Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/24e059eb-d333-3356-a32f-da320655c8fa.roa
File: 24e059eb-d333-3356-a32f-da320655c8fa.roa (raw, json)
Hash identifier: XcgJL6tT5BklgUm1U13YFnfJ9BmeAgByRuBT9j4hPvY=
Subject key identifier: 49:51:77:AF:77:D3:E8:93:72:42:5B:6E:C9:DA:94:BC:67:F9:7D:0D
Certificate issuer: /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial: 010D0C9F4328584871C07B3CB8C1A5DBD2B7C900
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/24e059eb-d333-3356-a32f-da320655c8fa.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 22612
IP address blocks: 199.188.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:7b:3c:b8:c1:a5:db:d2:b7:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=7415e0d4-beff-45b2-a3d9-f963b91af756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:ec:15:cf:ae:e9:ec:fd:4c:6f:e4:af:8c:
22:87:54:5b:26:d2:ef:d1:23:1c:ea:e9:f8:5b:72:
50:5b:c5:78:05:fa:dd:8a:d5:e7:22:67:8f:d6:41:
65:1b:8d:fb:1b:d7:79:3b:ee:f2:d4:bc:98:f1:e0:
8f:2a:0b:0a:6a:0b:70:cb:6b:92:46:09:d1:5f:9d:
39:f3:7f:e5:4e:a6:a9:4f:a2:40:ab:27:f3:0b:e0:
f7:d9:ef:14:40:6a:b9:49:fe:3a:31:f4:5b:85:da:
29:21:db:44:e7:e7:51:8b:18:60:4e:6a:a2:54:7d:
1c:53:e6:7d:db:fe:e5:14:ca:93:83:af:d6:48:e9:
f8:10:90:fe:41:4d:77:6d:ce:88:eb:a0:7e:37:79:
49:3b:af:06:4f:0a:4d:4e:7e:ee:f4:d7:77:e9:2a:
65:ef:3d:72:2b:fb:52:4b:34:5a:13:a5:31:91:65:
ac:b8:64:24:23:25:2c:0c:47:a9:f0:13:37:f5:b5:
c9:cc:88:d9:22:83:da:0f:bb:a3:00:3f:97:61:8f:
cd:f0:95:75:e1:fa:b0:8b:19:32:ac:8d:b6:0c:72:
54:b7:ac:5e:5b:27:8f:45:1b:07:28:95:42:fc:7b:
33:bd:a0:ad:f6:1d:71:22:c4:66:8d:bd:5d:f9:97:
71:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:51:77:AF:77:D3:E8:93:72:42:5B:6E:C9:DA:94:BC:67:F9:7D:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/24e059eb-d333-3356-a32f-da320655c8fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
X509v3 Authority Key Identifier:
keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.188.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c8:f3:30:0d:96:29:b6:a8:23:2e:8d:43:1b:36:62:59:70:
2a:e4:a9:73:75:44:f8:a1:18:24:07:fc:29:09:ab:56:33:46:
98:42:5b:85:9b:be:11:38:8d:42:ee:78:48:62:dc:26:4c:0f:
48:7d:2a:3f:fd:6c:cd:55:cb:ba:3d:74:7c:7b:c3:57:d3:ab:
9d:5c:bc:b2:fa:92:01:ec:a8:2e:c9:76:b7:90:11:d7:a1:0c:
b4:14:2d:b1:b4:7b:77:79:d9:9b:0c:fa:3a:aa:e6:4b:21:1e:
f3:49:35:73:a3:b0:d9:6b:c6:b5:86:ac:f9:df:0b:7a:f6:2d:
c4:1d:17:5a:b6:cc:64:77:ea:cb:6e:ac:bf:63:84:f3:e6:b4:
2a:d5:ee:4e:e4:fb:9a:8c:33:91:43:f2:21:67:96:eb:fc:7a:
66:71:15:f4:f7:28:34:c3:f5:3c:31:48:ca:75:8b:ba:1e:a7:
ed:c4:46:65:15:38:82:20:cd:79:6f:2c:91:4d:83:73:37:42:
91:e2:a1:bd:f7:ed:73:d8:e6:3c:0d:a4:45:ee:a7:73:85:28:
ba:1e:63:cb:5e:b7:d8:ba:d6:f4:bf:05:13:8a:8b:ee:33:92:
1c:58:ec:e3:ce:9e:ca:88:ba:70:03:e6:e7:55:2c:f0:a7:59:
87:0a:c1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:53 2025 by rpki-client