Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5e09b4be-660c-32d7-905a-93080ed41e33.roa
File: 5e09b4be-660c-32d7-905a-93080ed41e33.roa (raw, json)
Hash identifier: iW0yZ8RVMNtNYqtvklINUz91nlHf/yJAd9mAb3y0Gns=
Subject key identifier: 0E:1C:1C:FD:90:4B:9E:7C:93:B1:54:CB:0B:5E:D7:A3:28:12:E0:F3
Certificate issuer: /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial: 010D0C9F43285848222FDBF15830C9AE1CE92AA0
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5e09b4be-660c-32d7-905a-93080ed41e33.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 1273
IP address blocks: 206.128.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:db:f1:58:30:c9:ae:1c:e9:2a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=499df1f3-2aba-4452-98e7-0c03c52e4a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ee:14:fe:f2:73:25:cd:92:32:c1:de:59:bb:
19:e7:c1:e5:d1:42:46:36:18:3a:79:5c:17:f7:d2:
e4:bc:5d:69:dd:06:fb:9b:8c:57:14:38:0f:56:57:
dc:22:cf:9e:19:70:9d:16:54:6c:58:29:fe:fd:e7:
ac:23:86:82:b4:76:75:44:44:f6:46:d2:e6:58:b5:
b6:fb:a8:a5:52:47:82:a0:82:ad:f9:b0:c8:19:09:
2d:c1:e6:99:11:1d:c3:78:66:68:41:d1:98:79:63:
3e:da:a5:39:aa:68:37:bc:05:72:2f:26:bc:5f:00:
19:82:89:37:25:d2:02:48:fd:af:0a:d3:fa:d7:85:
05:40:ff:4d:b2:85:d0:4b:23:aa:90:70:4d:6c:ab:
47:9b:cc:bf:d7:e8:22:4c:9e:b3:50:3d:66:85:48:
df:be:c4:ef:5e:f9:9d:6c:fa:82:e9:96:b8:5c:97:
d2:a6:83:97:21:1a:0a:76:97:8b:96:99:31:b0:d3:
b3:e9:de:c0:73:3d:6d:97:a5:c1:53:d5:43:c5:ba:
f0:e6:39:a6:e2:98:dc:52:71:9d:b9:49:1d:87:f1:
f9:03:ba:0f:28:d4:94:e8:88:25:f8:23:9f:67:6f:
59:66:be:c2:b7:29:b0:52:1d:9c:d2:32:08:bd:f5:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:1C:FD:90:4B:9E:7C:93:B1:54:CB:0B:5E:D7:A3:28:12:E0:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/5e09b4be-660c-32d7-905a-93080ed41e33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
X509v3 Authority Key Identifier:
keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
sbgp-ipAddrBlock: critical
IPv4:
206.128.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:34:c1:7c:49:76:22:00:78:85:3f:89:ee:83:a5:bb:97:cf:
9b:00:9e:f4:66:6e:7c:a2:93:68:c6:51:68:6e:60:55:e5:78:
78:77:6c:e3:6b:62:78:0f:b0:ef:86:ff:8c:2c:89:b0:b2:64:
be:b9:59:70:6b:84:c1:2a:34:c4:7a:df:d8:07:33:7c:a2:e4:
d4:77:58:e4:5f:df:bc:b6:75:e8:75:81:86:08:9b:5b:10:b6:
a1:f3:c3:c3:c3:b7:e7:9d:5e:e4:c4:95:58:7c:fa:7e:33:45:
ec:36:fe:e0:fb:bc:bf:dc:bb:0a:7d:df:ee:ed:df:ef:90:f7:
17:45:7e:87:e6:d0:74:be:f5:38:de:f2:5e:bc:90:f6:0a:2c:
a2:a0:3c:06:d6:7d:93:8b:c3:24:ec:5c:33:3e:95:5b:26:98:
35:b0:ee:f2:65:00:7b:cd:96:0c:0b:ea:61:fd:bb:dc:52:51:
23:1a:f8:92:04:ce:70:ed:67:68:9a:c7:b1:ec:7e:b2:1a:72:
76:66:25:44:7d:42:9c:76:37:8d:a7:db:4e:47:1c:33:24:11:
55:8b:22:42:31:d1:af:3d:00:e9:52:a6:a2:2d:da:b9:b8:01:
4e:73:4d:92:e3:80:72:09:10:05:b6:09:af:39:04:27:7e:ad:
65:fa:c0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:54:25 2025 by rpki-client