Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3dd79d95-e88c-33a9-b588-25baeab78a4c.roa
File: 3dd79d95-e88c-33a9-b588-25baeab78a4c.roa (raw, json)
Hash identifier: AHi3EH+iQAEHM0ojk3DdpY5aAFV1vjKp6/4owyiyvcY=
Subject key identifier: EF:E7:E4:6B:48:05:E3:EE:2A:84:F9:4F:BA:71:87:AB:FA:13:EC:03
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F432858481C9A895BC26723BFCC5E1280
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3dd79d95-e88c-33a9-b588-25baeab78a4c.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 198148
IP address blocks: 205.252.8.0/22 maxlen: 24
205.252.40.0/22 maxlen: 24
205.252.92.0/22 maxlen: 24
205.252.216.0/21 maxlen: 24
205.252.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:89:5b:c2:67:23:bf:cc:5e:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=1b780798-5515-413b-8a64-162a28590f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:27:d9:b8:b0:2c:39:60:bd:75:dc:7b:3a:
7f:c9:bd:11:7d:e5:6a:12:f1:87:50:dd:90:3b:f1:
53:c3:39:0d:49:18:28:99:ca:c8:fa:1b:22:52:73:
1c:5c:a1:36:78:f3:b5:08:50:aa:b3:47:6f:09:1d:
5d:51:35:84:f2:44:7e:ae:c0:85:b4:fc:48:44:9f:
82:46:d2:9d:60:88:38:60:3a:da:93:81:73:09:0a:
2d:db:d0:84:f9:b8:10:66:de:27:79:04:95:25:ec:
25:97:40:6e:ef:b2:fc:1b:96:13:3e:e6:1e:02:41:
84:57:2f:aa:e2:a3:9a:7e:c8:36:c6:2b:d2:1a:39:
e3:80:ef:96:e5:6a:a8:16:dd:83:1a:28:a1:e9:16:
67:86:1e:0c:10:0d:05:29:f0:22:03:78:6c:bf:f0:
88:04:51:00:71:7c:fb:1e:cc:34:7d:f3:06:2e:b2:
a4:1f:fe:77:87:0c:8e:a7:88:42:f4:98:a3:63:0e:
f7:c6:70:d7:fa:54:b8:d8:f3:c5:46:57:51:61:0b:
b7:5a:3c:3d:7d:86:e4:02:7c:48:c1:c9:19:8b:dc:
cb:96:74:d9:75:f4:70:c5:fd:2a:6c:f5:78:f6:ff:
3d:de:62:c9:02:ef:39:75:10:cf:ab:61:13:68:79:
10:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:E4:6B:48:05:E3:EE:2A:84:F9:4F:BA:71:87:AB:FA:13:EC:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3dd79d95-e88c-33a9-b588-25baeab78a4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
205.252.8.0/22
205.252.40.0/22
205.252.92.0/22
205.252.216.0/21
205.252.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:02:bc:6c:e2:5c:9c:66:8b:bb:0c:23:3e:27:49:0e:7a:1d:
ed:59:6e:da:3c:64:fe:b5:5d:28:cd:3f:92:39:3d:2c:98:92:
3a:69:cb:a4:29:70:76:fe:9f:f9:34:7b:d6:cb:83:3a:ba:bb:
c1:9b:b7:3b:a0:ac:31:e2:2c:37:9a:ee:06:30:c9:f5:8d:0b:
87:02:e7:e3:2f:d4:9d:be:3c:2d:ff:2b:63:27:43:4a:89:83:
8a:55:eb:f1:89:56:e0:e5:d5:44:ad:46:89:5b:8d:07:54:75:
4a:bb:44:71:ef:a8:47:a6:e8:53:7b:a5:26:c5:54:e0:57:c2:
21:6a:0c:bf:0f:9d:ea:9b:64:e3:ed:7c:34:69:9a:5f:71:d3:
24:7e:8f:b2:fb:81:57:68:00:02:87:0b:67:88:49:d6:36:74:
ca:d6:6d:04:0b:18:9c:5a:35:bb:97:d8:11:4d:e3:17:ba:08:
58:18:1d:d2:24:8a:d7:34:47:4b:57:ca:d5:87:66:bd:2d:43:
5f:a9:10:ea:07:49:69:af:7c:6b:37:6e:4a:fa:35:39:83:b7:
00:40:cf:8b:c0:66:21:5c:4c:77:89:69:72:85:12:12:f0:fc:
5c:75:26:c9:3c:21:10:0c:8e:05:fc:fc:2f:3b:80:79:ce:86:
a4:4a:17:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:04 2025 by rpki-client