:8f:ee:45:8a:a4:58:a2:02:
b2:b9:c5:99:2b:ff:b1:66:9b:97:97:b7:d0:5d:bb:
b3:92:3a:34:72:c2:40:60:d7:a9:06:41:01:8a:92:
49:89:a3:da:8e:1c:25:ab:9e:56:49:a5:2c:a8:f5:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:73:2C:21:81:4E:65:7A:9C:C1:7E:7A:5D:0D:A2:2E:DB:20:ED:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/a36a543a-5fe5-31c5-a52a-ceedc99fb7a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
X509v3 Authority Key Identifier:
keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
sbgp-ipAddrBlock: critical
IPv4:
199.120.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:18:43:0c:94:13:98:7b:3a:bf:5e:5f:91:6f:63:50:4d:24:
99:68:50:af:ad:c4:c2:8e:65:a0:cc:53:8a:21:f8:43:a5:c2:
0b:18:f0:30:e1:92:65:94:49:65:fa:56:17:86:e9:bf:db:05:
6d:a5:d3:9c:40:44:32:c6:66:39:2e:81:36:5c:55:22:4e:f9:
a6:53:06:cb:7a:a8:ec:ca:4d:c1:29:2d:de:27:a9:8a:86:55:
25:4b:b2:1c:27:de:44:2d:56:35:15:53:18:12:07:09:02:a3:
d1:db:1d:4c:53:93:0b:f3:df:a2:3f:98:4d:b5:9e:5e:ed:85:
1f:4a:78:08:87:1d:a1:4b:c1:e9:31:c5:b7:45:f8:d8:49:9f:
8b:65:b5:cc:02:21:a8:cd:e3:1f:9c:0d:ec:08:63:a7:52:8e:
5f:f7:20:74:17:e5:c8:e5:25:93:3b:50:a1:a9:ab:af:34:88:
eb:f4:98:da:b3:d9:1f:04:c1:af:a3:88:c1:07:98:fb:14:eb:
e2:ed:6b:00:41:0c:94:22:eb:19:d4:08:76:0d:ab:f4:c4:fe:
14:46:e2:e3:2a:0e:c9:e8:83:c3:16:fb:ae:b4:82:d8:81:9c:
44:50:f7:7f:e7:de:88:3c:d3:bb:f3:38:3c:4c:a6:8e:4b:12:
38:37:e2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:09:45 2025 by rpki-client