Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa
File: cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa (raw, json)
Hash identifier: G/5Ajz6mVa7w14uEw74PjYDsQJH4w71xty23EwjWvgo=
Subject key identifier: 2C:8D:88:30:3A:33:5E:DD:6C:B1:92:3F:28:8D:7B:1A:EF:7F:66:91
Certificate issuer: /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial: 010D0C9F43285847FF4A7CEA6239D7F92BDF0580
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 32590
IP address blocks: 192.69.96.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:7c:ea:62:39:d7:f9:2b:df:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=a044a2ec-34b9-43e6-b919-17f46ade4bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:2e:f2:ad:42:24:cc:14:5a:23:5a:c5:bb:
91:73:31:70:fe:4f:f2:06:67:d2:da:ee:b3:86:d3:
87:77:85:d8:94:34:05:2d:04:2b:72:59:e5:de:a9:
ca:c4:fb:b6:1d:ac:ea:c9:4a:b5:75:3f:a2:9d:25:
2f:85:27:b7:00:dd:70:3b:3f:3d:ac:ca:c6:34:bd:
cd:d8:6b:bf:a7:3e:cc:60:7e:58:f3:bc:9b:39:c3:
a2:2c:37:48:59:ac:49:8b:cc:e0:e6:e2:97:9f:8a:
8e:4f:a3:4d:35:65:aa:43:4f:05:b7:93:16:6c:26:
fa:20:cf:16:f5:e0:b1:40:64:dd:b0:c1:7f:3b:32:
58:a2:4e:08:19:83:8f:67:c4:68:a4:89:ca:ac:bf:
10:b6:2d:ab:0f:ae:af:22:ba:92:87:57:68:70:ac:
d9:86:24:9a:df:f3:1e:a2:85:d0:1b:13:da:05:30:
0d:af:16:0a:2d:12:fc:3d:fb:5f:c9:4d:9e:83:7d:
29:1f:64:16:c7:63:2b:65:ac:e4:63:7f:27:f4:f2:
30:2a:43:98:cd:ba:8e:43:99:89:97:d6:76:ab:a3:
1c:86:3f:8e:29:4f:68:5d:bb:19:2c:88:c6:aa:5a:
e6:a0:07:a5:df:e0:c8:fc:1b:02:0a:b5:6c:83:e4:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8D:88:30:3A:33:5E:DD:6C:B1:92:3F:28:8D:7B:1A:EF:7F:66:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/cdbc81fc-d0e5-3dc7-b50a-582bc4d92fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
X509v3 Authority Key Identifier:
keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.69.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:b1:b5:de:60:7f:70:31:de:64:8a:62:b1:c8:e1:af:7f:b6:
fb:92:55:1a:e9:c7:08:a5:4a:f8:4d:6e:c2:fe:5d:b6:af:4a:
3b:9c:33:62:75:cd:de:0d:ee:e4:b3:78:37:b4:1e:ab:af:22:
e9:71:c2:95:56:bb:a5:6c:5b:2a:72:b5:0f:b5:f9:0f:8a:c6:
ab:c8:ab:59:06:a9:11:3a:64:58:59:63:75:74:7f:1d:f5:e4:
46:c6:82:ac:10:4a:3e:c3:e2:f0:2a:a6:3c:74:f9:f0:76:59:
ba:a8:b6:28:c7:42:9e:d6:67:04:a9:1b:8a:e5:8b:40:10:fb:
13:45:b7:bf:59:a2:f3:d2:42:bc:23:4d:2c:f1:3a:ef:d5:f6:
07:57:46:40:df:0a:a7:8a:3f:70:fe:e7:8d:71:e7:82:e9:e6:
d2:6e:f9:f3:55:72:71:9b:cc:fc:c5:7e:3a:7b:6e:f4:a3:2c:
01:dd:42:19:be:31:61:66:d7:af:b9:7b:99:67:6b:67:ce:06:
6b:91:d9:7a:19:5e:93:60:34:3c:07:f0:55:4d:00:5d:b1:54:
ed:b4:54:a5:ab:d8:0a:0d:a9:71:0e:ba:77:7a:f7:5e:d5:8e:
2f:b3:0b:66:7b:8f:28:ce:7c:17:ea:18:95:b7:8f:30:4c:c4:
87:1e:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:16:40 2025 by rpki-client