Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa
File: 8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa (raw, json)
Hash identifier: 7WL7sp3IdyX/OLeDsv7qjAb6YCIisrfK9YQUriLqtIk=
Subject key identifier: EF:06:FA:99:DE:5F:DD:CC:10:FD:8A:C6:1F:4B:4C:93:D5:AB:07:DE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486C2B22D33B63C3A3CB1A08C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 0
IP address blocks: 192.68.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:22:d3:3b:63:c3:a3:cb:1a:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=c956902f-8c3f-486c-b745-fed6268336a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ad:23:a2:40:89:f6:e0:7c:38:c8:16:65:43:
e8:2a:c2:10:ba:5f:21:24:da:f4:a3:c2:be:60:67:
2d:96:d6:08:67:2e:d7:ac:c1:fe:79:83:62:b5:68:
aa:e2:30:f5:7b:7b:73:9e:10:f9:2e:18:01:09:31:
0c:a8:02:da:ec:69:e3:e6:03:32:2c:09:2c:3c:76:
c1:49:6b:a1:de:ef:d9:07:56:93:1d:3a:67:e5:64:
a2:35:b1:10:d3:c5:79:ab:31:cf:da:dd:2f:11:42:
34:94:ac:45:8a:ef:9c:fe:3c:59:e2:2c:10:80:c3:
09:73:4a:88:70:2d:16:35:71:f6:0e:c1:ef:ac:fe:
f2:ab:d4:9d:b0:9b:87:71:93:cf:61:e4:de:1f:20:
49:b0:e5:8c:8e:3e:a4:3f:d6:38:cb:23:c3:63:8b:
a1:54:b2:49:f9:66:05:f0:15:f8:47:7d:36:c9:be:
1b:77:36:7d:63:b2:7d:8e:61:b5:27:79:64:a4:05:
76:7c:2a:85:48:98:cc:35:dc:14:96:86:00:68:e5:
5e:45:3a:71:a3:2f:33:2b:8c:5f:44:e9:7f:fe:de:
58:3d:f0:d2:df:07:bb:88:9e:c9:8b:6b:93:db:68:
9f:e5:e9:e8:f8:ef:69:1d:17:61:52:33:71:d4:e3:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:06:FA:99:DE:5F:DD:CC:10:FD:8A:C6:1F:4B:4C:93:D5:AB:07:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b4a201e-b0b5-352b-9e05-ced1e601fe35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:0d:92:84:89:df:95:c6:75:4e:f2:9f:30:f5:63:ad:c1:a3:
5e:06:7b:f6:d9:ff:17:39:86:02:b7:48:ff:38:aa:0d:e7:b5:
2b:b5:d3:e9:99:85:db:42:d2:15:c2:0f:2c:54:79:54:e4:af:
7d:1f:48:0a:f1:35:f5:0a:01:21:a6:0f:01:b8:25:28:34:72:
21:03:de:31:2d:a2:7a:51:3d:7b:46:13:51:14:49:17:05:99:
48:fb:de:08:12:27:fb:01:02:9c:72:c3:68:de:24:db:3b:8a:
8c:ae:92:fd:f9:54:da:19:a0:b0:65:fb:4c:17:54:db:79:85:
b8:a2:82:b0:14:ef:9c:cb:03:4a:e3:05:4d:36:8b:8e:35:de:
4a:a6:cd:e0:80:a7:85:de:59:8c:3c:3f:5b:03:37:a3:25:d9:
72:e2:31:ca:27:f9:fb:f2:5d:35:f6:3c:48:af:eb:47:41:20:
4d:9c:2e:12:fe:25:6e:ea:56:f6:8f:91:03:af:3d:f0:10:66:
4f:00:d2:ae:8a:f0:12:bc:2e:f9:38:3c:53:2d:e0:bd:0a:14:
6c:de:ca:19:d8:f4:66:e8:dd:42:b7:7d:16:34:98:1d:b7:c0:
3f:ae:20:b4:90:9a:53:cd:d9:58:a1:73:5d:b8:44:ab:bb:ae:
fb:f2:fe:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:30:19 2025 by rpki-client