Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/eae45858-8801-3371-b8aa-053a42b2e3ee.roa
File: eae45858-8801-3371-b8aa-053a42b2e3ee.roa (raw, json)
Hash identifier: 1O9jyXTaBUc4I2stjPue77g4tyq09hHDE3Baw98lvJw=
Subject key identifier: 6F:64:3F:24:3D:01:AF:20:F1:57:FB:68:78:76:39:5F:CA:39:83:21
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487E506A706B52F678C26D12E0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/eae45858-8801-3371-b8aa-053a42b2e3ee.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 3477
IP address blocks: 192.58.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:6a:70:6b:52:f6:78:c2:6d:12:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=61f36c41-93e7-4a7f-8530-cc3fcabc037c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:f3:21:8f:40:2c:e5:47:64:a2:53:1e:43:
25:6e:78:06:de:af:4c:d0:89:a7:65:8d:1a:04:a4:
76:f2:74:fe:a4:fb:cf:5d:68:f0:af:2b:78:f3:8c:
67:0c:e3:c7:24:0d:50:1a:3f:da:06:1a:e3:6d:cd:
ff:42:ef:e8:60:33:9a:21:f3:13:d0:5d:b8:58:91:
d3:a3:88:43:5e:33:2b:bf:92:cf:02:31:91:ff:ad:
86:9f:64:f5:51:61:d1:43:a3:b3:1d:a5:6d:5e:0c:
8e:75:67:59:ce:6f:6c:21:fb:f6:28:08:ff:b1:56:
25:d5:d4:07:9d:16:6c:1b:3f:81:83:30:06:de:67:
48:71:f5:0a:d7:1b:24:be:81:45:64:32:3a:f5:22:
f3:07:37:1f:a2:2c:5b:20:d1:90:05:22:d1:9a:86:
31:ce:5f:34:14:de:27:42:d9:b2:1e:12:c2:1f:8b:
85:ec:af:e0:a0:93:49:fe:a4:52:02:a7:33:6d:f7:
fe:fe:eb:d1:07:06:45:35:08:63:62:26:00:76:49:
6e:1f:be:c9:ed:12:10:b6:62:4b:b3:3d:f3:fc:96:
11:e0:70:f7:20:ea:d0:61:45:e2:0a:c9:eb:cd:a7:
0c:02:20:d8:4f:11:5b:b7:e1:a9:7e:41:f8:1f:40:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:64:3F:24:3D:01:AF:20:F1:57:FB:68:78:76:39:5F:CA:39:83:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/eae45858-8801-3371-b8aa-053a42b2e3ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.58.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:57:70:d4:fa:b8:f9:2c:a0:2d:8b:fa:33:aa:45:30:ba:a2:
5a:3e:22:18:17:1b:8c:38:c2:63:d6:0b:04:01:9a:f7:c2:67:
1f:82:1a:92:4e:a0:c4:e4:91:91:94:a3:5b:e2:b6:93:53:30:
72:96:59:95:6c:a1:b7:97:06:9b:7f:ca:51:12:55:fe:a9:1e:
24:ee:df:66:f7:c1:2e:00:66:56:40:a7:21:c6:d7:b1:52:c3:
8f:48:af:41:98:f1:fe:d5:cc:51:0b:9f:34:da:a5:ca:06:61:
2e:e3:2c:c8:ae:e5:15:16:f0:30:d4:7a:fe:24:af:f9:0d:3f:
eb:59:83:4e:5a:96:88:1b:6d:b8:02:22:99:0f:df:84:f8:61:
1f:f9:ee:b2:06:17:6a:55:52:82:b7:db:8b:9a:59:83:62:ae:
e7:1e:2a:6f:89:f8:a6:97:55:d2:b8:38:0f:6b:ba:77:4d:81:
da:3c:90:8e:8c:62:89:c3:85:7b:7d:ab:24:42:b2:3f:1f:70:
cf:68:e3:70:ca:62:5e:25:a1:82:cb:43:66:44:4a:89:d9:ab:
29:6d:0d:7b:0b:5c:94:f7:66:08:14:a4:0c:f8:e1:0a:ae:e9:
e1:e8:4f:82:5e:00:98:5d:84:11:ae:ad:16:1d:03:d3:80:d8:
ac:3c:0f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:37:53 2025 by rpki-client