Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/73c5c3e3-5aff-3d70-a32f-db0c0b13038a.roa
File: 73c5c3e3-5aff-3d70-a32f-db0c0b13038a.roa (raw, json)
Hash identifier: 8tIq+iNNhT+Jb4TkzBKzBty2qRlBcMQ2iBgOWzakmaQ=
Subject key identifier: A0:98:CE:AD:47:C5:30:AF:64:24:74:F1:A5:59:F5:36:E5:61:9E:61
Certificate issuer: /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial: 010D0C9F4328584812D52C8DE08072A1ADBE7050
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/73c5c3e3-5aff-3d70-a32f-db0c0b13038a.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 14618
IP address blocks: 205.201.40.0/24 maxlen: 24
205.201.41.0/24 maxlen: 24
205.201.42.0/24 maxlen: 24
205.201.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:2c:8d:e0:80:72:a1:ad:be:70:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=630f993a-cd34-4da7-bf35-fafde7ef6f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:94:d1:17:04:4d:ac:2d:45:a6:ee:03:ae:95:
26:64:fd:1f:b0:39:d5:23:a0:3a:94:0c:e7:de:13:
06:b1:b3:32:1a:9d:5e:0d:5d:26:f2:dc:16:01:26:
50:c0:14:bb:7d:58:2c:c7:df:08:ce:ee:78:5b:1e:
51:61:35:de:05:2f:f5:d4:3f:65:ab:d0:c1:2b:ab:
c9:e1:09:fa:f9:cf:64:8c:35:de:87:7f:f7:c5:02:
5f:db:82:5f:34:11:be:21:73:74:d1:85:90:01:3d:
4f:77:7b:2e:ad:61:98:ea:92:2a:34:ad:49:d5:c0:
7d:ae:7d:d5:3c:e2:c7:78:6e:26:08:36:89:c9:8b:
7d:1c:9f:8e:96:ff:57:42:d6:63:c5:94:02:57:c9:
91:60:69:ab:6b:63:1e:c6:60:ce:99:24:bb:95:98:
1f:6b:72:e7:f6:bb:5a:50:78:e9:54:fa:99:a5:cc:
42:62:72:d2:9c:66:4b:33:07:45:c1:45:15:2b:d9:
49:1e:16:7f:a3:41:5b:5a:7c:15:7d:62:aa:37:ca:
e4:c3:7c:ab:4e:67:ce:98:78:78:d1:a7:46:31:83:
09:76:53:27:04:87:97:8a:6b:43:54:1e:5e:a8:41:
d6:5b:3a:1f:d3:45:72:1f:08:80:d6:01:35:89:5d:
d4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:98:CE:AD:47:C5:30:AF:64:24:74:F1:A5:59:F5:36:E5:61:9E:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/73c5c3e3-5aff-3d70-a32f-db0c0b13038a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
X509v3 Authority Key Identifier:
keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
sbgp-ipAddrBlock: critical
IPv4:
205.201.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:cc:89:b7:64:b8:80:e8:27:af:86:d8:b2:3a:e9:ce:7a:ff:
64:0f:8f:48:d4:b2:26:14:fd:02:4e:05:21:a8:27:c3:c3:68:
18:b8:c8:88:29:8b:12:27:6b:01:61:1e:f3:0d:94:56:c2:f2:
16:9e:85:d4:c3:94:a3:9b:36:e8:7b:25:fb:2a:b1:e4:85:91:
3b:a9:e0:97:73:73:4b:a2:63:bb:24:80:74:8c:04:87:34:77:
21:c7:15:ab:b7:05:51:d6:c1:dc:c8:a2:af:0c:df:e0:38:e6:
97:7c:27:e6:e3:0d:03:75:c5:6a:d4:5a:21:3c:2a:b4:bd:cd:
7a:18:cc:44:64:cd:ec:a2:57:42:18:40:38:62:45:ed:93:dd:
a1:3e:a0:27:e1:06:dc:34:3d:af:ab:48:df:f0:9f:ee:a4:21:
5c:f7:af:9a:74:c2:b7:d3:cf:1b:33:c9:4f:23:83:a9:07:50:
3f:93:28:8b:16:a1:de:98:4b:e9:03:1c:1f:8b:e7:63:f3:3d:
f7:04:e7:0e:86:65:fc:95:62:da:46:e2:2a:62:ee:6b:36:8f:
45:60:e9:b3:c3:d6:4f:d6:20:55:bf:ef:bd:2e:db:7b:91:ac:
e0:6c:54:c6:74:dd:6b:fe:50:d6:b0:a0:59:6d:66:b9:d3:ef:
2b:50:f6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:24:49 2025 by rpki-client