Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc311ad4-3fc1-354b-9373-7f16e8546350.roa
File: cc311ad4-3fc1-354b-9373-7f16e8546350.roa (raw, json)
Hash identifier: efUKo1IVDKCUnqZD6vObEf78XmSRQsEW5eDqVoGUYus=
Subject key identifier: 80:AF:1B:6C:E6:75:90:0A:56:C9:FF:64:91:20:0D:C8:CE:A6:26:AE
Certificate issuer: /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial: 010D0C9F43285848037B6189DAC258177AC66DC0
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc311ad4-3fc1-354b-9373-7f16e8546350.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 393960
IP address blocks: 172.93.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:61:89:da:c2:58:17:7a:c6:6d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=5526c248-c19e-4888-a897-c988b3398a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:85:50:bd:5c:d8:38:27:89:1b:ec:02:df:2c:
b6:1f:5a:d5:07:db:34:c7:1f:54:a6:fa:9c:50:5c:
5b:1c:d8:d5:c8:92:b2:d1:1a:ce:11:20:c9:73:be:
42:eb:d2:69:de:53:17:25:55:60:0f:59:0c:8d:5a:
0e:58:10:0b:d2:cd:43:bc:c1:47:d6:84:ef:6b:82:
d1:fc:62:04:49:ae:19:29:9c:65:87:86:a3:a5:4c:
74:31:d1:29:42:c0:0d:e2:a2:5a:83:78:d3:74:f5:
c8:43:cb:b7:5d:04:53:a4:87:52:ae:42:b9:07:97:
af:06:91:95:11:f3:d6:03:13:c8:98:4c:1b:eb:36:
ba:20:ac:1c:f6:92:fb:c6:0c:c9:a3:2a:ad:38:44:
02:58:42:00:d3:62:9b:89:71:5f:58:fd:b9:f2:dd:
5b:28:ac:cf:cf:2f:f4:cb:c9:a5:26:ec:44:5b:e6:
93:5d:b2:83:0c:85:c8:26:a0:bc:e0:6c:43:a3:cc:
c1:96:76:93:c0:5b:22:da:30:29:68:ba:e0:80:5a:
71:d2:b7:e9:78:c2:05:32:8b:87:b9:fd:bf:7e:77:
b8:29:e2:1b:d1:3d:22:a2:37:22:da:a5:20:b1:4f:
bd:0b:70:81:31:9e:22:da:3f:7a:52:40:77:c5:c2:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AF:1B:6C:E6:75:90:0A:56:C9:FF:64:91:20:0D:C8:CE:A6:26:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc311ad4-3fc1-354b-9373-7f16e8546350.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
X509v3 Authority Key Identifier:
keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
sbgp-ipAddrBlock: critical
IPv4:
172.93.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:c9:4c:1b:25:b7:63:7a:c5:ee:7d:ba:8d:71:76:62:7e:e8:
9c:14:8d:a5:4f:0a:cb:4e:a3:5a:41:3d:05:11:df:88:88:89:
c1:cb:ac:56:76:40:3f:5e:39:af:01:e7:91:2e:54:aa:04:bd:
d6:67:f2:f9:fe:ae:66:04:45:ff:90:47:55:f1:af:83:c9:f8:
20:11:f3:a0:f4:38:2b:6f:81:9e:23:58:b2:59:e2:fa:d9:29:
4b:50:07:2e:5c:56:5d:57:f7:f5:09:11:3e:6c:36:a4:89:55:
21:66:99:ec:38:4d:b8:13:90:1a:09:8b:8f:5e:3f:88:e4:4c:
38:8e:90:8e:b6:b3:5c:ae:42:47:bb:a3:75:4e:ca:d1:43:95:
a1:68:13:38:05:35:b5:55:1d:60:c3:f1:ff:e3:c9:d9:97:09:
1f:9f:58:00:22:f2:86:81:c3:d7:ba:e8:f1:92:32:7e:8a:52:
ef:76:49:76:6b:09:5f:3e:cc:60:c5:8e:68:ae:33:30:43:a9:
4c:5b:97:0a:22:c2:dc:bd:c7:f6:5c:63:12:80:90:f2:e8:ca:
6a:26:48:2e:c5:a7:a6:34:04:0c:66:40:f7:dd:17:5a:06:4d:
dc:5c:9d:94:be:22:4d:91:c5:a7:7f:0a:79:ce:28:06:6f:7d:
9a:98:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:38 2025 by rpki-client