Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7a372e23-7d18-3c50-9901-e4c82045fa1d.roa
File: 7a372e23-7d18-3c50-9901-e4c82045fa1d.roa (raw, json)
Hash identifier: B/u8HLueCmPeThwbZgNPO1txGaPLVeCUr6zD1YWGzm8=
Subject key identifier: 0D:6A:35:2F:5D:FD:45:00:15:27:F2:27:05:51:EC:26:08:7B:DA:C0
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858484EDAC661DAED9A4EFAE79E00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7a372e23-7d18-3c50-9901-e4c82045fa1d.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 62610
IP address blocks: 128.14.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:c6:61:da:ed:9a:4e:fa:e7:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=21e632ae-4a08-4f92-97af-1b9e2b833c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:20:78:b8:7b:aa:e6:c8:72:b8:9a:45:3b:db:
08:ec:29:f5:69:8a:e2:b5:2d:43:e5:50:ee:fa:38:
01:f5:64:28:7d:30:9e:f2:0d:29:5d:08:12:6f:7d:
12:09:96:e0:fc:0e:90:01:db:3f:88:93:9f:83:67:
63:d9:7b:cc:36:29:9f:12:59:c5:51:a2:5f:fa:45:
87:13:59:ae:32:ba:db:fc:42:17:f0:94:93:c2:99:
37:e1:2e:79:9f:9b:b9:3a:b4:e8:a9:57:62:89:d4:
f4:b1:df:fc:1b:20:a4:50:76:1c:2d:11:38:a2:cf:
76:aa:35:2a:10:9d:0d:55:3d:f1:7d:2a:cc:8d:76:
9a:ef:0b:5e:19:39:6a:b0:f6:f4:27:d1:4a:ad:e6:
fd:58:3c:b2:93:95:75:67:97:d5:d1:cd:f0:9c:dc:
ab:30:2c:6d:cf:50:ce:f0:b6:2a:ac:7a:4f:54:0f:
40:e4:6a:4f:05:fb:82:c3:dc:e2:a5:ff:11:ec:14:
7a:31:42:44:38:0f:52:9d:8f:e3:b2:7e:03:3b:4e:
c4:7e:c5:b2:aa:31:21:5d:46:5d:1e:cc:04:11:cf:
69:3c:72:e0:93:5a:4a:02:f2:b2:bd:3d:6c:bf:1c:
a9:24:91:58:61:b6:48:f9:5f:6d:0c:6b:bf:70:75:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6A:35:2F:5D:FD:45:00:15:27:F2:27:05:51:EC:26:08:7B:DA:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7a372e23-7d18-3c50-9901-e4c82045fa1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.14.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:13:80:93:5c:20:88:9d:c8:41:80:55:af:45:24:3a:e8:ad:
1f:ad:22:95:c6:b1:8f:7a:c2:5f:48:9c:80:2e:fc:62:92:ae:
e0:ad:f9:15:dc:ac:e4:de:1b:cd:cb:97:48:8d:50:8b:1e:5d:
9f:f3:b9:4e:39:c0:0e:00:96:68:48:8d:79:ff:01:83:53:a1:
ab:8a:5b:cf:8c:8b:fa:78:a7:33:44:6f:3d:f2:1b:16:6c:24:
16:b9:de:77:b7:cc:fd:5e:e3:a3:45:1b:09:b4:d6:2d:06:d0:
58:ef:f9:74:f6:0c:5a:49:c8:71:15:ce:46:ad:88:ca:a8:d3:
a9:73:e8:f0:f6:64:c6:db:3c:95:77:dc:66:d8:45:41:7f:b7:
6b:a8:25:40:d1:77:b1:fe:c7:8f:62:7f:c8:db:16:75:7e:0a:
b6:cd:c0:74:fc:ed:20:c8:0a:2d:78:45:ff:d7:08:67:d2:5c:
91:9c:33:ad:da:b2:bd:82:76:18:dc:a1:5d:ac:19:c1:e6:ff:
aa:29:e7:4e:0b:b1:8d:bf:f7:04:8e:6b:9a:b5:64:0c:18:83:
f9:5a:56:83:f9:c7:27:92:b1:3b:ce:fc:e4:59:d6:49:fe:10:
b5:5f:4e:39:2e:54:9a:02:46:12:fa:47:41:d3:19:8d:a0:1f:
ca:1d:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:35 2025 by rpki-client