Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/8b7a8af7-f7ba-312f-8140-005dd293f00c.roa
File: 8b7a8af7-f7ba-312f-8140-005dd293f00c.roa (raw, json)
Hash identifier: 8a/C08lhSKofGt7YF7ahmWNStYDEHY4M7vg7wkAhzEs=
Subject key identifier: E2:AD:4C:AF:C3:79:95:49:B2:4B:F3:4C:47:5C:D0:1B:EA:51:53:2B
Certificate issuer: /CN=04b45e42-c2e7-4254-9ecb-472a7693a730
Certificate serial: 010D0C9F43285848100A7EC3EE6A72603BB058E0
Authority key identifier: DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/8b7a8af7-f7ba-312f-8140-005dd293f00c.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 397377
IP address blocks: 63.246.143.0/24 maxlen: 24
161.199.88.0/24 maxlen: 24
207.229.66.0/24 maxlen: 24
2605:51c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:7e:c3:ee:6a:72:60:3b:b0:58:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04b45e42-c2e7-4254-9ecb-472a7693a730
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=82b1ed00-d4b0-4d20-a5c3-634d0c8aca6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:c6:3f:a1:9e:73:59:62:74:db:18:30:73:
97:02:38:fd:8b:f7:4b:2c:bc:50:41:ad:22:03:e3:
a7:a3:5f:b9:73:38:03:27:1d:df:7d:c8:e9:75:2f:
b5:08:9c:ef:d5:4a:84:9f:f1:d3:1f:ba:62:29:62:
14:14:d7:e8:8c:2a:b5:b3:81:06:de:12:af:b8:f6:
cf:6e:00:da:e8:b7:d4:cd:54:40:eb:23:f5:cf:d1:
66:66:02:23:8c:76:d4:2a:7a:d1:db:69:7c:69:33:
c7:cd:c5:cd:7c:2c:7c:f5:b7:28:5e:0a:6f:22:c7:
70:e4:5e:87:b1:06:4f:46:6c:bc:c2:d6:42:6b:4c:
61:fa:27:74:02:e8:dd:9b:6f:8b:39:e5:0b:91:b6:
1e:fe:b6:8e:f3:f3:87:5a:28:03:61:97:f7:d9:16:
88:ce:a9:c6:f9:10:04:c8:2b:5b:dd:7d:29:53:3c:
f3:c2:c9:c3:be:83:ad:d8:e0:d8:41:28:d3:c3:0a:
b3:c4:32:83:4d:7a:5d:87:40:a6:81:a0:1c:2a:74:
81:68:cb:22:12:05:40:8a:3c:47:87:39:5f:b9:db:
ae:d8:fe:8d:2f:f0:34:d0:d3:ab:95:81:f0:26:b5:
41:94:64:2a:c4:4e:6c:2b:e5:a0:92:4d:30:b5:e5:
5d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AD:4C:AF:C3:79:95:49:B2:4B:F3:4C:47:5C:D0:1B:EA:51:53:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/8b7a8af7-f7ba-312f-8140-005dd293f00c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.crl
X509v3 Authority Key Identifier:
keyid:DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer
sbgp-ipAddrBlock: critical
IPv4:
63.246.143.0/24
161.199.88.0/24
207.229.66.0/24
IPv6:
2605:51c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:38:91:a7:c7:de:7f:e6:5f:84:40:41:5a:d0:63:ee:dd:32:
62:1f:16:6e:28:5a:2b:89:e2:ca:ea:45:c6:2a:91:b3:dc:86:
e6:39:01:35:17:5a:cf:b7:80:05:a5:9d:2c:db:87:df:76:60:
1c:1c:05:84:9e:a2:aa:d3:32:fe:c4:5b:74:57:c8:f7:a4:a3:
11:9a:10:93:d8:12:f3:f6:d4:b0:2e:43:d6:4f:73:e8:b5:01:
0b:cd:9a:ad:13:49:29:c0:e8:ee:04:56:d8:f7:2d:c2:eb:c6:
8b:fd:bd:b4:74:1c:ad:7a:07:ab:e1:74:d4:40:c6:db:a8:9e:
7b:df:dd:aa:9d:fb:93:f8:78:ef:a2:97:6d:bd:64:17:26:5b:
d9:c7:e5:45:2e:87:82:0d:a2:aa:2e:f9:01:de:4b:24:40:69:
9f:55:50:27:92:b0:5c:c2:79:97:fa:8b:79:b9:cf:fe:ae:4c:
15:e1:7b:55:f8:9e:c5:ed:85:12:21:5f:01:37:b0:3c:0f:a2:
31:f5:e0:8f:d7:2f:05:b5:15:db:82:9f:e3:42:a5:53:ce:76:
89:1e:a7:3e:82:5a:d7:2c:9a:ad:43:68:c4:22:ad:f6:80:9e:
e4:c7:e6:d9:b2:4b:d7:a3:d9:47:cf:7e:4e:23:3c:a9:25:5f:
01:00:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:33:10 2025 by rpki-client