Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa
File: 6bb9aaee-b794-32ef-9cbe-5db764601630.roa (raw, json)
Hash identifier: XrndEIi2ZhUzUq8SDHB264zJxPNkT6PwJidLyffJ5Y0=
Subject key identifier: 24:BC:90:87:B6:CE:5C:1B:53:38:82:1B:AE:69:AB:9A:BD:40:BB:1D
Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Certificate serial: 010D0C9F432858480EA50DFAF4E4BB36D35898A0
Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 192.190.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:0d:fa:f4:e4:bb:36:d3:58:98:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=041b3f39-aaf4-49de-8edc-f9de119d671f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:65:4e:36:00:30:c9:4a:91:a2:71:8b:cd:
cc:7e:16:51:15:ae:58:ab:f7:a6:d0:a7:f8:d8:5c:
43:b8:be:88:ae:1e:94:51:f1:49:96:37:1c:ff:5b:
59:c9:be:50:3f:ee:22:f1:98:92:ca:23:4d:72:36:
b2:b5:d9:2d:b5:a0:09:88:0d:18:9e:2e:f9:0f:42:
ed:27:a8:21:35:e7:ce:6c:1d:be:76:6f:fc:4d:91:
b7:f0:b5:2b:14:be:04:70:e6:e6:93:f4:31:83:04:
ca:30:7d:78:d1:48:96:c5:87:48:34:1b:7e:07:f1:
87:46:8c:4d:16:fc:16:e6:b0:17:11:50:e6:c2:7c:
cb:0d:d1:ba:b3:80:57:bb:61:30:14:be:ba:fd:65:
aa:78:40:4f:63:f6:b2:e4:7f:a3:25:a9:72:a6:b1:
dc:66:95:d4:48:94:52:58:66:48:a0:14:d5:64:e5:
89:6d:25:2d:1d:b4:7e:58:a4:d3:2f:b0:c7:79:c0:
36:65:95:7a:d1:a6:43:c9:36:09:a3:2f:9b:86:bf:
3a:f2:54:ca:fb:66:4a:d7:dc:96:03:5e:b0:c0:fc:
b5:53:e5:13:29:ec:ac:37:5f:19:b6:4d:21:4f:9f:
ea:ab:51:46:05:a1:71:61:c9:7b:82:e4:28:97:3a:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BC:90:87:B6:CE:5C:1B:53:38:82:1B:AE:69:AB:9A:BD:40:BB:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl
X509v3 Authority Key Identifier:
keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.190.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:74:7a:cc:cb:20:00:d2:c1:7f:ec:38:61:22:f9:66:9a:b4:
3f:ba:f3:d1:45:4e:69:ac:26:de:5f:11:8b:a9:d1:85:d1:b3:
29:6d:7c:cd:d7:06:1c:5f:64:3a:92:d8:09:e3:20:42:be:98:
a2:fd:d4:05:df:f0:aa:6b:f2:2c:6e:b7:33:a6:e2:9f:10:2f:
a2:18:0a:14:f0:e6:72:14:e8:a3:9b:6d:26:d6:fc:a8:41:d3:
09:20:20:1a:c8:ed:70:2b:cc:47:43:b8:b0:aa:f2:9f:91:2b:
e7:b0:46:67:4e:be:99:ce:42:57:e4:fe:10:82:3c:4c:8f:45:
9e:54:1a:ca:82:4b:05:5c:d3:c5:16:10:0b:d1:bd:b2:01:12:
b9:e4:58:1d:0d:b1:bd:88:19:d0:cf:8a:66:fc:2f:1f:9b:1a:
13:fa:3f:41:e0:dd:5c:ac:76:44:26:01:01:fa:97:b7:4a:97:
84:2f:92:8b:ff:43:f7:ed:82:04:36:17:33:be:5c:b4:1e:e6:
1d:9f:41:53:d3:e6:ce:8e:3c:5f:a9:78:69:e8:35:0e:1f:8d:
43:94:de:5d:57:0f:9e:55:60:3c:98:43:71:fb:48:37:e2:cc:
98:a1:a0:78:bd:bd:06:ca:b6:2a:ed:51:54:36:97:d1:07:a0:
fa:27:42:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:33 2025 by rpki-client