Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/657b94db-a341-3d2c-8f55-d79aa31e7e18.roa
File: 657b94db-a341-3d2c-8f55-d79aa31e7e18.roa (raw, json)
Hash identifier: J5Pb2trI6LF78DkoqPN1vreQx90X4wE357C+6uoFniM=
Subject key identifier: 2D:6E:21:C7:0B:20:45:FA:FF:DC:4E:EB:21:C0:60:47:32:A4:59:74
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C31A767C8634D1FC70A80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/657b94db-a341-3d2c-8f55-d79aa31e7e18.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 128.109.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:31:a7:67:c8:63:4d:1f:c7:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=112ee5dc-557d-44f0-9169-a962f8e758ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7d:c0:95:77:85:6d:16:b7:68:ba:d9:85:60:
bc:f4:d8:9e:87:a9:24:b6:ef:65:8d:34:7a:77:71:
14:6e:fe:67:f3:b0:cd:72:a8:02:cb:4c:2a:7d:7f:
df:41:d3:22:f7:45:05:a1:90:d4:dd:34:05:7e:a2:
e9:bf:e1:f6:3e:91:5f:7c:be:e2:de:94:89:75:70:
0f:bc:bc:b6:2d:f2:f4:96:9a:54:89:d7:74:ef:a5:
02:55:31:6a:4f:a9:6c:e1:a8:44:d4:4c:6d:74:b5:
91:98:f1:0a:74:17:f8:58:94:76:cd:ba:7c:96:c8:
5b:ec:21:10:11:b9:9e:ad:a2:48:4c:e6:ae:16:11:
3b:f5:46:97:66:0b:bd:5b:0d:7e:04:79:f9:3b:b2:
af:96:92:02:66:ef:66:21:d1:48:2f:5d:6a:e6:d7:
2f:ab:d4:00:b0:81:0b:e1:73:f2:8d:a2:dd:e7:46:
79:ad:0d:a2:e5:a1:39:0e:0c:91:b4:9a:be:6f:68:
e7:ed:e7:89:a4:68:3b:62:82:44:7a:63:0e:e0:21:
d6:90:dc:27:d2:45:83:49:db:61:97:39:16:18:39:
3c:23:cc:c7:f0:0b:03:c2:0c:ca:97:2c:bc:b3:38:
f7:46:d9:58:25:7c:24:a9:02:a1:49:29:9f:01:d8:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6E:21:C7:0B:20:45:FA:FF:DC:4E:EB:21:C0:60:47:32:A4:59:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/657b94db-a341-3d2c-8f55-d79aa31e7e18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:e2:cb:9e:29:19:f7:d3:84:b6:c2:7d:6e:9d:32:ff:16:26:
8f:5d:1d:d3:e0:ef:c7:53:c0:eb:47:fd:28:9c:91:5b:8b:65:
76:ca:e3:59:76:d6:61:fa:89:82:dc:87:8f:64:d8:7d:06:d6:
b0:47:e4:04:67:e4:e3:81:9b:7c:f8:74:cb:f3:94:87:53:a3:
86:ff:45:53:42:2d:da:2b:77:58:b0:76:c4:a9:5c:90:ee:79:
70:83:00:d0:21:10:84:8e:da:e4:e8:e6:b0:db:69:0e:a6:95:
1f:31:c4:64:e5:b0:be:7b:a8:9e:bd:4f:a3:55:ca:31:08:e8:
f1:cc:1a:b0:f6:e6:7e:f0:62:41:ff:e8:39:4f:0f:b3:94:dd:
98:76:97:28:af:ff:30:f2:45:8f:1f:83:cd:7d:78:33:4a:08:
7a:3b:12:14:15:aa:2f:08:cf:11:bd:32:be:87:9b:ae:0c:92:
30:81:ed:7a:c0:bd:64:a7:8e:37:17:22:e4:50:f0:3c:2b:3a:
bd:da:ec:25:2f:f1:9c:46:0e:fd:72:16:21:f4:fd:8b:26:d9:
2c:ac:a1:61:d9:98:3a:60:02:c7:39:5b:6f:51:5e:7d:28:dd:
ed:06:f1:55:4a:5c:9e:79:b5:7b:3d:9f:b9:84:cf:32:79:d6:
9a:c9:15:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:49 2025 by rpki-client