Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/df151ca4-35aa-335f-b8b4-3fa8fa7c70fb.roa
File: df151ca4-35aa-335f-b8b4-3fa8fa7c70fb.roa (raw, json)
Hash identifier: G4uLcQ/+OXX3GuXg0vyiQb0NX0xOvVRrxbJW6zgJhE0=
Subject key identifier: 86:7E:69:82:C9:C9:3A:C3:A9:47:41:A2:D8:6D:F4:24:73:F1:DC:78
Certificate issuer: /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial: 010D0C9F432858487A2087EC91A2FE8CCA0BDE00
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/df151ca4-35aa-335f-b8b4-3fa8fa7c70fb.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 7992
IP address blocks: 192.69.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:87:ec:91:a2:fe:8c:ca:0b:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=3e5b49b7-fc78-4fa5-9a92-bee4e0ed1e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:26:25:3f:8e:90:ca:50:4a:04:ca:cb:c4:
b0:55:d7:5c:a0:1e:ac:97:07:53:64:e9:0b:3a:94:
32:53:a3:f9:fa:89:b9:83:e3:d1:42:7c:ea:c8:ec:
dd:73:f6:2e:78:63:71:48:85:bc:a5:37:c1:01:04:
d4:60:cc:0c:68:57:c9:67:4d:c2:f1:fb:20:dd:24:
a3:78:bb:a9:a8:1e:33:b0:c4:4b:1d:d2:a5:fd:e7:
28:6a:c1:36:8f:04:eb:c5:36:c8:87:6d:3f:fd:7f:
db:db:28:b5:af:98:d1:18:b5:a2:73:6e:2a:1b:32:
52:1c:cc:fc:e3:c8:46:62:26:36:5d:59:02:f0:d0:
aa:34:de:9b:1f:dc:16:d7:51:07:5c:26:ce:ee:08:
dd:50:99:26:ab:fc:6d:18:cf:12:0d:a8:fb:56:0e:
c0:23:cd:40:08:47:8b:73:b1:37:27:48:fd:ce:d9:
e4:c3:98:f5:c9:52:d2:03:99:5e:3f:ef:5a:bf:0a:
3b:8e:cb:2d:70:61:b1:8f:e0:9d:aa:02:c6:7f:a1:
a2:7f:97:bd:c7:1f:e4:5f:a9:9f:6a:3f:71:8b:74:
c3:8b:ea:50:8c:d8:d9:bb:60:2b:ac:33:e3:fe:79:
44:b0:a5:16:dc:06:67:8d:2c:c8:95:52:09:ec:a6:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7E:69:82:C9:C9:3A:C3:A9:47:41:A2:D8:6D:F4:24:73:F1:DC:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/df151ca4-35aa-335f-b8b4-3fa8fa7c70fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
X509v3 Authority Key Identifier:
keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
sbgp-ipAddrBlock: critical
IPv4:
192.69.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:c1:93:f0:3e:19:10:ae:37:4d:74:68:90:9e:29:f1:17:f0:
7f:05:b1:df:bc:26:35:c2:9f:a5:d3:88:0b:d3:73:3d:d4:a7:
80:a0:10:f5:8a:6f:b8:46:8f:4a:28:49:e3:b2:a4:7d:98:48:
3e:d8:46:62:a6:7c:d5:8c:69:80:67:28:c6:31:1a:3b:38:52:
8d:db:0e:78:ee:e0:29:b2:d7:f5:d5:6c:34:c3:b7:92:0c:6b:
61:dd:12:b2:c4:ad:76:36:4a:d1:77:05:4d:f3:cf:d5:6b:a2:
8f:d4:1a:cd:92:30:0c:b1:6c:d0:12:16:91:08:81:79:a5:e8:
01:9c:40:40:2a:7f:33:8d:da:98:fc:53:6a:60:86:8a:f6:0d:
7d:49:f0:ac:3f:d3:5c:55:40:12:95:05:d0:9d:f6:07:29:50:
3a:e7:ad:f6:fd:e4:36:03:72:a9:f7:c5:05:90:e0:ed:64:07:
14:9b:cf:34:f1:b4:35:8d:81:71:2d:09:3c:e5:e8:e9:6d:7b:
f4:14:75:61:3f:fa:c6:96:be:ed:8e:28:6e:b2:46:ca:eb:b3:
f8:cb:70:66:fc:60:88:bd:87:10:fe:a0:ca:8e:64:35:53:1e:
3d:d1:6a:8b:8f:44:be:63:e5:5f:b7:60:74:25:d2:e3:26:f9:
f4:af:65:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:46:05 2025 by rpki-client