Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/da97c974-1728-31bd-91cd-689b5712cf39.roa
File: da97c974-1728-31bd-91cd-689b5712cf39.roa (raw, json)
Hash identifier: 4rijqE9m8Ec7A18QMjcU1DoO8jVgRuqCbpqjrIUBe8c=
Subject key identifier: B6:99:0F:14:07:27:9B:97:2C:0A:69:03:72:63:E3:BA:61:BB:6E:85
Certificate issuer: /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial: 010D0C9F432858486D9058FDC4A6D3C3E0DD64C0
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/da97c974-1728-31bd-91cd-689b5712cf39.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 3464
IP address blocks: 192.35.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:58:fd:c4:a6:d3:c3:e0:dd:64:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=16780dc2-f202-4eec-b5d7-f147199a7bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8b:b7:8a:6a:31:8c:1b:2d:3c:a2:53:88:e1:
28:1d:79:b2:86:f2:70:a6:4b:36:de:e5:9a:83:b2:
32:55:9e:cb:17:3e:65:d2:fe:fa:fd:f2:e0:85:73:
97:53:7a:e2:1d:d3:aa:2d:49:f9:28:1b:61:23:09:
30:e9:e9:5c:9f:81:6c:0c:3c:6c:e2:04:8d:64:a0:
4a:a6:f1:d7:c4:0b:ff:94:0a:72:b4:46:34:02:51:
b3:77:c1:a6:d5:7c:1d:33:81:aa:a2:ea:7c:5f:96:
8e:79:66:34:ff:f5:fd:f2:e8:08:b4:68:74:46:c4:
a8:52:97:73:7a:2c:0d:8f:43:96:86:94:99:86:b2:
fd:aa:a9:86:c8:c4:a4:90:5e:ee:f1:a8:c1:8f:98:
84:3c:28:1c:c6:f9:dc:05:e4:00:5f:86:08:a2:9e:
24:bb:52:b7:10:a5:37:de:43:1f:c3:7c:97:b2:a2:
69:22:44:88:1f:e1:80:9f:5a:59:c1:49:10:72:ff:
82:53:9d:8c:b9:88:49:8f:53:de:4e:f7:a2:c0:a7:
c6:6f:b6:19:9f:b9:a0:c9:48:e1:8b:4d:6b:95:2e:
a2:10:93:ba:ea:8e:c8:72:2c:23:37:87:0a:84:be:
c7:0a:de:c7:3a:4a:30:a5:0f:a1:10:3e:3a:a6:54:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:99:0F:14:07:27:9B:97:2C:0A:69:03:72:63:E3:BA:61:BB:6E:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/da97c974-1728-31bd-91cd-689b5712cf39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
X509v3 Authority Key Identifier:
keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
sbgp-ipAddrBlock: critical
IPv4:
192.35.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:71:c0:63:27:f0:5f:81:a7:cb:2a:f2:64:9f:e7:69:35:f7:
81:1f:f6:de:90:60:d0:26:b6:87:95:ab:26:2c:32:1f:c5:a8:
be:cb:ab:1d:df:0f:ee:1a:af:9f:17:75:f3:2c:48:f5:d1:a5:
39:26:3e:a0:7f:f6:2d:19:e3:a0:a0:f1:5c:38:03:eb:32:69:
6b:df:7d:9a:59:47:78:20:e3:c3:13:e9:19:d8:75:ea:ad:37:
3b:08:e6:f8:ff:86:e3:18:e5:7a:9e:b4:e7:3d:cc:a4:d3:72:
37:52:8c:01:05:40:87:20:75:b7:9e:7d:80:77:3d:a8:9e:bf:
63:33:5a:e0:1b:9f:4b:f2:68:b2:6e:64:71:68:e0:20:0a:bc:
2f:8a:5c:a4:ce:55:9a:1f:25:bd:25:d2:8f:1b:86:18:16:f9:
29:27:72:02:95:c3:dc:8d:d8:73:d4:90:85:51:fb:39:a0:8e:
76:fc:74:97:46:82:24:5f:e8:c1:a2:21:58:af:0c:2b:1e:8f:
53:00:16:83:d1:08:bf:2b:00:79:70:f4:c9:bd:e1:af:fa:e0:
f2:22:ef:62:e4:c2:ae:8b:df:1d:be:72:6b:c9:88:c4:92:8f:
b8:83:d3:89:09:a2:be:fe:25:84:5d:a4:ff:71:df:7c:1c:a4:
f5:e0:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:04:42 2025 by rpki-client