Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa
File: acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa (raw, json)
Hash identifier: n650TgbIFjLWQu4ttvqmEcPgrn11w17Q204ZjZgqzi0=
Subject key identifier: E8:9C:AA:5C:B9:3A:28:54:0E:70:C9:13:1C:54:9B:FF:FE:3F:1D:27
Certificate issuer: /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial: 010D0C9F4328584812D530F68F44AC1FBEA8B480
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16509
IP address blocks: 205.201.40.0/24 maxlen: 24
205.201.41.0/24 maxlen: 24
205.201.42.0/24 maxlen: 24
205.201.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:30:f6:8f:44:ac:1f:be:a8:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=b41cec6a-1228-4559-a423-0c428d4ab03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:a0:70:be:57:e8:2f:cc:0b:16:44:f2:ba:
48:d0:00:c7:71:a1:3a:19:0b:c7:c8:05:ad:d5:28:
dd:0f:54:95:8e:b7:0f:a3:8f:6b:16:cb:26:3a:05:
e1:85:92:dc:b3:c0:c1:57:2a:90:0b:29:e7:93:e8:
3a:6f:4a:29:df:29:b3:8a:db:8d:93:7f:72:ba:8a:
eb:86:00:3c:b1:11:a2:d0:53:92:2c:3d:92:f9:2b:
0a:47:a2:ed:ef:61:4c:0a:63:62:e9:f4:83:b0:48:
20:e2:53:27:81:0f:9e:54:62:9e:9e:49:58:25:5b:
4c:24:ba:1c:24:38:c9:45:68:f3:f9:79:a3:d1:cf:
33:13:42:02:c4:33:61:51:4c:38:bc:8e:27:8f:5b:
08:d4:1e:45:02:f4:3d:67:d2:29:1a:4f:73:49:9e:
0c:9c:97:33:9c:15:40:15:d8:92:f9:98:4f:5f:c2:
f1:c3:de:17:e3:f2:7f:2d:d7:97:46:b4:19:77:27:
df:cb:46:f8:d1:20:17:25:88:08:3f:16:f6:d0:74:
ee:54:57:9b:96:66:ba:29:04:cf:f4:0b:ee:f1:20:
73:e0:ee:a3:a0:ad:67:9e:cf:5b:47:65:05:c5:c6:
4b:e5:34:2b:b0:c9:80:9a:45:52:d9:31:66:89:95:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:AA:5C:B9:3A:28:54:0E:70:C9:13:1C:54:9B:FF:FE:3F:1D:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/acaae100-0c56-36d9-97a6-aa87cc7a3d24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
X509v3 Authority Key Identifier:
keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
sbgp-ipAddrBlock: critical
IPv4:
205.201.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:75:b6:97:ae:43:87:5f:dc:58:c3:10:eb:31:a3:11:5f:66:
33:9b:5c:e7:ca:32:5c:24:ad:83:d9:f1:dd:7c:e9:cb:b8:e7:
d4:ff:f5:52:6b:eb:c5:af:c3:ba:99:e0:fc:2b:12:34:f3:1f:
fc:0c:3d:09:22:9d:bf:22:b8:41:f0:ea:fc:33:f0:23:b5:76:
a7:90:85:ae:be:e7:70:47:48:3f:5d:8c:2e:b1:c9:8d:7d:17:
3c:09:38:7d:79:2e:4e:9d:c0:01:27:e5:73:74:34:ac:4f:dc:
d7:65:f8:0e:c7:f8:55:a1:84:bc:e6:35:56:41:4c:95:68:95:
73:62:6d:24:0b:8a:90:1e:ed:42:77:ba:76:6a:86:a0:8c:e0:
a0:e1:6f:d5:a4:1b:94:91:60:25:f3:f4:54:e0:60:dc:30:13:
67:1e:e2:d2:ca:c8:f0:49:f3:49:b8:e4:ca:93:f7:c5:6d:48:
1b:09:29:25:05:0d:d2:04:c7:44:d4:06:d9:60:9a:1c:3d:94:
c1:7b:58:7f:c2:ab:76:72:08:99:c5:5d:df:78:20:62:e2:c4:
c3:8f:d4:18:10:82:87:a2:c4:0d:42:2b:2b:4b:fe:75:e9:15:
db:b7:50:94:20:43:3f:dd:ee:a2:93:04:4b:33:79:96:4e:05:
cc:09:d3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:38 2025 by rpki-client