Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
File: 1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa (raw, json)
Hash identifier: 4oLxY615ua2A3fMqv+6psb1M8F9VOdbXneTDT1cmfvc=
Subject key identifier: 08:EF:75:51:1F:A5:83:CF:E2:DC:5E:24:E0:6E:BE:78:16:CE:9A:93
Certificate issuer: /CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922
Certificate serial: 010D0C9F43285847F84F88CC1F808FDC58F49A00
Authority key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 36667
IP address blocks: 198.35.120.0/21 maxlen: 24
2620:c:8000::/48 maxlen: 48
2620:109:6000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:88:cc:1f:80:8f:dc:58:f4:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=fc79636f-ea37-4d1b-92a9-c2c5099c535e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:35:01:1a:71:78:92:b6:52:26:94:8d:de:50:
38:51:3f:3c:f8:37:7f:c8:05:ae:1e:24:a0:e8:33:
1e:94:1e:dc:72:a1:5e:14:e7:aa:14:ba:83:82:cd:
54:27:a5:a5:fc:39:0f:25:32:f2:54:70:c5:01:9d:
6c:b0:1c:6e:a5:6f:48:78:ad:53:fc:a8:d9:1f:c2:
bc:eb:7e:e9:59:f7:02:e2:fe:38:7e:19:3f:01:06:
e1:1a:ba:11:2d:d2:6c:a4:f8:44:c2:82:d1:82:f3:
93:ee:e3:35:d9:12:37:6a:57:52:ea:41:a3:4a:c7:
ee:e2:a0:c1:c7:38:d1:a5:f4:da:0f:fc:7e:d2:5d:
68:85:c6:87:88:da:93:26:b5:2b:79:7d:d4:69:40:
d8:cf:a8:fa:d0:c8:2f:57:57:51:d5:26:b7:ec:f2:
af:ce:6e:ec:2e:88:e2:69:cc:b5:94:5e:1c:97:e2:
5e:6c:a6:f0:b7:46:9c:f9:5d:ee:7a:52:d5:47:11:
09:e2:56:26:c1:c5:71:38:6f:bb:56:c0:39:39:0c:
9c:36:4d:13:b0:04:3b:fc:81:e8:e8:64:e2:a1:9d:
68:82:81:07:fa:9a:18:1e:54:d9:e6:90:bf:55:9b:
21:ff:ea:7a:4f:2e:2e:e6:04:77:65:cc:20:1b:b6:
59:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EF:75:51:1F:A5:83:CF:E2:DC:5E:24:E0:6E:BE:78:16:CE:9A:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl
X509v3 Authority Key Identifier:
keyid:EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer
sbgp-ipAddrBlock: critical
IPv4:
198.35.120.0/21
IPv6:
2620:c:8000::/48
2620:109:6000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:b4:7b:69:58:b0:b6:5a:7f:a1:a4:cf:fe:3f:0f:08:e3:54:
53:50:02:8c:78:c0:37:24:30:a6:dd:50:d9:94:eb:c5:6b:d5:
8b:b4:ae:72:b2:ff:28:20:10:1e:c5:c8:d7:68:3d:a4:94:7a:
14:59:50:0f:b6:95:e2:ff:d6:cf:e9:87:98:af:94:fb:ac:13:
50:66:e9:20:a3:a7:cc:bb:c9:c5:eb:29:3b:eb:1a:85:5e:41:
2e:5d:a4:36:b7:08:62:9c:4a:23:db:39:b7:8f:13:d8:df:2e:
a5:f7:f1:19:3d:c7:89:8c:a4:7b:91:b6:14:94:07:3c:5f:c0:
c5:e3:d5:00:3d:fa:f7:83:b1:10:0b:0a:ed:c1:ae:c8:ad:05:
e7:16:e0:0b:2d:e1:c3:42:2a:35:d5:1e:59:91:53:17:e0:f4:
0e:0d:11:cd:31:35:a1:63:66:30:32:31:f5:85:4f:21:30:d0:
f1:8d:b8:e4:12:0f:d4:a8:71:3e:4f:26:85:43:1a:0b:2f:e3:
f8:2d:e7:7c:77:bd:80:3b:be:8a:00:7f:2e:65:6b:ac:7c:cb:
83:97:57:a7:0d:68:28:8c:de:c4:c4:5f:78:0c:76:54:60:ec:
b2:47:33:1f:05:ae:6b:60:68:52:a6:3a:e9:b6:9c:e0:33:2a:
c4:0c:a1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:11:34 2025 by rpki-client