Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ca7f5317-5bca-35bb-8b76-448393a2d976.roa
File: ca7f5317-5bca-35bb-8b76-448393a2d976.roa (raw, json)
Hash identifier: x207iKAVYgmApiOuyuKSxGcZbEDrpjZc+NVNZSb8aFU=
Subject key identifier: FB:9C:17:FD:E7:79:0D:67:75:45:F4:93:6D:33:16:59:4B:EF:BC:73
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F43285848828090D815688F4643791C80
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ca7f5317-5bca-35bb-8b76-448393a2d976.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 12083
IP address blocks: 24.214.144.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:90:d8:15:68:8f:46:43:79:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=ce4e306c-60d9-4fc9-938b-da0eaa0854c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:99:06:ae:7b:7e:ad:78:68:88:12:d2:63:a5:
b3:4f:e6:64:43:ff:f9:e7:f2:66:dd:67:ea:fa:8b:
ec:44:df:28:ed:37:54:cb:db:ba:f7:88:5d:fe:f9:
22:f3:6b:1b:12:a1:6b:31:ba:8a:9e:7a:07:4e:4f:
07:13:e0:31:c9:98:cd:5a:c0:b7:15:31:c7:89:af:
86:00:d7:35:92:92:a0:fd:7e:56:5b:8f:c8:28:d4:
5f:13:a3:ea:2f:af:78:1b:d8:c8:00:1c:da:c2:22:
d5:87:ea:72:4d:33:98:1e:26:bb:a0:37:bf:4b:37:
3a:af:bb:3c:f0:1f:b2:e7:0d:9e:ea:e2:3a:83:ec:
58:90:77:9d:a4:11:6c:d7:fc:9c:f0:b9:da:bb:42:
c0:0b:6b:6c:09:ee:1f:c1:42:10:a6:6c:6e:5f:f7:
c5:6d:02:66:fe:da:9b:89:b9:f3:70:03:0b:23:f3:
0e:91:16:67:90:35:ab:f3:12:c1:de:68:8a:91:96:
1e:d4:71:3f:23:3e:71:1f:d9:97:37:cf:18:59:c5:
f9:32:72:1d:98:3a:e9:2d:69:22:b3:b6:b4:53:71:
b3:a5:f5:b6:e5:a7:52:f5:1e:86:5d:72:69:62:0d:
26:db:d8:3b:cf:23:10:25:ea:89:dd:a0:30:0a:1c:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9C:17:FD:E7:79:0D:67:75:45:F4:93:6D:33:16:59:4B:EF:BC:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/ca7f5317-5bca-35bb-8b76-448393a2d976.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
24.214.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:4d:d3:5b:25:e6:7b:4a:ca:d5:d1:b2:cb:d5:81:2e:08:ed:
b4:8e:dc:b9:7b:54:1b:39:ec:6f:65:3c:fa:fd:1b:1c:c7:74:
ba:37:2d:89:02:c5:6d:8a:17:62:01:40:fa:01:c4:79:4d:37:
d5:7e:c6:b9:b1:1d:57:ba:af:e3:53:6d:1a:15:3b:4a:6d:a0:
bb:b1:eb:01:ae:98:8b:f6:45:68:d4:a1:72:a6:f8:34:5f:4a:
3c:a0:47:cb:fd:16:c9:05:2b:16:de:9c:78:7d:a5:49:05:e7:
ed:18:6b:b8:69:71:3c:d6:cd:26:c2:8a:7c:3b:46:d1:a1:95:
fd:33:6d:dd:49:ad:67:5d:72:6b:bb:72:b9:38:f8:4b:f3:ca:
ba:22:d2:b3:89:ae:b2:0d:44:1b:50:14:39:2b:cf:c8:61:db:
1a:85:67:74:b4:82:64:32:e8:b7:4b:2b:ce:58:5c:99:8d:92:
79:bd:fd:7b:60:64:d4:50:e7:5e:d8:84:fa:a2:2d:d1:a6:78:
6e:8d:2c:05:9d:5a:ad:b1:8d:cc:e7:fc:24:18:45:88:de:24:
8b:3a:02:11:2f:96:eb:bf:79:c5:40:2e:46:26:95:2f:17:da:
de:66:ba:c9:59:ad:10:4d:c2:97:1f:0a:bb:a4:c6:d0:de:4d:
4c:df:cf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:29:14 2025 by rpki-client