Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3381fe2-caf7-3c04-836e-c630076da29a.roa
File: f3381fe2-caf7-3c04-836e-c630076da29a.roa (raw, json)
Hash identifier: 9MNKfr/tkNcVVupZPTDte5pISsAu+WIJboCuF88b7lg=
Subject key identifier: 30:C3:9E:DE:B6:BF:79:6C:26:07:01:AF:62:00:D9:8A:EF:03:5E:B5
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285848617C31CEFB3D8738016B9B00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3381fe2-caf7-3c04-836e-c630076da29a.roa
Signing time: Mon 30 Dec 2024 18:10:32 +0000
ROA not before: Mon 30 Dec 2024 18:10:32 +0000
ROA not after: Sun 30 Mar 2025 17:10:32 +0000
asID: 81
IP address blocks: 128.109.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:61:7c:31:ce:fb:3d:87:38:01:6b:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Dec 30 18:10:32 2024 GMT
Not After : Mar 30 17:10:32 2025 GMT
Subject: CN=a8f10783-4fe4-4256-b044-24f7615abd21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:fb:31:f7:57:f0:09:b6:7e:19:a3:eb:43:
c5:12:b1:67:44:4b:5c:6f:62:a3:f9:6d:fe:a8:c0:
ba:4a:02:21:3d:57:47:70:69:44:8a:5e:c8:66:bd:
25:49:33:a0:1f:81:9d:73:74:be:e4:60:2e:d2:9a:
27:33:93:2b:e4:3c:06:14:f7:8b:fa:8e:0f:e6:d8:
06:a3:0f:49:99:93:1f:c3:ed:17:cf:80:8f:07:9e:
3a:75:43:d6:25:f5:e8:0a:84:7d:d5:70:8f:2c:7b:
3d:89:b9:6b:95:e6:8a:9d:85:62:f4:7d:0d:73:76:
bd:75:21:80:a7:c2:4c:51:87:c2:f7:9c:ce:a7:02:
30:5a:7b:4a:1c:a7:09:9c:42:49:82:a7:96:9c:9f:
52:62:43:24:77:3e:24:31:f2:23:fa:e7:5b:49:67:
d9:69:cd:19:c2:3a:08:33:ad:38:d4:f7:87:71:ef:
d6:4e:b1:a6:c0:05:4f:c0:64:42:52:29:c6:5e:f0:
49:75:d7:e6:84:c3:5b:f0:73:c4:be:1a:17:c7:3d:
78:bf:14:49:cd:a7:b6:3f:10:4f:40:6d:a9:eb:55:
e8:6c:fe:5b:43:95:15:28:d5:99:c6:fe:bf:79:77:
91:7c:e9:25:ae:4d:b4:2a:1e:9b:17:84:25:19:98:
cb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C3:9E:DE:B6:BF:79:6C:26:07:01:AF:62:00:D9:8A:EF:03:5E:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f3381fe2-caf7-3c04-836e-c630076da29a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:3c:33:ca:95:d9:1d:b4:94:e7:25:47:0b:07:3f:fe:99:b6:
16:24:7b:cb:8c:53:35:3c:86:0d:4a:f8:bc:a2:34:0d:85:d6:
04:f2:31:bd:2e:94:44:d8:4c:e0:8a:6b:ce:63:30:dc:31:3b:
99:fb:f0:65:28:b7:20:06:37:16:63:81:e3:a8:67:25:07:0e:
d8:22:f8:1a:11:db:4f:6e:39:3c:c9:00:00:0e:4c:13:98:83:
ae:47:6b:18:8a:24:ea:39:fd:a3:94:84:2e:1a:1b:6e:12:5d:
39:81:f2:6f:8e:db:d3:97:4c:cd:a9:74:07:f9:08:4b:eb:8e:
4b:57:1f:65:53:04:c0:89:0e:ba:08:c8:d7:f9:d6:91:ff:b0:
7c:5d:4e:ae:ce:6b:fe:b2:30:be:a1:1d:81:34:c7:f1:79:55:
f9:9f:56:7f:56:d4:3c:d4:51:8d:bf:43:7c:8b:64:55:c1:27:
c7:8a:ad:12:9b:7c:91:6b:c9:09:ca:0a:0a:e1:1f:49:b2:42:
c5:f8:0b:73:33:7a:28:8b:2a:86:dc:29:13:70:f6:da:1a:70:
cd:bb:10:10:b3:b3:d9:52:bd:75:92:1d:e4:b6:c6:c7:85:5c:
c7:ef:31:05:e6:6f:43:07:57:c4:0d:44:2b:52:28:db:cf:b3:
08:57:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:52:27 2025 by rpki-client