Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e394159b-b6d4-3b54-9538-6f74a1f6c8a0.roa
File: e394159b-b6d4-3b54-9538-6f74a1f6c8a0.roa (raw, json)
Hash identifier: /YGOTsFLNgrPpKTYub+AAT3mdBr4ltPKu9TqZlFne88=
Subject key identifier: 86:D7:48:0F:72:50:8A:88:B8:C7:4C:9F:58:97:24:02:DE:BE:B8:FC
Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial: 010D0C9F43285847E094C6024B01BA247C421C40
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e394159b-b6d4-3b54-9538-6f74a1f6c8a0.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 198949
IP address blocks: 199.241.244.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:c6:02:4b:01:ba:24:7c:42:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=c9f3d4ed-2720-405e-b448-894d707531bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:ac:54:83:b6:d1:f3:f7:cf:69:ce:52:95:
0e:e9:d7:b5:5a:7b:4e:be:1a:6f:cb:26:02:0c:95:
22:76:f5:d5:24:47:cb:a1:39:9f:77:35:86:1b:f2:
2a:8f:f5:c1:5a:ca:26:53:7c:8d:e8:75:08:77:42:
71:3d:76:39:56:b5:2f:73:e3:1f:3b:8a:b2:62:ef:
cc:46:c4:dd:d2:95:fd:2a:f8:c0:56:62:e4:4d:11:
07:1e:0f:58:43:63:0b:a9:b4:c2:e6:9d:80:3b:be:
3a:22:fe:50:fb:b2:8b:5b:98:23:cd:78:c6:1a:36:
1e:cc:5a:9f:8e:87:41:da:4c:90:05:d1:50:1d:73:
fe:78:32:75:5c:90:15:42:c0:76:6a:98:31:28:50:
4f:bc:f9:e3:4e:1a:f5:4f:cb:30:69:96:80:7b:f3:
ba:19:ae:7a:86:5a:e3:28:8d:c5:0c:68:db:6e:39:
6a:cd:dc:20:34:34:22:f0:fa:2c:3a:8a:fb:3b:47:
d9:64:8e:e5:e3:eb:74:84:df:14:4e:29:0e:f2:26:
c0:d7:d4:f9:9e:9c:5a:3f:d8:d1:b9:a7:a2:cf:31:
5b:9f:ca:5a:2b:58:f3:25:b7:1f:5a:14:10:3f:78:
c4:c1:6f:21:13:4b:53:35:e8:c9:aa:a7:56:46:fc:
34:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D7:48:0F:72:50:8A:88:B8:C7:4C:9F:58:97:24:02:DE:BE:B8:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/e394159b-b6d4-3b54-9538-6f74a1f6c8a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
X509v3 Authority Key Identifier:
keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
sbgp-ipAddrBlock: critical
IPv4:
199.241.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:5f:37:0b:59:dc:19:b2:e2:b6:ec:8a:81:36:c1:76:86:5c:
09:aa:9f:99:0c:d0:79:5a:b1:a6:60:81:8b:6a:18:ba:26:4e:
7e:32:24:0b:8c:c9:d8:d8:85:37:75:73:d6:73:75:6a:00:10:
ac:7d:0a:4d:d7:cf:36:4b:60:3f:fb:4f:e0:ab:d2:a3:95:53:
fd:32:ee:0b:6b:34:9f:73:b1:33:a7:c5:0c:1d:54:9b:81:3b:
87:4d:5c:fa:44:7b:f7:77:5a:12:68:89:21:65:d7:fb:7e:24:
d6:78:cb:e9:06:24:c2:14:e8:58:46:89:e5:60:cf:c3:12:41:
7c:35:1b:75:17:c2:75:09:9e:07:b4:25:bf:6d:ba:34:3d:8e:
ce:89:16:4f:91:93:6d:09:e5:db:9c:f1:03:3e:95:33:df:34:
3e:8c:94:17:c6:6f:32:2d:2b:71:45:3a:f4:bf:e7:9b:52:15:
ea:a3:9b:c7:a3:e4:4a:2f:43:0d:c7:89:d6:fa:11:6b:6e:5d:
2e:81:7d:ef:ef:33:f0:b9:ff:92:a9:30:ce:55:77:d0:37:48:
7e:95:6e:ff:54:2b:af:8e:55:1a:d7:2e:99:71:12:c2:a8:92:
e2:3c:47:cc:fa:ba:6b:36:8b:80:1f:b7:67:fd:79:d4:d1:73:
ac:d8:98:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:25 2025 by rpki-client