Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa
File: 863f4acb-612c-3dc9-8399-3195b4bdd44b.roa (raw, json)
Hash identifier: GFqBcVMN00cPf7PMbPwkGpj7Oc20jDWLPrHjf9cfGJs=
Subject key identifier: 5F:50:07:51:83:38:2D:F0:7B:57:44:7C:DC:18:5C:2B:A7:95:D3:DC
Certificate issuer: /CN=a05d07d2-1994-4f02-bebc-4bdc0aec1c5b
Certificate serial: 010D0C9F43285848100A7FD7DD60C529B379BB00
Authority key identifier: 69:ED:05:15:B3:4E:6B:49:E1:4A:A4:CE:3F:BF:7B:8F:A3:99:A1:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 16509
IP address blocks: 199.250.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:7f:d7:dd:60:c5:29:b3:79:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a05d07d2-1994-4f02-bebc-4bdc0aec1c5b
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=7b0e9566-b799-463b-a32e-d5295cc1d2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:73:b3:25:e2:cf:7d:f8:6f:ee:bf:b1:71:
cc:d9:52:6f:7a:a8:1b:76:44:ee:e0:1e:45:e8:b2:
bf:92:45:72:06:50:19:f2:89:5f:a3:a1:01:52:45:
ab:21:e1:b9:52:39:28:02:95:7b:1c:78:7b:76:fb:
c5:40:ed:57:48:b8:1e:d9:a9:e2:ff:56:17:0b:59:
16:aa:fe:95:12:e2:42:45:f1:b3:e5:7c:34:33:88:
1f:c7:c1:67:45:d4:26:a7:08:c1:96:d4:51:0e:94:
97:53:bb:2e:b3:09:b3:22:81:12:06:ee:a1:eb:5d:
08:a5:d7:b8:f4:97:48:8e:74:6a:59:fc:d0:dc:33:
f2:89:73:c2:16:cf:c9:af:1b:2c:52:d0:37:b2:33:
c5:ab:ce:e8:73:99:0e:8e:9f:2a:f8:6b:17:84:6a:
75:ce:df:50:2d:7b:9c:f9:5e:e9:63:48:a2:a2:6d:
4d:95:01:2a:41:df:87:57:1e:95:6f:3d:67:94:1f:
a7:9a:7b:a1:db:3b:bb:90:2c:f4:f2:f8:0d:39:ad:
d2:ca:6a:7e:c5:17:22:f5:0d:f8:17:03:ab:98:3f:
13:b7:cb:1b:59:c0:63:df:a2:aa:e9:cb:8e:89:c8:
3b:85:cd:aa:ea:b4:bf:e0:00:93:97:93:f8:2c:e5:
87:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:50:07:51:83:38:2D:F0:7B:57:44:7C:DC:18:5C:2B:A7:95:D3:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/863f4acb-612c-3dc9-8399-3195b4bdd44b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.crl
X509v3 Authority Key Identifier:
keyid:69:ED:05:15:B3:4E:6B:49:E1:4A:A4:CE:3F:BF:7B:8F:A3:99:A1:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a05d07d2-1994-4f02-bebc-4bdc0aec1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.250.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:40:61:10:37:7f:14:2f:12:95:1f:fa:fa:86:05:8d:27:59:
02:93:40:fd:10:dc:33:25:33:ec:36:ef:df:25:a3:47:c9:c8:
5b:7a:4a:66:b2:a8:ab:7a:41:07:49:cc:91:f8:c5:4c:7a:3c:
ce:bc:b8:e0:7e:c4:ae:bc:75:a0:ea:06:0e:97:c8:d6:e9:7c:
c5:22:20:aa:f3:0a:8e:0c:97:64:ca:65:ec:40:c3:8f:f7:5a:
c5:ff:65:f4:a4:08:ca:22:c9:dd:07:c8:e6:a3:6b:3c:4d:54:
58:78:50:70:a0:55:b6:94:d1:e4:0c:be:f7:67:53:fd:c3:88:
cc:a3:1a:97:d0:02:56:52:6b:60:75:83:dc:b9:89:e0:7d:51:
5c:9d:ec:63:55:be:80:c8:ea:45:55:b7:fa:54:4b:4e:d5:47:
73:34:12:11:49:b7:b7:43:65:e4:51:99:63:2e:f1:29:44:92:
b7:a0:89:97:05:69:03:ea:d0:71:22:a4:8c:43:48:34:86:3c:
93:32:e1:8a:9b:e2:0b:bd:91:98:45:72:4d:fb:b8:47:6b:cd:
b3:e5:dd:92:77:0e:ee:92:8d:89:27:1e:e0:5d:d3:5f:23:1b:
d7:d1:4e:bd:00:af:54:5e:b1:d8:ae:d5:09:59:ae:d4:cd:26:
d9:56:0e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 19:14:02 2025 by rpki-client