Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa
File: 4733c78a-74b2-36ce-8265-e75f07c9798e.roa (raw, json)
Hash identifier: qrBHp2WQV3mKX2ZKTl3lk1pT8SUyPyUH60TeLoYww2Y=
Subject key identifier: 50:AB:C3:A6:50:CE:3D:0B:1D:88:60:EB:C6:0C:D4:43:02:40:53:C6
Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Certificate serial: 010D0C9F43285848159FE11FA8450E9E3F5D5D80
Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 16509
IP address blocks: 192.175.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:e1:1f:a8:45:0e:9e:3f:5d:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=27ddc164-9fd1-4c87-b80d-75af2e695611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:31:3b:77:cb:62:11:47:5d:d1:18:ec:c3:
94:fd:8f:35:64:9d:2d:80:b1:62:7b:41:e8:ab:92:
23:da:7a:f4:55:a1:d8:b4:2d:c9:fc:ff:f7:39:94:
cf:93:34:b8:68:36:91:c2:56:4d:14:76:48:d9:2c:
d6:9d:6c:e0:19:84:05:e1:20:f8:eb:b3:67:c9:4c:
68:56:60:45:66:e0:7b:48:7d:c3:16:5b:d8:5b:c2:
54:1c:77:a6:1b:67:69:ad:98:86:f2:81:fa:18:df:
b7:67:2f:3f:f5:aa:19:71:f8:66:0c:5b:30:48:60:
87:2a:79:cb:65:bb:f3:32:35:e4:9b:f1:00:18:dd:
eb:82:59:45:a8:25:aa:79:a0:f1:60:6d:86:74:cc:
e6:7a:39:3a:42:c6:f2:2b:28:46:d4:46:4b:33:cf:
2d:b9:8b:b6:08:7a:40:df:62:67:5b:ee:c9:54:5f:
eb:1b:30:eb:8b:5b:2c:89:0e:82:4f:bf:e0:38:36:
72:e8:65:08:e3:e0:f1:c6:4e:56:2b:41:ab:b8:6b:
78:9a:27:37:57:a4:45:da:29:dc:d7:e8:64:f5:0c:
59:c7:eb:04:9f:41:bb:bf:84:98:e0:22:70:24:4f:
b0:b0:c7:be:b9:f3:d2:6d:ae:d9:21:95:72:31:17:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AB:C3:A6:50:CE:3D:0B:1D:88:60:EB:C6:0C:D4:43:02:40:53:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl
X509v3 Authority Key Identifier:
keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.175.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:12:30:d4:e7:29:ed:ff:08:e2:57:4b:14:d5:e0:bd:f1:b7:
a4:d6:4d:16:66:1b:87:ea:2e:58:8a:99:1d:79:d8:23:24:a8:
7a:65:f7:9a:2b:b3:68:55:f3:70:b9:f8:87:69:57:b1:f9:46:
dd:0f:c2:af:63:af:56:ac:8b:b5:e3:4d:34:fb:34:fc:64:1e:
ed:35:23:9a:99:51:45:ef:3d:b4:48:3d:f6:61:40:70:a2:69:
87:77:c4:b3:0b:6c:3a:ce:67:63:a2:8f:ac:43:ba:2a:75:ed:
af:15:df:2f:d2:54:5a:02:ee:fd:2b:fb:e2:d2:9a:63:d1:96:
77:b7:7a:a2:56:06:28:d0:fa:b5:da:d0:93:96:26:7e:38:5d:
da:96:c7:6c:31:a7:32:fd:98:0c:34:16:6b:2a:63:23:96:53:
9b:a0:31:d9:d3:45:90:61:4f:ec:9f:e8:9d:26:be:43:8e:2e:
a5:e7:2c:92:be:d1:55:9a:00:99:a1:f7:91:56:fe:c8:ad:7d:
eb:6d:a7:54:f1:d6:ae:18:2e:82:e1:5a:3a:5a:35:5c:08:8b:
3d:d3:27:50:a0:0f:93:e3:07:9d:b5:6e:e8:17:d2:6d:02:e2:
2a:f7:b4:d8:d0:79:1d:fd:f0:09:40:21:31:74:08:d7:81:bc:
64:e1:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:14 2025 by rpki-client