Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/aab26e30-65cd-3f5a-9f04-11ae3336ae1b.roa
File: aab26e30-65cd-3f5a-9f04-11ae3336ae1b.roa (raw, json)
Hash identifier: KuGuqscFyu5+Qg5/+CMpYk45STm1YT64/XwS+XPTZ9c=
Subject key identifier: 44:EE:C9:65:22:BE:A2:3A:41:3A:01:95:05:CA:AC:27:60:0F:2F:A2
Certificate issuer: /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial: 010D0C9F432858484EDAD123B5FB1C43CD58CA40
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/aab26e30-65cd-3f5a-9f04-11ae3336ae1b.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 1742
IP address blocks: 192.54.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:d1:23:b5:fb:1c:43:cd:58:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=89aab1f6-087f-44e3-a6af-0df87f1267e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:73:8b:ac:05:cb:9f:b6:54:ed:2a:8a:83:36:
64:2e:d8:52:1c:3f:4c:4c:62:f2:cf:7e:27:93:f1:
28:b7:08:de:bf:f9:7b:35:35:1d:03:d9:16:c3:97:
e8:3d:dc:d1:c1:f4:a2:54:df:e2:fb:f9:31:4c:39:
9e:68:37:d2:8e:d9:fb:27:0c:50:3d:27:9e:c8:39:
82:27:02:fb:71:67:64:0c:ea:97:c0:b2:8d:42:a0:
78:0f:26:0c:b1:f2:d3:be:e6:e7:72:d3:de:07:bb:
b2:9b:9e:c7:4e:57:58:0e:85:71:b2:e8:7c:57:41:
e7:1e:1f:c3:07:f8:dc:24:53:c2:6d:c7:88:4f:9b:
1d:5f:51:a1:de:50:c3:57:27:e6:11:7f:38:a0:2a:
24:fe:fd:b4:83:24:8a:1b:8a:6b:30:80:eb:8a:a5:
8c:19:9a:7a:e1:fb:4d:43:c7:06:9e:2e:19:83:85:
db:9c:64:e1:7d:31:6b:e9:32:3c:ed:b1:34:cb:7d:
b4:ce:ec:67:0a:ea:d3:e9:0e:25:5b:4f:9c:04:41:
99:b6:81:c6:07:d4:c2:d4:3c:e9:18:0a:3f:17:da:
aa:ed:7b:ab:49:d2:15:b7:0d:ae:94:24:84:71:bd:
d5:4a:35:7a:b6:21:e0:e3:7d:27:10:bf:bb:6f:55:
64:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EE:C9:65:22:BE:A2:3A:41:3A:01:95:05:CA:AC:27:60:0F:2F:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/aab26e30-65cd-3f5a-9f04-11ae3336ae1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
X509v3 Authority Key Identifier:
keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
sbgp-ipAddrBlock: critical
IPv4:
192.54.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:4e:fc:78:17:31:21:c6:f4:65:8d:45:9e:94:86:6a:72:4a:
48:da:82:ac:c9:8a:fc:e8:e0:1d:eb:1e:c5:5d:05:fb:51:13:
21:3b:a7:01:2d:9f:2d:c3:89:d9:b9:b5:17:ca:04:d8:34:51:
18:52:bf:3d:ea:56:ad:86:8f:bf:2f:1a:98:96:3c:1f:64:01:
ee:57:b9:7a:04:cf:34:f4:b5:82:4a:a2:71:70:31:ae:fa:24:
f1:ab:d9:d0:73:4e:61:fb:b7:cc:5a:74:d9:1e:93:f3:52:a7:
c0:59:f0:67:ab:a8:e4:fc:08:af:59:40:40:3e:3d:c9:d3:c6:
d5:50:36:cd:80:33:2c:e7:04:60:d4:06:c7:f0:8a:92:f3:66:
0c:2a:60:4b:43:01:c0:25:26:90:85:5a:1b:57:10:63:ee:1e:
56:fe:fc:51:ac:f7:11:f9:54:0d:96:d3:80:91:96:2f:a3:b0:
5d:45:b5:99:0c:9a:3e:1f:c0:d8:4b:a8:36:12:ad:26:dd:1d:
dd:6c:ec:ac:95:a6:ad:f4:73:a8:0e:22:a1:4d:a8:a4:54:93:
01:dd:8c:53:08:ff:a2:2c:96:ec:04:3b:46:b4:6f:26:13:ff:
f1:56:bb:ca:51:fc:c8:a2:ef:b5:f2:04:ad:3f:07:6f:80:98:
df:70:e1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:27:18 2025 by rpki-client