Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/d55879c9-2d10-3462-87b1-25a7e24c3cd4.roa
File: d55879c9-2d10-3462-87b1-25a7e24c3cd4.roa (raw, json)
Hash identifier: iZJ4maVKbp6yTecIm++GqwbUsqtNdrSJK+CPfTN4jw8=
Subject key identifier: EF:A4:B5:C3:0A:B9:3F:F8:23:BF:97:8A:03:63:2A:B9:EE:2E:8F:98
Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial: 010D0C9F4328584891DB3235B85967CB93CB5940
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/d55879c9-2d10-3462-87b1-25a7e24c3cd4.roa
Signing time: Fri 17 Jan 2025 02:00:40 +0000
ROA not before: Fri 17 Jan 2025 02:00:40 +0000
ROA not after: Thu 17 Apr 2025 01:00:40 +0000
asID: 399126
IP address blocks: 200.5.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:db:32:35:b8:59:67:cb:93:cb:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Validity
Not Before: Jan 17 02:00:40 2025 GMT
Not After : Apr 17 01:00:40 2025 GMT
Subject: CN=c0a8a071-03a7-4dc1-967e-623583d5f3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:df:5a:98:c0:6d:ca:10:2f:fb:93:d8:c5:a0:
48:2d:c8:f6:2a:35:f4:98:70:14:f5:62:33:cb:ce:
7d:3a:59:76:73:f7:ba:bb:f7:76:86:70:23:c8:8e:
1c:a7:a3:b2:08:fc:06:68:05:3d:2b:2d:40:88:76:
c7:21:43:78:13:0a:fb:bd:ea:db:f5:da:e3:46:d9:
d3:89:4c:80:47:9f:93:e6:ba:a0:d9:10:1e:a8:13:
2b:fe:52:fa:86:e8:e0:1b:a7:af:79:17:d7:01:57:
8e:81:2c:02:7a:ab:1b:ad:f7:9e:59:f4:ae:07:43:
32:03:36:b8:bf:1a:90:a2:f3:8d:fc:53:00:2d:4b:
32:77:9d:4e:26:a0:e5:2a:1b:61:4e:fd:6d:fa:ad:
1a:2c:c5:5c:32:7e:a0:08:66:e7:f9:b7:69:91:81:
57:64:75:7d:46:94:4b:39:d2:77:49:d0:2d:95:19:
d6:a1:6c:a1:8c:10:28:f1:3b:ab:93:a8:17:68:6a:
05:4e:65:19:da:6f:f9:b0:18:6a:db:35:9a:55:79:
12:7a:01:44:24:3c:43:df:66:bf:2c:1c:50:8e:68:
50:cf:d6:c1:7b:7b:63:68:66:b2:4e:da:c3:22:43:
d6:95:47:0b:f2:d5:83:de:a6:26:5d:26:af:90:ed:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A4:B5:C3:0A:B9:3F:F8:23:BF:97:8A:03:63:2A:B9:EE:2E:8F:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/d55879c9-2d10-3462-87b1-25a7e24c3cd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
X509v3 Authority Key Identifier:
keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
200.5.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:e6:b7:1d:be:2b:b7:2d:bb:10:8d:d4:9d:33:6c:bd:a6:67:
76:87:1f:fa:24:c6:73:66:84:9e:78:de:2d:dc:92:0c:7f:a9:
d8:9a:e6:c7:e8:43:fa:4b:e7:0a:7f:86:de:fb:cf:70:37:c6:
84:27:72:d4:e7:cf:88:4f:ff:fe:27:32:d3:9c:f6:af:dd:1a:
e0:3f:5e:af:13:84:5e:ec:35:ca:df:20:a7:92:15:8e:d9:fe:
a7:12:5a:e2:71:8e:7e:35:be:c3:62:81:f1:6b:cf:a8:8f:d4:
7a:65:21:b9:5c:80:c3:d8:bd:90:4a:2e:02:b8:d6:27:f0:1e:
67:cd:1d:94:57:b4:4b:ac:d9:fa:ef:01:f1:25:02:b5:3f:c1:
ef:41:b9:b5:ea:b7:19:99:9f:8d:a4:24:39:54:a9:62:21:89:
89:0a:bb:f1:a9:0c:12:f0:21:a5:d5:e9:d4:2f:54:5a:bf:65:
46:4c:e2:d7:1f:c8:6d:ba:59:d8:74:d8:13:eb:73:30:d3:3c:
a1:22:ff:dd:b4:8b:36:94:d4:13:9f:2d:ef:36:b3:7e:3d:e0:
b2:b8:f4:81:27:7d:bf:65:de:20:39:5a:c2:df:38:3d:dc:f1:
6b:f1:08:b6:46:ba:7c:b2:fc:d4:33:d0:d7:12:73:2a:fc:7a:
89:8b:33:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:20:58 2025 by rpki-client