Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa
File: a973be6d-e115-33cf-9248-c6c35ab8897d.roa (raw, json)
Hash identifier: ME1GZfcJ0ULSjkysnJls7ch7l/o5tfhimpVJmFti2/8=
Subject key identifier: F8:DF:38:44:8F:45:18:2D:E5:4D:6F:87:55:81:B7:A4:F9:C7:69:A6
Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1
Certificate serial: 010D0C9F43285847FFED445B80F87102DD550300
Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa
Signing time: Mon 25 Nov 2024 19:29:09 +0000
ROA not before: Mon 25 Nov 2024 19:29:09 +0000
ROA not after: Sun 23 Feb 2025 19:29:09 +0000
asID: 4246
IP address blocks: 128.235.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:ed:44:5b:80:f8:71:02:dd:55:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1
Validity
Not Before: Nov 25 19:29:09 2024 GMT
Not After : Feb 23 19:29:09 2025 GMT
Subject: CN=9b56d73a-535a-46b7-a56d-d9a8d90e64e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:43:98:2f:36:a8:43:0a:39:08:98:a5:45:
55:bc:3b:ad:87:8f:97:ac:46:99:3d:cd:b8:fe:eb:
56:1f:35:24:5a:81:44:8e:a8:3a:eb:49:c2:6a:c8:
a7:fb:ab:64:ca:64:4b:18:cb:d1:46:35:f0:33:c2:
72:97:9d:ce:68:c7:54:07:58:d5:a8:25:50:b5:d2:
8c:24:36:06:ab:00:db:56:d6:72:49:0a:c6:4d:4d:
5b:2f:ee:6e:5f:51:1b:39:2a:eb:fe:55:94:e7:8d:
2e:47:f5:c8:97:b7:82:b3:1f:38:59:ca:37:e1:e7:
1c:78:b5:3b:d5:49:ff:2f:2b:76:79:30:ed:11:db:
b1:e4:8e:f7:74:32:3f:39:b0:42:c2:35:37:23:62:
9f:ff:ec:cf:6a:a7:ce:2c:f8:4b:dd:63:89:d9:8c:
9d:3a:7e:f4:34:3a:06:7a:bf:2c:12:fb:c5:54:ca:
8d:4d:4b:22:2d:2e:97:68:fe:ad:15:ed:15:04:23:
e9:79:0d:3f:24:36:f4:63:a7:a1:c9:0e:f1:6d:23:
34:1a:d5:85:e7:b0:6d:9c:ff:78:08:58:4a:8c:5f:
25:e2:3d:82:72:a4:00:a1:75:cd:24:a6:c5:05:fa:
2f:98:eb:ab:81:de:7f:06:2e:dc:04:d8:09:7a:dc:
a2:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DF:38:44:8F:45:18:2D:E5:4D:6F:87:55:81:B7:A4:F9:C7:69:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a973be6d-e115-33cf-9248-c6c35ab8897d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl
X509v3 Authority Key Identifier:
keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer
sbgp-ipAddrBlock: critical
IPv4:
128.235.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:7b:51:78:10:ce:fb:80:a5:a0:8e:69:38:5b:23:cc:c9:00:
68:2f:a2:e0:1b:98:45:3c:6e:f1:85:e3:d7:61:07:6d:ff:a0:
5f:6c:31:66:8c:22:9d:74:94:26:d1:20:49:f7:67:b7:f4:2a:
12:e6:be:82:00:4a:3b:cb:51:b5:f1:8b:ed:8b:61:43:7d:d8:
72:63:b9:77:99:f3:19:fa:ca:c1:6b:50:e0:85:9e:9c:e5:56:
d1:08:76:c2:f3:86:b0:21:be:f6:fb:e2:32:1e:99:d9:a3:90:
c0:fc:2b:e8:5b:ec:cc:92:bb:38:0e:8c:cf:2b:57:0c:f8:96:
b4:98:cf:d7:0b:67:d7:a3:ed:dc:00:98:ee:35:25:3d:db:70:
f8:60:a3:cd:38:d2:66:27:2d:51:d7:99:da:d9:8d:72:97:88:
ad:4b:51:a2:88:9e:eb:8c:06:d4:d5:60:0d:1f:9f:a6:df:b1:
6e:6a:e3:c2:e0:45:61:92:43:60:5f:fe:d5:17:db:bd:82:0e:
1d:5d:c5:f1:f8:d0:71:5a:2e:02:be:5c:8e:87:0c:10:11:54:
58:a6:85:71:e6:a8:44:0e:c7:86:f7:99:f9:83:28:d7:cf:fd:
3a:37:fb:5a:06:6f:66:75:04:2c:89:71:22:46:b6:c5:e4:28:
58:b0:00:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:43:34 2025 by rpki-client