Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b9adff-addc-30b8-a15d-804492bd9627.roa
File: 21b9adff-addc-30b8-a15d-804492bd9627.roa (raw, json)
Hash identifier: v8xqueDYt0F4auHTBUXSNknAUrZLTJ7Hi0uU1Bshkno=
Subject key identifier: 01:89:28:E9:05:AB:F5:6A:F3:88:48:49:5B:CE:51:AA:4B:A1:B7:ED
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486C2B22E63B22C9F2CADF8580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b9adff-addc-30b8-a15d-804492bd9627.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 0
IP address blocks: 192.81.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:22:e6:3b:22:c9:f2:ca:df:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=d5b4a69a-8c7a-40c6-8ee2-17b3f4a249c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:5f:38:18:9b:03:1d:25:a6:fb:b0:24:c4:
51:62:68:04:d4:74:65:c8:fc:cb:bd:b3:3d:1a:f2:
07:3b:6c:74:ae:42:85:64:c9:71:2d:1c:9f:fb:cc:
53:a4:e0:c1:4c:b1:e3:c0:5e:23:65:f7:1e:50:4c:
29:65:99:f3:7d:b0:2b:04:6b:75:4a:59:86:5a:3c:
ef:fe:2f:84:42:6f:8b:cf:1d:34:64:bf:ef:55:d5:
4e:0a:a5:e3:91:f1:2d:4a:5c:bc:fd:ec:d9:7f:03:
cb:ab:73:73:14:41:60:f7:0b:30:ed:06:fc:f3:56:
6e:01:fc:d9:d2:63:23:c0:53:7c:6b:82:60:d9:bb:
cc:18:f5:65:6a:31:d2:ee:07:51:a8:ee:93:69:f8:
1c:d8:3b:06:bd:7a:08:4a:65:fc:89:df:20:e6:a8:
01:28:78:e3:5e:93:45:7d:17:00:dc:a7:53:90:c4:
88:86:f3:f7:05:01:84:ba:02:ff:ba:03:1b:d4:8c:
d9:a2:db:28:62:21:84:81:24:20:89:7c:72:d6:1f:
72:c5:6e:47:91:68:60:5c:46:56:72:b1:06:d7:44:
84:98:98:8e:35:76:a1:ea:3e:6d:61:82:43:d8:88:
0a:71:d0:e9:39:85:f6:02:17:9e:f4:34:5d:4e:05:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:89:28:E9:05:AB:F5:6A:F3:88:48:49:5B:CE:51:AA:4B:A1:B7:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b9adff-addc-30b8-a15d-804492bd9627.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:aa:4b:58:59:8e:55:46:d6:55:99:06:07:95:db:fe:1d:54:
3f:a0:98:be:be:ac:30:7e:8b:e4:f4:da:5f:2f:5f:db:d4:66:
ca:e2:a8:c4:b9:7a:27:47:6f:4b:9d:b8:3c:c1:8a:dc:92:2e:
64:82:a5:a1:07:31:32:9a:35:86:f5:e9:b1:2d:43:21:3e:ce:
5d:17:b0:23:93:2e:15:fa:76:22:c7:22:d7:75:06:ac:be:a4:
45:3c:f6:04:a4:5a:7f:dd:e3:c2:b8:83:95:64:6f:fb:4c:5b:
de:f0:a0:27:68:a5:50:46:ad:51:6e:dd:33:88:31:2d:76:95:
86:7c:90:59:41:07:4e:ef:4c:e6:71:a3:f5:ce:ac:8a:6d:5d:
a6:ea:c4:03:78:74:19:51:31:80:d3:cc:e7:1f:71:cf:62:6e:
03:79:c5:48:89:21:2c:89:fa:84:f8:0d:81:3d:3e:ec:c8:ce:
95:23:70:64:71:52:ff:c1:fa:61:55:aa:bd:7f:08:64:72:b0:
a7:8d:f9:ae:e3:cd:d0:fd:a6:eb:09:d8:94:9e:c3:bf:25:76:
cb:c1:91:ab:1d:1e:46:6d:dc:68:0b:46:85:9f:16:0b:9e:73:
55:3e:d9:10:cb:8a:14:c4:df:17:ce:84:0d:cc:b0:56:61:b1:
f6:33:5f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:18 2025 by rpki-client