Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/40d0a79b-e036-39cb-b622-1328c46312ca.roa
File: 40d0a79b-e036-39cb-b622-1328c46312ca.roa (raw, json)
Hash identifier: VP3fAL5dQNnda/ekuCKWhkMXPZ7NdSzsC9K9RxhymzE=
Subject key identifier: 48:09:29:20:AD:A8:C3:87:DE:1A:67:CE:B8:CA:F0:70:64:1E:B2:2E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C320B2558540072C27080
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/40d0a79b-e036-39cb-b622-1328c46312ca.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 128.109.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:32:0b:25:58:54:00:72:c2:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=14e0c84b-64e2-4d5a-bf3b-c8229bae8a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0a:89:4b:99:ab:84:57:4e:66:31:c9:ec:b7:
6c:cc:57:41:15:b3:75:d5:ed:2a:b7:53:61:60:3a:
12:9f:fd:58:4c:96:2d:ab:f2:3e:a9:d5:94:ef:79:
5a:ec:fd:cc:ce:db:d8:b8:e4:3c:7a:ea:9b:f5:fb:
c4:22:43:f4:c4:35:46:bd:ef:b8:f7:09:a6:63:23:
ac:b9:ba:15:f2:6c:6c:b3:7b:16:bd:67:56:2c:40:
3c:5b:be:e9:3c:b4:cc:18:e8:7a:10:49:9f:2a:08:
61:a9:57:ec:03:c6:c5:a1:ba:6c:35:9e:44:68:10:
7d:db:c2:a6:16:24:fd:60:39:44:70:ac:01:74:11:
e0:c3:f2:0d:ae:c1:20:ec:23:0e:79:19:ba:75:c8:
70:86:5f:3a:fc:2e:da:ab:e0:55:1f:0d:39:be:62:
ba:11:08:ea:66:75:53:61:01:bb:1f:55:11:82:26:
35:c9:32:12:8e:fc:1e:29:a1:2c:5d:6f:e9:25:15:
82:18:3e:17:e9:4c:b6:e6:f5:73:2d:25:69:5d:77:
4a:bc:d3:14:f7:c7:2d:56:ad:46:24:33:b1:67:f4:
27:87:00:04:9c:16:30:be:a2:b1:75:1b:16:b7:77:
20:e0:8f:c2:5f:f3:97:18:5d:a9:8f:66:07:f6:35:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:09:29:20:AD:A8:C3:87:DE:1A:67:CE:B8:CA:F0:70:64:1E:B2:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/40d0a79b-e036-39cb-b622-1328c46312ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:fd:8c:0c:01:a9:3c:26:39:da:e8:53:dd:b6:34:43:bd:23:
61:68:12:e6:04:55:9c:fc:f6:ea:d2:87:91:bb:84:de:fa:ce:
f6:46:97:31:b9:0e:80:b1:17:26:a0:d1:d0:77:41:56:b6:7c:
ff:0d:59:53:ed:ec:f2:b1:08:38:cb:ca:0c:17:05:b9:67:4f:
fe:45:cd:56:79:4d:a1:16:3e:00:30:cc:c4:97:54:47:db:94:
45:5d:fa:18:9e:ff:84:5f:ee:32:1f:9a:f3:6d:7e:86:56:6c:
4f:47:b4:a6:8c:c0:a6:79:8b:b1:fd:2e:9f:18:76:79:53:05:
d9:99:7c:be:e6:d4:4c:6d:b4:3a:93:67:7d:c0:1b:e0:ec:5a:
54:de:ec:0c:de:eb:c2:51:83:26:f1:35:bd:52:38:2a:b1:01:
68:fe:94:65:96:d7:e5:d9:c6:d2:c8:1f:ba:3d:e2:4f:61:3e:
13:34:be:3b:48:fc:79:de:71:b8:46:39:60:3a:65:d7:78:14:
42:64:3f:63:ac:d5:bb:f8:04:1a:a2:47:ef:04:89:85:52:b4:
6d:48:24:24:96:be:90:69:df:68:a3:fa:8d:6e:58:bf:50:47:
8f:6a:08:6a:e9:f3:29:c1:c1:da:b2:1a:a0:2e:94:b9:92:4a:
cd:00:de:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:55:45 2025 by rpki-client