Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa
File: 87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa (raw, json)
Hash identifier: MbRb/Iwg0EZPqE0+a882s2nwZtX4xqnxpWrwc/wwyyc=
Subject key identifier: E8:61:E2:B3:FC:0B:72:0F:92:65:D7:B5:FC:89:6B:91:95:0E:CB:39
Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Certificate serial: 010D0C9F43285848E9CBF3C7A868EF9B41A57C40
Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 4226
IP address blocks: 199.192.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:f3:c7:a8:68:ef:9b:41:a5:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=4c23afab-e1c4-4120-ba80-6fcb5cbee968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:02:60:53:6a:8b:5d:1b:a1:3e:62:a5:8a:6c:
43:8b:75:07:be:d5:51:27:63:f9:3a:ae:2a:66:ce:
2f:a4:4c:2a:04:ae:56:68:78:fb:7d:69:47:86:41:
94:ab:6b:45:00:94:fc:20:37:55:02:b0:3b:4f:fc:
81:6b:59:fc:a1:eb:ba:23:3a:82:93:c4:8c:dd:45:
80:8a:c6:0c:98:73:0e:13:f4:5f:23:7b:04:78:c5:
70:bd:fe:05:ba:2c:40:8f:f7:70:a9:be:5d:b2:53:
da:69:1c:29:b8:b7:19:ee:e9:8b:92:37:b6:b0:70:
19:b4:5f:89:b5:15:ca:3f:d9:50:18:28:15:70:bf:
80:8d:c6:c5:6f:38:25:b7:ac:ce:40:96:b6:86:b5:
40:d6:19:ac:da:0f:23:51:08:ff:41:e8:5f:ef:cc:
6b:4d:20:5f:27:0f:bc:8e:a3:7b:a7:30:10:96:a5:
ef:d1:03:61:cd:48:60:0e:ad:95:65:f7:24:e2:5b:
2d:ff:c9:95:76:10:07:be:e4:72:cd:ee:6a:84:38:
a0:17:2d:6d:42:05:b0:01:a8:f4:a0:cc:36:a3:2c:
3e:53:99:7c:c5:d3:13:b9:13:c4:fc:13:c4:40:84:
87:2c:43:65:6d:3c:40:7a:6c:99:d5:54:b6:b9:c7:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:61:E2:B3:FC:0B:72:0F:92:65:D7:B5:FC:89:6B:91:95:0E:CB:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/87c9c866-faa2-3d2b-8c6a-947fbbb57765.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
X509v3 Authority Key Identifier:
keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
sbgp-ipAddrBlock: critical
IPv4:
199.192.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:89:cd:ae:30:33:ca:4d:e1:fa:fa:ee:9a:48:9d:2e:0b:fb:
c9:4d:bc:07:02:a9:d4:8e:23:fe:11:44:87:15:ef:47:68:69:
ca:b1:f3:78:be:e8:ef:60:f0:9d:b0:d6:b3:a9:62:84:54:5a:
d9:bd:f3:1a:8a:1e:bc:37:11:36:13:b1:de:4d:17:a6:0e:03:
ce:43:ba:44:98:c1:c4:ba:a5:60:c5:40:68:26:dc:59:5b:73:
4a:5f:c3:93:be:3d:73:f6:74:d1:a8:68:52:94:d1:f4:5e:7d:
db:91:3d:91:25:4b:fe:bd:4f:e6:cf:51:28:8e:ea:65:2a:41:
2b:22:ce:77:fe:c8:dd:75:fe:fc:70:91:75:80:62:cf:55:bb:
c3:59:9d:f5:53:b8:22:ee:42:07:a0:5c:0b:ee:59:a4:ac:80:
ad:8c:7d:45:7c:4b:28:f8:c0:2e:68:93:81:db:08:65:64:49:
c4:80:9c:b3:98:1b:63:a3:d0:54:8f:6b:61:9e:aa:d3:c0:ed:
fb:98:d2:8a:bc:03:95:61:62:f8:09:eb:8f:5c:9c:6a:7f:2a:
d6:c4:ff:a0:12:b5:24:fa:50:03:64:a9:f8:d6:18:51:e3:86:
70:21:44:d7:e5:ea:53:b6:0b:f9:6e:f5:84:85:0f:f8:13:66:
c6:66:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:36 2025 by rpki-client on console.sobornost.net