Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa
File: d8561cc0-42de-398c-82a6-2cae487ec735.roa (raw, json)
Hash identifier: aWruCA4lrfHkN9dWeJh34oXg76SGL/htjJyTykYzcwA=
Subject key identifier: E8:1D:6C:B9:B7:40:D2:96:8A:D1:AF:AF:D6:6B:57:DA:8B:92:DD:7A
Certificate issuer: /CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190
Certificate serial: 010D0C9F4328584812D52DE62213E43FA4D09100
Authority key identifier: BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 18863
IP address blocks: 64.28.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:2d:e6:22:13:e4:3f:a4:d0:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=00443f21-3cdb-40af-a5e5-242f16f0f9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:5c:3c:8f:f7:69:78:05:dd:0d:00:55:06:
cf:5d:aa:db:7f:f0:bf:af:0d:76:ca:4b:64:f4:fc:
6c:a0:92:7f:a6:53:48:bd:c5:19:eb:d1:66:08:52:
04:e5:d4:f4:12:57:50:8f:ef:76:08:76:aa:d4:3b:
3c:6e:b7:23:70:16:21:2a:52:03:cb:88:87:18:ac:
52:25:b8:64:fc:3b:06:11:a1:07:61:69:2e:2d:24:
26:b6:ab:33:09:8b:da:dd:c1:14:09:57:9d:d4:62:
f3:fd:d2:db:c9:1a:c4:6e:c6:af:35:06:c8:69:57:
26:c4:96:7b:3b:a7:31:70:dd:49:f2:d4:87:e0:88:
c8:2c:25:02:81:e3:27:dd:ca:23:24:cd:0c:e2:6f:
2c:cc:db:28:ac:15:86:e1:fb:16:e9:01:db:05:4c:
c9:90:bd:4e:ea:ae:28:c9:55:a5:85:b5:3c:a2:a3:
a7:04:98:a5:dc:04:4b:67:08:3c:65:ac:8d:2f:11:
d9:dc:22:25:b3:7b:3b:18:76:aa:25:a0:1c:48:0c:
e3:3d:8c:b5:de:61:df:29:1f:33:de:bd:f6:97:f5:
73:81:1d:07:69:1c:cd:dd:25:eb:f3:5f:f1:57:f3:
ee:61:ec:11:5b:c4:c8:4e:8a:eb:5f:d6:a7:55:d3:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1D:6C:B9:B7:40:D2:96:8A:D1:AF:AF:D6:6B:57:DA:8B:92:DD:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl
X509v3 Authority Key Identifier:
keyid:BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer
sbgp-ipAddrBlock: critical
IPv4:
64.28.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:46:bc:4c:a6:3a:12:41:57:00:0b:46:2b:eb:c0:a9:f5:ef:
16:ef:75:a7:8c:0f:d7:9e:90:11:ee:76:9a:ce:df:f7:6a:9c:
60:4e:c4:ba:35:a1:33:44:a2:03:f1:28:f9:cb:1a:54:96:35:
7f:89:22:35:98:8d:a1:a8:01:ed:62:4c:5d:2e:b4:18:37:dd:
95:f6:6b:dd:09:01:6e:57:95:2b:fd:76:a4:99:16:7d:a3:00:
a3:40:31:6e:ad:72:e1:0c:89:fc:be:64:1b:01:6c:aa:91:2c:
ec:a9:1c:b3:cd:75:d2:ab:f4:49:bd:42:b5:03:18:7e:2d:bb:
c7:04:7f:2d:f3:34:68:8b:d9:41:f9:37:4c:09:b7:8e:3c:f3:
44:ea:ab:59:a5:d8:0a:26:98:d7:0a:f5:74:25:00:f3:08:3b:
7a:7c:3a:24:ed:87:38:ce:92:08:ab:74:b1:cc:3b:cd:47:df:
47:7a:95:45:48:aa:1a:8e:23:4b:0e:01:fd:2b:f5:2b:8d:17:
63:06:5f:d9:d4:54:75:28:92:bf:5d:43:df:39:b8:99:59:fc:
1a:5f:21:08:fa:12:86:a6:1a:3e:a2:54:88:50:be:d6:a5:72:
c5:fc:91:8a:00:57:01:69:ca:31:ac:21:b6:00:e1:34:ab:ac:
89:dd:80:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:00:44 2025 by rpki-client