Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ab468f01-1c04-3417-bee7-0e937144b123.roa
File: ab468f01-1c04-3417-bee7-0e937144b123.roa (raw, json)
Hash identifier: qqBO4PK8W/hB+Ux7bZZ6SKaAgoUXKi64MMQ06MaNSr8=
Subject key identifier: AE:28:CA:0A:9A:2C:E3:13:B4:E7:BC:33:A9:09:A3:B2:D2:5E:E6:7F
Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial: 010D0C9F432858487325DB19C010001F896DBC00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ab468f01-1c04-3417-bee7-0e937144b123.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 54113
IP address blocks: 199.232.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:db:19:c0:10:00:1f:89:6d:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=5fb1a400-c2cc-45cb-ae71-4ad637013e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:e6:13:6d:c4:4e:3c:c6:b4:f3:3f:7f:11:
2d:77:a8:e8:57:68:b5:c3:71:d6:d7:4d:c7:4c:ae:
02:61:44:bd:3f:d2:6d:02:d9:cc:e0:41:17:46:13:
9e:77:4d:6b:35:f5:51:5e:ec:7f:cc:65:13:3f:03:
f5:c4:c6:c5:7b:b5:78:3b:85:7e:11:9f:36:bd:54:
bf:96:1a:14:b0:00:84:47:d7:71:b0:f9:44:aa:a4:
01:c0:8a:d8:b2:86:06:6c:21:d2:e6:04:70:d5:35:
14:2c:6e:3c:45:66:3c:34:cb:45:18:8d:a5:ae:c9:
ea:78:5d:ca:46:09:d4:d4:86:44:d6:c9:20:4d:3c:
ef:dc:aa:ca:56:c6:18:0e:54:d2:61:e2:32:a6:4d:
25:3b:7b:6b:52:08:5f:c8:67:65:59:c4:89:07:db:
c4:10:63:fb:3f:ae:5b:ca:49:da:62:7b:eb:f8:8c:
70:22:19:25:7b:76:72:55:86:cf:39:07:a5:43:47:
a9:59:8f:3d:8b:74:9b:12:f3:1b:12:77:b5:8c:28:
61:a4:6b:f8:96:3c:ff:8e:88:e9:fd:92:57:b8:df:
47:cb:84:32:5d:6e:92:0d:52:82:29:00:cc:bf:01:
ff:29:bb:a1:54:5e:fb:8c:f0:b5:34:53:b6:38:93:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:28:CA:0A:9A:2C:E3:13:B4:E7:BC:33:A9:09:A3:B2:D2:5E:E6:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ab468f01-1c04-3417-bee7-0e937144b123.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
X509v3 Authority Key Identifier:
keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
sbgp-ipAddrBlock: critical
IPv4:
199.232.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:fa:f1:b0:1a:99:40:9f:ba:b8:83:b8:91:99:39:55:88:04:
96:d0:ce:b0:2a:f6:ff:30:ff:1d:91:ec:3c:1b:21:c0:e4:5e:
fd:dc:e8:ce:aa:1b:2b:4c:e8:5c:7e:f1:a1:2c:30:d9:d7:89:
10:93:d1:c4:28:c6:c4:2f:c5:71:26:08:59:5d:6f:9d:0f:3d:
80:16:e2:67:f5:c9:52:90:bc:6d:7a:c2:1d:08:71:6d:4b:0c:
b4:a0:80:45:ba:7e:fa:82:95:b7:42:f9:4a:2e:6c:b9:71:45:
35:2f:1d:76:d8:b9:ec:b0:73:43:8f:aa:29:4b:58:6a:df:a4:
c2:75:d3:5e:ba:04:27:a9:c3:94:9b:58:30:f7:d6:23:b7:e9:
84:78:d1:08:3d:bb:74:10:5a:39:92:b5:a5:18:4f:83:77:82:
20:7c:4d:19:56:a9:15:7e:1e:83:8f:ab:ff:df:13:8c:2f:55:
7f:04:5a:03:e3:ed:6d:bb:44:7e:ca:cd:14:7e:51:24:a9:41:
d9:19:ec:e9:31:12:57:db:c3:e9:9d:aa:4c:ff:a8:4e:17:29:
e5:cc:84:6d:4f:a4:c4:59:da:bf:56:cc:1a:6e:a1:3a:b8:0b:
c6:fe:a5:6f:32:5a:14:0d:08:27:6b:89:46:17:c7:af:f4:89:
89:a4:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:23:36 2025 by rpki-client