Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b664f748-833e-3b98-882f-f936bfebd41b.roa
File: b664f748-833e-3b98-882f-f936bfebd41b.roa (raw, json)
Hash identifier: zDO6xPUu/jDob0h2ohLF57cvWlHYAm62nwgROKiosI0=
Subject key identifier: E3:4A:9E:85:0A:03:EE:2A:80:72:D8:4A:5E:6C:91:71:5F:0C:BB:7D
Certificate issuer: /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial: 010D0C9F43285847FF4A4DAB0CE2C8F6863DD780
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b664f748-833e-3b98-882f-f936bfebd41b.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 395753
IP address blocks: 205.252.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:4d:ab:0c:e2:c8:f6:86:3d:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=89e89f24-f67c-4474-9ce4-554f3245d506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:dc:a1:40:a9:70:9f:4b:2a:23:5c:11:02:
31:42:88:66:27:d8:0d:3f:11:10:22:48:e3:12:b6:
59:1a:e8:73:d1:51:3a:a1:28:36:fd:59:d0:a2:eb:
ed:64:6e:98:f6:d8:85:f6:dd:c9:92:73:8b:65:5e:
5e:f9:64:de:c0:c0:57:3f:37:d3:0d:9b:e1:8a:f8:
7c:9b:9f:e9:fe:6a:5b:8a:ea:bf:c6:10:a5:8f:bb:
a2:11:08:4a:71:5f:7a:a8:f8:c2:d9:4e:cf:97:c7:
74:43:9f:63:09:ec:f8:b1:c2:7d:17:49:0b:b2:90:
b5:07:11:93:a7:f7:b3:80:5f:0c:b3:7e:85:7c:88:
60:89:ae:0a:1b:4c:48:cd:0d:d2:4a:58:4e:18:eb:
f1:69:a9:4c:01:48:ed:de:d4:7d:ac:a7:61:00:73:
af:e4:5b:b0:8f:42:90:e0:24:70:e4:48:58:4f:28:
03:f1:6d:81:6c:0a:f5:2d:f1:b6:e5:43:d7:79:80:
2b:29:d9:09:c1:9d:3f:d4:13:cd:54:33:b5:08:bb:
ac:e7:ed:43:bf:c9:83:3f:a0:96:10:f0:f1:4b:33:
99:c2:89:66:fd:3a:4f:c4:66:b3:69:66:ec:9f:b9:
dd:d3:cc:62:5e:3b:b3:bb:79:43:a7:54:39:f1:d7:
66:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4A:9E:85:0A:03:EE:2A:80:72:D8:4A:5E:6C:91:71:5F:0C:BB:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b664f748-833e-3b98-882f-f936bfebd41b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
X509v3 Authority Key Identifier:
keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
sbgp-ipAddrBlock: critical
IPv4:
205.252.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:11:0d:f8:77:12:e6:5d:dc:49:e0:2b:05:75:dc:ca:13:1b:
aa:33:c7:c7:ec:ba:a6:0e:7e:7a:4d:5e:11:f4:b2:f2:c0:c7:
13:36:4b:f5:35:f5:eb:a0:27:d0:38:01:57:24:4a:e0:fc:d9:
e1:c8:af:c8:04:dd:7b:d7:70:f4:e4:c2:78:8b:e0:9f:5e:6e:
e4:aa:01:c0:b9:55:b9:4a:09:47:83:15:bd:e6:a6:eb:10:ac:
5c:55:d1:7a:e6:82:54:19:e7:59:65:8e:ab:e2:ef:80:5d:17:
32:89:ef:3b:34:f5:97:5b:cf:7b:ab:da:a6:f4:26:74:4b:1b:
d2:43:ab:be:3e:12:60:ff:f6:94:3f:e7:b8:44:aa:2b:3d:d8:
56:2c:1d:75:48:5f:bb:e8:67:77:5e:e8:24:d9:6a:6a:a8:60:
ef:00:10:1a:a0:4f:36:7f:be:e5:c0:fe:b1:a3:92:8b:88:b9:
3e:f7:3f:b2:d3:12:39:f7:fe:d0:ea:ae:37:57:08:c7:d1:6f:
2a:a4:1d:61:25:a6:4c:c9:e6:6c:58:21:15:f3:4c:b9:83:54:
8f:4e:93:f8:e9:44:40:48:6d:37:c2:e2:67:46:8a:5b:df:b2:
b5:f1:f5:e1:7a:5a:c0:4d:62:8b:df:4b:b2:d0:21:02:98:05:
b6:a3:56:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:35 2025 by rpki-client