Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa
File: 838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa (raw, json)
Hash identifier: B1vN83yKAfKZqtIM9NZOtnWEx0vJtPd+FT59cOP5rA0=
Subject key identifier: 44:AD:B5:B4:58:20:F3:15:47:59:48:AA:A7:86:2C:BE:3A:44:8E:E9
Certificate issuer: /CN=df94af30-a8e8-42b4-9e43-649437c0cac7
Certificate serial: 010D0C9F432858484C1019DD21238E581C253200
Authority key identifier: 4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 397681
IP address blocks: 192.219.99.0/24 maxlen: 24
198.168.2.0/24 maxlen: 24
199.202.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:19:dd:21:23:8e:58:1c:25:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df94af30-a8e8-42b4-9e43-649437c0cac7
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=9aab163b-95e3-42f1-aba8-31728dd2b6d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:11:46:5a:92:df:59:dd:60:79:f8:31:0a:23:
46:cf:cd:39:7a:12:25:6b:9f:88:65:32:8e:b7:a6:
4b:6f:e6:f0:62:fa:ec:79:50:cd:ef:00:87:ec:9a:
00:b0:e3:43:01:0e:6c:65:4e:40:bc:68:0b:52:1c:
32:50:1c:13:9d:5b:aa:ec:c6:d7:0c:68:a7:68:60:
f2:94:94:54:9b:20:2b:ad:f9:e4:50:a6:c7:22:3b:
18:c0:99:bf:ea:d8:09:87:9c:b4:8e:ba:87:0a:87:
e5:c3:3d:9c:72:53:42:7f:4e:ef:56:74:8f:4f:5a:
d0:a7:12:b1:0e:65:df:ab:64:bb:18:3f:47:04:7c:
9b:d6:f9:e9:66:7d:eb:f2:90:02:8c:57:af:41:39:
82:f1:fd:cb:52:09:80:88:eb:9c:cb:a1:7d:f2:8b:
d5:8f:a4:d8:af:0c:d2:b2:87:5d:35:77:fa:e4:05:
58:a3:8c:70:44:94:d9:9a:85:ed:eb:cb:98:eb:78:
c8:2a:40:a3:6f:1f:91:82:f9:ca:c5:50:e3:cf:ed:
ad:c9:a5:45:f5:0c:0d:ab:3f:fd:a5:33:5a:49:ed:
97:cf:71:c6:33:f3:e8:f6:34:d4:1a:ce:d3:68:cd:
a3:a9:ab:51:47:1a:8c:4d:0c:3e:16:44:1d:1d:5b:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AD:B5:B4:58:20:F3:15:47:59:48:AA:A7:86:2C:BE:3A:44:8E:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/838643d5-7ffe-38bf-b51f-5afdcd2a55fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7/df94af30-a8e8-42b4-9e43-649437c0cac7.crl
X509v3 Authority Key Identifier:
keyid:4A:55:61:BC:24:00:53:15:DC:9F:48:CF:55:4F:D6:D8:8A:E2:FC:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df94af30-a8e8-42b4-9e43-649437c0cac7.cer
sbgp-ipAddrBlock: critical
IPv4:
192.219.99.0/24
198.168.2.0/24
199.202.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:21:f3:10:cb:74:b7:43:b8:69:10:03:f8:b8:04:ac:90:17:
8f:97:62:a0:b8:6d:83:f5:98:d5:b4:19:f9:34:ce:60:df:b3:
16:f2:c4:b6:d4:c4:bd:58:61:50:32:f6:d1:b0:7a:90:a7:90:
48:67:2e:d1:7c:f1:90:e3:49:00:c2:22:42:fb:69:be:0f:5f:
d1:58:0f:36:76:ce:60:7e:75:e0:e9:22:31:d5:14:48:37:c5:
a9:6a:99:7c:a8:9e:4d:f3:51:06:16:73:cc:a5:e9:65:65:89:
c6:72:e4:03:64:ea:79:09:c5:62:b8:ee:60:1a:1b:3a:49:98:
ab:ab:6d:22:8a:aa:a6:9c:da:7a:91:3f:d9:5d:f9:32:41:68:
7f:6f:42:98:76:fe:97:d3:0d:4c:44:39:81:38:ef:11:04:e7:
ed:91:2e:a5:87:d4:56:f6:ef:98:2d:46:69:9b:ae:32:14:56:
4d:6b:20:ed:e6:59:09:f3:fd:1b:ff:d6:39:ff:22:8c:ea:25:
eb:87:2d:15:bb:33:8f:b1:c1:ea:51:30:a8:e8:20:8f:ff:72:
da:90:e7:cf:55:81:dc:e8:d5:13:74:69:74:9a:bd:26:cf:1c:
60:29:b3:1f:9f:17:50:6d:87:c2:99:0a:d3:d8:f8:15:47:c6:
cc:ca:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:52:33 2025 by rpki-client