Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/e88d07e0-cfeb-3eab-be99-7b7fde18e74e.roa
File: e88d07e0-cfeb-3eab-be99-7b7fde18e74e.roa (raw, json)
Hash identifier: OolPooKyZ7Z0ionodCwtWnkhkoBLUDByY6kiONGQlWI=
Subject key identifier: C2:24:1A:8A:C3:7F:B3:15:77:E5:3F:A5:D1:7E:82:1B:73:A5:F5:26
Certificate issuer: /CN=d92cf10a-b836-4dce-a8f5-f920d630995e
Certificate serial: 010D0C9F432858481F652CEF2C37935FF1C3A500
Authority key identifier: 08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/e88d07e0-cfeb-3eab-be99-7b7fde18e74e.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 32904
IP address blocks: 146.71.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:2c:ef:2c:37:93:5f:f1:c3:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d92cf10a-b836-4dce-a8f5-f920d630995e
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=ffbfd902-6e02-449f-aef5-d8e0e801f671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3d:d2:ac:61:80:9f:3a:c6:1c:a6:12:66:de:
e2:5a:d0:5a:f3:07:68:b9:55:4d:3c:7e:12:97:57:
bd:99:38:04:80:82:6f:18:21:c2:0a:58:72:b7:f7:
af:81:e5:fa:93:7d:de:e9:ee:f0:6a:61:45:72:a7:
50:39:65:4f:e6:e2:9c:b2:ca:16:41:ab:b4:fc:ed:
0f:c6:6f:a3:2c:d0:c0:75:b7:2a:13:90:44:2c:55:
38:bc:be:1b:d1:bd:c8:b0:29:0c:0c:64:b8:fc:74:
dd:a2:11:3f:e5:fb:01:c7:fd:2a:32:a7:32:46:59:
ff:29:96:c2:ca:01:4e:67:f8:24:6e:5f:9b:ab:c1:
33:cc:2e:74:dc:e9:b8:a1:35:21:d1:37:f9:4a:95:
bb:cb:cc:33:b5:ed:d0:51:f0:9a:f2:43:4d:58:10:
ad:77:45:0b:98:51:93:5b:94:b3:f9:4a:0d:29:be:
b3:39:c3:7b:c4:59:20:f6:7c:cd:25:c3:ae:2f:29:
51:bc:17:a6:80:77:ae:63:b0:07:d3:d6:4c:4a:d3:
2b:d7:a3:20:80:21:53:c6:7a:e2:67:15:84:12:ba:
76:df:12:11:af:59:33:b3:17:f7:1c:35:3f:5c:00:
be:8b:40:df:b0:55:70:59:6e:6d:3c:24:c7:8a:b3:
2f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:24:1A:8A:C3:7F:B3:15:77:E5:3F:A5:D1:7E:82:1B:73:A5:F5:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/e88d07e0-cfeb-3eab-be99-7b7fde18e74e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e/d92cf10a-b836-4dce-a8f5-f920d630995e.crl
X509v3 Authority Key Identifier:
keyid:08:2A:2C:8C:F2:11:B3:A0:A4:59:C9:14:F5:8A:A8:BB:AF:DF:EF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d92cf10a-b836-4dce-a8f5-f920d630995e.cer
sbgp-ipAddrBlock: critical
IPv4:
146.71.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:e3:f4:bb:9b:6a:2d:0e:51:16:33:4b:1d:38:c6:15:2c:e9:
55:80:e1:bf:7c:37:90:ab:43:ee:83:c8:47:9e:8c:e5:39:5c:
09:05:fa:71:68:49:ec:4d:bc:ff:63:ab:e6:51:c3:c2:26:22:
01:3d:ee:d2:c3:a9:64:a4:6b:06:69:70:84:da:99:81:d3:21:
db:82:a6:51:dd:31:8c:ac:b8:75:2f:f1:92:0b:29:21:43:75:
75:fa:3a:38:8f:fb:5f:86:d2:2d:3d:31:20:64:2e:34:8b:40:
c2:ee:f4:d4:02:71:82:9b:06:31:ef:9d:8e:c4:56:67:ac:00:
ea:63:35:38:86:dd:e3:9e:cd:b4:d5:55:d1:6e:81:e7:6a:2a:
33:43:92:db:b8:b7:19:7e:5f:fc:9f:72:4e:83:21:2c:cc:50:
74:cf:00:56:44:2b:7a:df:da:f7:6e:b1:33:ba:17:cb:b9:54:
2d:d7:7a:24:95:1c:84:16:52:4b:2a:27:86:7c:c0:68:d9:d6:
df:f8:31:a1:21:cd:d3:48:49:80:41:8d:e9:53:df:62:a7:26:
14:6e:81:f1:4f:8c:62:67:81:8b:a6:e0:34:35:90:aa:c5:80:
83:99:90:1d:9c:8a:03:39:01:ca:04:21:69:39:33:d9:94:a7:
05:9f:88:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:40:49 2025 by rpki-client