Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5cc89a6a-7476-3628-be46-ec6015c8c7d9.roa
File: 5cc89a6a-7476-3628-be46-ec6015c8c7d9.roa (raw, json)
Hash identifier: 4BMFc553MO7QPix8aF+qACaQ12QXtlktZTpCoiTfOII=
Subject key identifier: FC:E0:2E:4F:E6:1A:9A:00:71:AA:11:39:8F:EF:C6:3E:E1:10:53:69
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C3144320D6064F56A5280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5cc89a6a-7476-3628-be46-ec6015c8c7d9.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 128.109.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:31:44:32:0d:60:64:f5:6a:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=97653f37-be02-4435-81a4-f9e0a587c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:1e:15:5d:46:75:2f:54:e3:40:16:aa:9d:
d4:9d:8e:4d:6f:56:91:71:ce:9e:b7:e3:2c:d8:cd:
24:24:d2:7f:3a:d4:93:3b:5f:2c:1b:a6:e7:70:c0:
e9:65:36:d2:21:30:54:8f:22:e9:40:9e:24:b9:90:
a1:04:a1:bb:e6:ba:a3:1c:a6:5b:03:01:38:0b:c0:
b9:df:a7:4b:9f:3a:32:db:94:e6:b1:a0:5c:26:81:
b3:17:9b:c3:06:c6:b6:b4:2d:f4:29:29:fb:3e:48:
ca:5b:3f:5e:b9:f4:66:d2:5d:68:83:88:29:f1:f2:
ec:da:55:90:ba:29:57:54:9b:47:62:6f:50:4f:d3:
0c:b4:7b:99:3a:30:cb:74:ae:d6:82:ac:37:cf:95:
15:f3:60:f8:b9:f6:16:33:00:a2:f2:36:2f:11:a9:
0b:5f:a1:57:66:c7:88:2a:32:91:b9:c3:59:e5:06:
e4:2a:01:73:8a:1b:fd:84:c3:88:9f:6b:55:dd:98:
c8:5e:49:d6:f3:79:62:41:e2:84:6b:21:37:50:90:
31:d0:23:45:05:56:ce:7c:20:93:55:72:e7:e8:87:
75:23:83:8d:27:ef:02:48:f7:f6:43:bf:26:bc:a3:
5c:86:38:b1:40:c3:c2:b9:fa:e4:e2:df:0d:a6:2b:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E0:2E:4F:E6:1A:9A:00:71:AA:11:39:8F:EF:C6:3E:E1:10:53:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5cc89a6a-7476-3628-be46-ec6015c8c7d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:6e:96:6f:2b:4c:1b:df:8d:60:8b:ce:a8:db:e4:32:62:0d:
32:fc:6a:f4:ec:84:34:13:91:03:16:29:23:5e:cc:64:c0:24:
3e:d9:e1:4e:e5:a7:b8:53:2d:17:56:df:d5:f3:d0:4f:c4:24:
2b:aa:cb:b8:90:b2:50:82:26:e8:95:5f:a2:4b:ee:9b:47:15:
dd:af:2e:b8:d1:10:38:e7:c9:a2:60:83:76:f9:47:ff:f1:e5:
56:8c:fe:0b:98:67:55:61:d6:57:2a:e6:d8:13:d8:07:20:b1:
5f:68:96:8a:48:d2:20:ee:01:66:31:07:48:6b:d2:24:23:10:
c6:05:83:a9:84:2f:13:80:02:21:3f:f7:ba:90:cd:08:e6:95:
1e:53:46:43:2b:ab:a6:87:ff:62:32:cd:62:83:0d:0d:b7:7f:
c8:c1:a4:e8:a8:f1:55:ab:3b:3c:fc:ab:e2:4a:3e:6e:88:6a:
0c:86:26:9f:21:4d:eb:2f:8e:1f:9e:69:2a:dc:58:a1:36:d9:
50:40:13:1c:30:13:7a:15:53:80:65:09:ce:38:f6:34:6c:30:
30:26:99:28:03:3a:f3:47:4f:b9:93:91:e1:d4:06:8a:b2:55:
96:5b:f4:f9:41:5f:62:10:9d:42:8d:58:54:67:58:26:44:55:
97:72:db:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:12:28 2025 by rpki-client