Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec408f03-fb6b-3354-8f30-2496e2c33f3f.roa
File: ec408f03-fb6b-3354-8f30-2496e2c33f3f.roa (raw, json)
Hash identifier: 0rBUd+eg75QMQHL6A+07TdAp3+hrd0MNsrBFV1YTwJk=
Subject key identifier: E4:38:65:B0:35:87:FE:88:9E:7C:AB:BB:7F:11:D1:1C:DB:C3:9A:0E
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485E359E846EFF96CB76F36180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec408f03-fb6b-3354-8f30-2496e2c33f3f.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 26008
IP address blocks: 199.101.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:9e:84:6e:ff:96:cb:76:f3:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=07c6c7d5-c5a6-415a-aa5d-40cfcfcfdbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:43:04:95:13:39:45:91:34:e6:85:e4:01:c6:
89:58:ef:cc:eb:fd:ae:17:2b:76:54:1f:23:c2:de:
7d:cc:cc:66:d3:97:4c:36:3b:3f:fe:fb:aa:70:5b:
dd:5b:33:9c:98:50:b3:fe:74:c4:98:3c:28:58:78:
b4:b7:a7:5f:9a:24:e2:19:ae:a9:74:89:c6:97:02:
7f:15:09:12:52:7e:75:4a:71:41:e7:1e:d4:1f:f0:
ad:cd:42:0c:60:1d:cb:32:7b:b3:f0:94:9d:e6:c0:
01:b5:f0:31:a1:fc:8e:3b:b7:15:59:19:28:69:ee:
e2:ac:91:c3:d6:5a:5d:b3:ac:0f:55:0a:0e:75:72:
5f:9c:0a:0f:ae:76:d6:fc:3e:c1:1b:ba:87:21:76:
79:07:4e:4b:43:65:99:87:05:90:3f:52:f5:60:e2:
f5:11:f8:8b:32:78:aa:fe:bc:c0:95:d5:8b:75:b2:
bf:f8:7e:dc:69:5b:c7:ac:41:1f:5f:d8:63:94:63:
78:3e:58:a9:95:e5:9b:be:9c:e6:b0:64:f0:fd:af:
79:0b:dd:cd:f1:10:5d:06:20:50:78:c3:11:ec:76:
3c:cc:23:c1:03:d8:82:11:df:ad:e9:c0:b8:a3:32:
d8:d3:d4:43:6b:92:97:b8:93:26:00:56:c4:7e:48:
6a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:38:65:B0:35:87:FE:88:9E:7C:AB:BB:7F:11:D1:1C:DB:C3:9A:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ec408f03-fb6b-3354-8f30-2496e2c33f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
199.101.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:2b:51:c2:af:ad:42:40:ca:2e:47:10:7d:8f:c5:96:9c:a4:
8b:66:34:26:ef:f7:41:88:6f:c0:f8:16:fe:93:00:24:5f:ae:
05:5e:df:72:03:a7:e4:e1:45:08:29:60:e8:2e:16:0b:74:7c:
58:94:49:52:2e:70:b7:07:b6:be:18:04:3e:41:af:58:fb:2d:
ba:a7:7f:ca:6c:b4:35:b0:f7:7b:26:96:44:7e:79:eb:3d:7b:
f3:27:37:ae:ce:00:66:90:96:67:59:55:59:e4:bd:77:c7:3a:
83:d5:b3:46:60:32:1e:fc:3b:e2:90:e6:ff:c1:af:1e:b6:56:
3f:74:41:77:4b:af:73:ea:83:c1:e8:56:85:06:66:d0:9d:65:
00:b9:07:2f:ef:94:02:a1:b1:e2:d8:0d:2d:a9:bf:78:d4:0a:
fa:84:f4:1b:ea:ce:a0:c6:4a:ae:57:3b:4c:dc:4e:ee:12:c0:
0a:9f:0f:54:4d:01:a3:63:b2:98:6e:d9:38:0f:77:21:a7:31:
4b:3d:b6:dd:48:a9:af:a7:1e:46:a7:8c:8f:b4:e6:6c:3b:98:
a7:42:a7:a3:81:f8:b7:ce:a2:24:61:19:7a:d2:f9:92:5f:17:
d8:cd:5e:d4:7b:05:55:88:10:2d:a6:80:8d:96:81:40:b8:43:
d5:7c:b4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:45:46 2025 by rpki-client