Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa
File: 25438931-47eb-3745-8de8-a5736ce96be0.roa (raw, json)
Hash identifier: 2Oe81LN9zPfiim+RQ4X7FJAFvClklddVJcuIUggX6I8=
Subject key identifier: 3E:A8:31:21:78:97:CD:CB:2C:95:AC:74:B2:47:95:13:3F:47:C7:33
Certificate issuer: /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial: 010D0C9F43285848100A8C04691A26FCBCDCB540
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 30148
IP address blocks: 192.88.134.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:8c:04:69:1a:26:fc:bc:dc:b5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=3bfd3947-bf47-4546-beb2-1e0ddd80d079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:49:b2:29:0a:23:49:cd:d2:f3:b9:1c:51:
85:4d:64:b5:a2:a4:25:80:dd:73:bd:0d:0b:d1:92:
4b:e4:0d:88:24:0b:83:d9:2c:f3:76:cd:3e:72:8d:
f3:54:52:6e:8b:e2:c7:ba:88:e3:47:2e:b1:99:af:
78:be:b0:44:44:44:70:97:53:0d:98:3f:42:64:cd:
d9:06:c1:82:8d:b3:66:0d:8d:b7:44:f9:83:34:17:
24:32:a5:8b:e3:fa:5a:33:9c:26:75:ca:17:4a:a5:
23:df:5a:52:6e:bf:67:4d:20:8e:ca:c1:79:e5:6b:
c9:c0:af:0f:18:6d:2a:d7:3b:54:cb:ca:70:b4:69:
43:8d:1e:e9:17:f6:ce:92:01:b4:f4:17:0d:21:d1:
f7:e2:3a:f5:01:81:09:d9:25:de:63:a2:61:05:49:
a8:7c:fe:41:f5:06:ac:04:4f:ca:b6:8f:5b:e8:27:
ce:63:b8:ee:d2:ec:e6:8a:a5:6c:66:7d:11:4a:e5:
d9:ee:6d:93:af:7f:60:4e:b7:08:c1:59:66:fb:35:
bb:9c:97:de:57:78:68:62:0f:fc:a6:51:a1:ed:79:
bd:63:ea:b1:42:7d:97:6a:48:b8:4c:eb:83:92:f3:
da:d2:fc:35:ab:65:7c:34:f4:a1:e8:10:3d:dc:dd:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A8:31:21:78:97:CD:CB:2C:95:AC:74:B2:47:95:13:3F:47:C7:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/25438931-47eb-3745-8de8-a5736ce96be0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl
X509v3 Authority Key Identifier:
keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.88.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:56:dc:a8:8a:4c:29:67:85:72:4d:6e:69:13:19:74:6b:c4:
99:0d:7b:b6:f1:f8:ac:e2:54:60:b6:91:8c:53:44:ba:45:f2:
e6:ba:7f:d3:29:1d:5f:2f:5e:3c:66:ff:57:e7:bb:9a:c4:83:
0e:3d:7a:a1:04:92:ec:c5:71:5f:3c:c8:8a:ed:5a:76:46:9f:
53:7e:10:4d:be:54:82:f0:be:a7:a6:cb:c3:19:20:55:63:a9:
6f:de:0f:3c:d1:ba:2d:cc:64:af:e7:3d:94:0d:17:7d:86:e8:
c7:02:db:0b:6a:18:24:db:21:e8:fb:4e:ef:5d:fc:64:03:2f:
ef:c8:71:6b:d8:d4:45:bc:b2:04:b1:0f:79:f1:32:58:62:46:
aa:18:68:1c:3b:c2:cc:34:f7:ec:e7:d2:bc:db:b9:b9:72:87:
a7:26:07:4a:ff:9f:f3:c7:0a:e2:72:9a:eb:4d:09:1a:2e:c1:
61:65:38:56:3c:e1:f7:f5:fa:1c:84:61:75:dc:e3:51:c3:4d:
30:64:c6:37:d6:99:4a:be:51:92:18:c8:eb:6a:59:0c:51:6a:
8c:54:e7:06:8e:ef:d0:35:c1:06:66:3b:c3:e2:96:7a:9f:8d:
b0:db:6a:8a:d2:5c:79:be:29:2e:6b:6c:a0:e1:b1:87:2f:10:
c9:8d:69:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:38 2025 by rpki-client