Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81c1cdfa-7b7e-39b5-968c-770c5c8f32f8.roa
File: 81c1cdfa-7b7e-39b5-968c-770c5c8f32f8.roa (raw, json)
Hash identifier: 57ecGgJ8ywsHzz9EY1oUTrU3cfefxsO6oJR8FyG48hs=
Subject key identifier: 85:F7:7D:88:70:30:DE:C8:57:48:51:61:61:90:1B:11:6A:1C:38:37
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F43285848573AD16BF8D523425A5E3600
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81c1cdfa-7b7e-39b5-968c-770c5c8f32f8.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 16509
IP address blocks: 199.36.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d1:6b:f8:d5:23:42:5a:5e:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=1a1f86f9-9d1b-4b68-9072-385c612d6e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6f:0d:bd:34:5f:a1:0d:4d:87:30:f3:14:8c:
dd:1b:fd:68:9b:a0:a0:42:3e:44:da:e4:98:f9:e2:
41:68:b9:9f:35:ba:ff:97:29:f9:77:d0:9b:4a:56:
fa:39:64:9a:8f:05:9c:e5:52:de:79:da:b1:22:ee:
d1:51:21:9f:d4:66:84:5e:51:19:86:a6:c5:b1:cb:
17:ed:67:13:0c:8a:f3:22:36:38:e4:e7:4e:46:ca:
d3:70:95:56:cc:7a:41:b7:a6:0f:b9:9c:fa:d2:68:
6c:6e:fc:d3:66:67:47:aa:90:99:72:4d:c7:82:22:
ac:45:52:27:5c:e6:87:4a:82:d7:58:95:86:62:ab:
b9:19:37:5c:99:46:cb:7f:bf:fd:23:34:59:67:53:
1a:95:e6:9a:d1:de:5c:ce:ec:81:65:79:8c:e3:27:
48:e1:6b:53:e4:45:82:12:3e:72:92:97:a0:84:1e:
52:b5:e0:5e:9a:ca:fe:5a:c3:7e:84:35:1c:cf:fb:
2f:33:5f:36:00:f0:d0:c8:ea:7e:84:b6:53:ea:1d:
95:d4:ee:8f:bc:31:c0:00:a0:25:8f:58:1a:db:e5:
f4:e2:74:d3:0b:60:5e:d0:b6:28:ea:ea:9e:5d:c3:
5e:63:14:76:e2:75:e7:d7:14:9d:20:bc:1f:58:1b:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F7:7D:88:70:30:DE:C8:57:48:51:61:61:90:1B:11:6A:1C:38:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/81c1cdfa-7b7e-39b5-968c-770c5c8f32f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
199.36.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:6e:83:2c:64:15:ca:0f:ec:e7:5d:aa:0b:d7:6e:a5:92:ab:
13:96:4e:31:63:28:d1:10:d4:7b:ab:c8:5a:29:97:8b:f7:a8:
61:80:da:0b:29:d5:82:8c:81:51:42:ff:89:db:59:b4:10:09:
2d:b0:ac:14:b8:4e:32:09:92:7b:66:5f:57:8e:3f:6f:41:c6:
86:61:57:be:3e:da:2b:35:09:a2:43:1d:e7:3a:dd:b9:e0:1b:
79:b7:a9:f6:21:74:50:92:0d:2d:e3:4d:79:63:82:50:f4:0e:
2c:d0:03:d6:7c:ea:74:70:e6:18:d6:2e:e8:ed:cd:73:dc:ec:
ab:4b:bd:16:c2:77:3b:42:ff:9d:0f:22:1f:a4:da:13:c0:eb:
e1:fd:a0:89:53:a5:af:80:2e:2d:88:48:5e:6b:c1:14:2a:9c:
f9:25:88:34:6c:08:7f:3f:20:54:14:1c:f7:de:b2:41:07:bc:
ae:38:48:9d:d0:e7:54:55:cc:17:c5:b7:cc:9c:2f:69:81:3f:
af:c5:4e:04:56:5d:8c:d1:4f:ec:c4:71:e0:6b:36:2d:df:7f:
4f:65:98:42:2a:2a:ba:c4:58:4e:c6:41:3c:5d:42:7a:78:07:
29:a9:5f:0b:d9:3e:58:a0:f5:b8:39:87:2f:8f:c5:2f:33:bf:
05:96:92:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:05:18 2025 by rpki-client