Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6d5b21b9-42dc-3c61-b551-d1b84a8e64df.roa
File: 6d5b21b9-42dc-3c61-b551-d1b84a8e64df.roa (raw, json)
Hash identifier: 1eRIECHKFJl23UbdxNsNrwVf58LMlIAkbZnU4LfGdF8=
Subject key identifier: 1E:34:AE:28:60:6C:78:02:98:6B:31:F4:BE:F1:DE:73:4A:50:95:DE
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858487755CE86CF9E0099B9BC5980
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6d5b21b9-42dc-3c61-b551-d1b84a8e64df.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 21859
IP address blocks: 128.14.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:ce:86:cf:9e:00:99:b9:bc:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=28a6825d-957f-4331-9423-95a2ef2743a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4f:9e:6f:08:ca:2b:82:98:cd:6b:89:d8:70:
d2:f6:b1:aa:db:3a:17:46:8d:a9:cd:9c:5c:a6:91:
15:7f:32:56:28:01:9f:ca:de:92:aa:a6:d1:52:07:
17:96:8a:d5:11:b1:94:7d:10:24:ec:56:e5:7b:d2:
c7:7c:d9:e3:aa:03:3c:39:0c:0c:7f:ed:c2:67:3e:
b3:76:17:18:7b:77:77:ea:b0:aa:c0:a0:d1:c4:c5:
59:ca:83:75:d6:c8:60:1b:e3:85:25:e1:fc:89:e4:
c7:93:ed:00:a1:38:2e:cd:5b:a0:1c:2b:17:e5:22:
c4:c7:22:87:a5:01:10:ea:6c:e5:8d:20:f7:54:db:
9d:8b:90:43:01:c3:b3:40:a4:f5:f4:dd:19:65:37:
22:83:7b:53:d0:d4:c1:8c:15:32:09:6d:4e:62:a5:
a0:48:02:f3:e7:15:8f:58:bc:23:c2:55:3f:02:1f:
26:25:29:e2:2f:c1:6a:55:02:61:97:9a:22:43:20:
2e:c3:a5:4c:88:57:00:b6:e3:dd:f5:69:19:2b:e0:
fb:10:6b:cc:4f:55:e1:0e:10:37:1f:da:74:98:12:
c6:93:3d:57:3f:49:b1:c7:99:f5:ab:31:0b:14:5c:
fa:43:59:75:59:ee:37:3a:21:70:07:6c:01:d2:a2:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:AE:28:60:6C:78:02:98:6B:31:F4:BE:F1:DE:73:4A:50:95:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6d5b21b9-42dc-3c61-b551-d1b84a8e64df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.14.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:13:ae:26:a9:7e:6a:36:c3:53:33:4a:73:3b:9a:a6:eb:a1:
77:65:ac:44:9d:7e:f4:c8:a1:aa:c7:53:94:ca:29:15:1b:c6:
5b:bf:a5:4d:f1:24:ae:98:8c:fb:35:77:26:fd:1f:28:fc:94:
62:2e:49:a5:6d:77:e5:c0:b6:3c:75:7a:f8:eb:f7:24:8d:2d:
4a:d2:0d:bf:79:7a:96:5f:4f:f5:e2:8c:22:cf:5d:bd:34:88:
0b:f3:70:20:3d:83:96:cf:47:39:2d:ac:22:94:c6:3c:04:88:
41:ba:8c:27:40:51:62:d7:da:9c:56:16:0d:85:0a:5c:70:ff:
6c:f3:c6:72:3f:c6:d1:9b:2b:29:bd:81:c8:e6:ca:4c:df:37:
39:83:c1:6a:3f:a2:e4:3e:fb:f3:c2:e8:5d:d5:32:0e:22:9d:
43:14:a9:89:2d:f4:c7:85:a5:22:16:f6:74:d9:a3:a8:e1:d5:
1a:8a:e6:63:31:af:c8:c9:06:7b:b3:01:c4:a5:47:9f:b2:e0:
b1:2a:e5:b8:77:55:42:68:5d:1f:78:16:9c:f1:40:b8:40:9e:
27:4a:42:66:f2:4a:de:c9:d2:8f:18:e7:bb:ef:5b:be:e2:73:
fc:c5:89:42:11:2c:0b:0f:27:2b:58:85:59:fa:06:b7:8f:a8:
d9:ed:3e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:21:04 2025 by rpki-client