Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/26f8cb14-37ca-305b-8850-4a0a76ab5fa8.roa
File: 26f8cb14-37ca-305b-8850-4a0a76ab5fa8.roa (raw, json)
Hash identifier: LdX9CqCGHSBQwGtZNCtlBhJ5sXhLroiXG+4l/IZCYUo=
Subject key identifier: 0C:41:4C:05:0F:DF:BD:D7:32:1A:D6:23:60:4B:BA:C4:1D:1D:F1:4F
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3193E268C8A560DD9500
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/26f8cb14-37ca-305b-8850-4a0a76ab5fa8.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 128.109.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:31:93:e2:68:c8:a5:60:dd:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=b1fa2f9d-b4c6-4b26-b92c-e4fccca1d1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:80:4e:f5:c1:50:bd:b5:f2:cf:61:54:eb:
2f:a4:bc:d2:d5:65:a4:a4:71:30:9f:cb:26:30:c7:
82:8a:60:bf:7e:aa:e6:df:1b:81:41:ad:7f:07:ba:
da:8b:1f:d4:38:c3:88:6e:7f:ef:38:a7:80:5f:46:
2c:e4:95:91:18:b8:a7:75:bb:14:91:59:9c:31:a1:
6c:6f:f3:95:87:ce:39:07:33:33:ec:00:92:4c:49:
85:08:c7:21:13:3c:fe:be:30:15:30:3e:83:f7:13:
27:11:23:a4:29:af:5e:38:19:b8:5c:cd:65:ff:28:
40:ad:13:6a:9b:fe:37:d0:45:40:be:f9:a6:fe:53:
54:14:65:67:46:7e:6b:30:82:61:e5:74:85:db:3d:
3c:c9:b7:32:64:69:7f:be:a6:df:ff:df:71:71:97:
eb:6c:b4:41:2b:ae:fd:73:29:3a:7d:e5:c5:9b:c9:
0c:49:f6:90:a9:9f:42:b2:22:ef:17:a0:7a:2b:b5:
ea:1a:c1:2e:e0:5a:b8:68:8a:58:1d:f5:97:57:55:
1e:22:9f:07:46:84:0d:c9:50:c5:9c:09:ab:bc:25:
9c:22:91:36:51:ca:a6:8d:47:4e:b6:c0:77:b0:71:
74:6d:0f:a3:1f:6a:86:68:52:c3:37:bc:08:60:57:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:41:4C:05:0F:DF:BD:D7:32:1A:D6:23:60:4B:BA:C4:1D:1D:F1:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/26f8cb14-37ca-305b-8850-4a0a76ab5fa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:2a:f7:9a:dc:85:b8:ac:54:8f:07:4e:cc:ec:c9:66:33:2c:
b9:9b:5d:1a:d2:5a:3b:d7:62:18:26:2e:b0:a6:73:a2:b6:16:
f6:ef:6c:25:d0:b5:21:b0:1a:ef:56:65:b1:96:a3:23:a2:28:
ff:a3:62:6b:4e:1d:cc:7d:a5:cc:54:e3:1d:dd:75:30:b1:ac:
01:53:c7:a3:b4:9f:fe:68:39:b2:60:de:1d:2b:6f:c4:5b:94:
dc:9e:8c:3e:b6:cd:bd:f5:04:70:23:66:c5:39:06:46:84:63:
fb:e4:61:5a:68:cd:2d:92:60:f9:9e:12:fa:ee:f6:03:5d:61:
c6:01:d8:51:d1:72:ed:42:08:c9:8c:76:c8:e8:b9:33:f6:61:
52:7a:43:f3:56:2f:28:f9:3e:be:0b:39:41:ef:38:77:f6:d9:
5f:a1:d7:e4:01:ba:89:27:e5:e7:3d:fc:a7:f6:18:86:9e:6c:
2f:78:2f:90:50:06:84:3c:89:a3:a8:b7:58:e9:b0:a0:73:fb:
ce:a2:bb:20:f2:dd:86:97:24:75:9b:23:54:2e:63:a2:54:4c:
30:72:58:37:2e:6b:3a:9b:68:11:cb:fb:79:a9:09:7b:c9:2f:
f4:aa:24:d2:fd:d6:62:f0:f3:c4:33:28:a6:bd:4e:2a:58:66:
5b:27:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:25 2025 by rpki-client