Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa
File: 6b98da56-6d05-3af9-8826-f7a70da179a0.roa (raw, json)
Hash identifier: glGt7BJikJQbBVf5RctHAxXeu7QA6sate1UMmrK9u/8=
Subject key identifier: 75:C1:FE:D9:E0:BF:7B:1A:B7:74:2A:6F:1F:F4:21:B5:F8:D4:D6:08
Certificate issuer: /CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
Certificate serial: 010D0C9F43285848037A4A63F0EADA0ACE91D200
Authority key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 14618
IP address blocks: 195.85.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:4a:63:f0:ea:da:0a:ce:91:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=3b45e180-80e8-4bc3-b43f-8ee9df8397da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ba:53:f1:a0:a9:f7:b6:49:af:8e:4e:91:35:
b8:a5:a3:5b:96:e0:3f:d0:38:4c:d6:f5:27:70:28:
31:7d:b2:2f:c4:70:c4:2b:d3:85:01:73:cf:60:dc:
51:15:17:2b:58:ef:c2:0b:05:4a:af:f8:f4:2b:0e:
58:b4:73:1b:e5:a8:49:bb:d1:a1:dc:c3:6d:3c:c9:
f7:d7:81:7f:bf:3e:05:63:e7:4c:18:1d:88:64:86:
dc:bb:31:ce:de:ff:79:86:f1:ec:31:32:ca:5a:12:
e1:6a:6e:47:92:16:39:d2:9b:ab:68:73:6c:61:e2:
d1:2c:18:cf:3b:25:4b:f0:4a:db:2b:fd:de:26:96:
9f:b3:4e:a8:79:84:1f:a8:62:a3:90:bc:f0:36:24:
f7:48:83:2a:fe:f4:57:b3:5b:1d:82:3b:57:6e:0c:
8e:46:19:77:b4:7f:0a:14:55:ef:04:82:17:ff:a4:
77:7f:a6:15:c1:0f:09:82:91:97:0c:a3:6b:0b:e0:
ae:41:99:06:b7:b2:9e:51:e4:02:e7:9d:2e:f8:ef:
31:dd:44:b2:77:fc:80:8b:79:1e:df:a4:c2:93:cd:
1d:b0:0b:27:c4:a6:1a:7e:29:f1:83:9e:80:0f:d8:
31:aa:65:56:fd:26:b2:2a:3f:de:7f:0a:03:3a:d8:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C1:FE:D9:E0:BF:7B:1A:B7:74:2A:6F:1F:F4:21:B5:F8:D4:D6:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/6b98da56-6d05-3af9-8826-f7a70da179a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.crl
X509v3 Authority Key Identifier:
keyid:9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer
sbgp-ipAddrBlock: critical
IPv4:
195.85.36.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:fd:4f:21:c4:cb:aa:70:93:1b:84:16:1b:25:45:e0:de:df:
37:32:4a:14:ea:66:17:5a:46:5f:93:fa:43:e2:c3:79:62:09:
60:11:fc:f9:ea:77:93:7b:a6:7d:fa:c9:7e:18:95:b9:1e:c3:
be:f0:d9:12:ec:b1:f4:cf:88:ae:da:1a:c9:d4:42:b8:57:37:
a0:e9:ed:6e:2c:3a:cf:71:91:e5:56:09:fa:11:31:e5:fe:62:
b6:28:ad:23:15:73:02:ce:02:d4:af:6b:23:1f:a6:02:fd:3f:
03:73:48:ab:fc:44:cd:19:9d:fe:9b:e5:0f:c6:78:57:d8:e1:
0b:8f:69:11:97:99:28:e6:69:49:78:2e:26:01:41:99:4c:81:
a8:0c:61:75:25:15:da:bf:f1:e0:59:08:1a:57:29:82:21:90:
60:20:6e:a2:8d:35:bf:56:ec:41:ba:f4:2b:a5:77:c3:7d:15:
56:99:50:ab:9a:75:58:8d:80:5f:66:60:36:52:85:79:ec:79:
10:30:96:0f:61:9e:bf:42:c8:36:11:7a:57:f2:81:b5:77:10:
eb:c3:11:aa:98:20:bd:cc:b8:57:25:d6:de:d2:4e:36:c9:3c:
97:e4:a6:c0:77:43:b6:2f:9e:77:5a:71:56:67:0c:f2:1c:c0:
87:2c:ba:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:44:54 2025 by rpki-client