Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa
File: 900f5454-5a4b-3c72-a9e6-09f19630db71.roa (raw, json)
Hash identifier: noR99PoeZxyFqyeB0/ofj12Uf6q7XAa8X5BqUNHL8Gc=
Subject key identifier: 74:48:D9:D8:37:63:C7:9B:45:1F:76:AA:5D:FC:1B:C2:17:16:03:95
Certificate issuer: /CN=d7df35c8-e79b-433a-a950-6df11849bfd3
Certificate serial: 010D0C9F432858486C2B0CA4BCFEDEAD3AB43900
Authority key identifier: C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 88
IP address blocks: 128.112.2.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:0c:a4:bc:fe:de:ad:3a:b4:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7df35c8-e79b-433a-a950-6df11849bfd3
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=9b6bd857-289a-494f-8bd1-b41dcb0da5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:5e:ca:cd:a5:df:07:c0:c8:f3:00:fb:2b:
d8:02:2a:9f:f5:f8:02:c7:dd:8f:83:b1:48:24:c9:
c6:71:b2:1c:ca:91:2f:6c:ee:fe:ca:ba:bf:1c:03:
7f:b3:98:7d:3a:5b:56:fb:61:e8:d9:50:e6:04:7b:
2e:f4:50:fd:c9:19:69:2d:33:2e:31:33:96:11:ff:
22:eb:e0:e1:de:e1:c2:c0:38:fd:44:4f:2f:5e:62:
6b:44:b0:e4:55:cc:a5:ea:3f:a0:c2:9d:70:fb:a4:
86:f9:42:c7:f5:36:1f:9a:93:b4:ea:be:be:54:d4:
54:62:7b:c0:45:b1:53:cd:28:a8:8d:be:ce:26:3d:
03:31:52:71:4c:c7:9b:d7:db:eb:23:91:e7:fb:93:
40:a8:c1:0d:b8:c9:2e:24:e1:88:92:95:2a:24:bc:
a7:e3:8f:7c:18:c2:64:09:37:76:49:1e:43:38:23:
00:97:47:89:58:be:af:e1:8c:e7:13:ea:11:86:b7:
2c:aa:37:12:b3:b5:f5:44:12:66:c9:83:96:23:9b:
e4:d7:51:3a:3f:1b:8c:9a:da:3c:63:5b:cb:a2:4b:
0a:80:6d:4b:a2:57:95:ce:ba:8c:c8:5f:25:64:c5:
4a:a4:5b:ce:e6:26:c5:6e:1e:a9:b8:ea:b1:bb:0b:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:48:D9:D8:37:63:C7:9B:45:1F:76:AA:5D:FC:1B:C2:17:16:03:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/900f5454-5a4b-3c72-a9e6-09f19630db71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3/d7df35c8-e79b-433a-a950-6df11849bfd3.crl
X509v3 Authority Key Identifier:
keyid:C6:2F:F5:A6:3B:E3:92:B4:96:2B:EE:B3:C6:AE:46:3E:A1:3B:2F:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7df35c8-e79b-433a-a950-6df11849bfd3.cer
sbgp-ipAddrBlock: critical
IPv4:
128.112.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:1b:48:8a:8d:d4:73:e3:76:16:ed:3b:a7:25:84:6d:bc:d7:
b0:77:63:b3:42:8e:10:dd:39:e0:db:44:7f:98:fc:f1:ec:15:
3c:85:ce:68:ce:79:54:97:32:b3:aa:fb:ea:d6:db:0c:e5:74:
60:df:29:ce:9a:a8:7b:b4:d5:f7:07:53:b0:15:b5:57:2f:99:
75:4f:14:e4:b8:1b:e9:29:db:a7:57:4f:8e:59:92:9c:0d:a3:
ee:ec:99:83:15:2d:6d:b7:be:56:22:48:d7:9a:be:63:42:6f:
a5:2e:5e:03:10:5d:86:00:81:46:be:a1:dc:66:41:8f:26:37:
59:cc:c3:3b:87:9c:61:73:e7:c9:2d:2b:ba:88:37:b1:f7:de:
32:f0:be:11:1e:a6:bb:7e:99:0b:6e:6c:27:d4:79:32:67:17:
1a:34:7e:a3:6d:1f:d5:15:3e:3e:5e:98:9f:6f:cf:d6:65:3d:
9b:43:1c:76:bb:95:c6:c5:a9:6b:7a:f1:12:ff:71:7a:6e:b7:
5c:e3:f4:48:fe:f1:f0:b0:27:21:74:9c:de:16:ab:6b:7f:f4:
af:c6:4b:6d:40:a6:eb:ae:d0:ab:86:82:f8:6b:f1:4a:af:62:
12:4e:48:37:9d:ea:f5:55:47:e2:d8:39:91:80:74:4a:e8:2b:
bf:21:c8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:12 2025 by rpki-client