Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
File: 0d245965-f93b-398c-ae46-d494039afdb2.roa (raw, json)
Hash identifier: bHDVShVJ3e3gLNRiWdDmpZy2fXpDiJfrE1DnBzv++eI=
Subject key identifier: 36:6F:E5:23:A7:87:33:E1:84:94:73:21:A6:EB:68:FE:93:5D:57:04
Certificate issuer: /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial: 010D0C9F432858481F653807389BD94692318680
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 5719
IP address blocks: 129.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:38:07:38:9b:d9:46:92:31:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=0ed16e66-1a79-467d-b907-a752d155dcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2c:74:6a:55:8d:3d:f5:ba:8f:47:96:f8:c0:
d1:10:9c:70:d9:2e:ad:84:7b:c7:b6:96:04:18:aa:
3a:70:85:5e:c1:46:d8:fa:dc:a1:bb:5a:4b:95:01:
d2:fe:6d:0f:91:fd:bb:03:62:6b:e9:94:5c:59:cd:
77:b4:db:3c:af:ac:65:fa:96:e0:25:12:08:b1:63:
3d:68:bc:61:af:e7:70:c4:e4:12:3b:2e:a9:4e:35:
e3:5e:24:50:31:5a:89:ff:46:ff:ca:ab:3d:55:5b:
11:2f:48:ed:a4:52:52:f3:76:81:d0:d2:51:d3:8c:
ec:c9:e8:8b:93:90:09:a8:8c:60:08:37:f9:cf:b1:
b9:7c:4b:f7:56:8d:aa:e1:3f:fb:18:52:dd:b3:aa:
c2:f6:4c:6a:a9:1c:79:ed:fc:6a:0c:13:55:e3:26:
e0:06:d6:2c:94:d3:46:cb:5f:b1:81:17:5d:f3:57:
ae:e6:2b:01:41:e6:bd:2c:76:49:1c:f9:ca:35:4d:
69:2e:06:ea:8f:01:bb:bb:3e:aa:c5:71:b9:0b:9c:
b0:dd:c3:2b:9e:86:66:8b:95:06:5a:4d:60:d2:e0:
49:73:a5:27:0c:11:8e:af:17:b0:fe:ba:9f:44:cb:
fd:e4:fa:fb:ca:fb:ef:71:c3:cb:be:0a:74:7a:b3:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6F:E5:23:A7:87:33:E1:84:94:73:21:A6:EB:68:FE:93:5D:57:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
X509v3 Authority Key Identifier:
keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
sbgp-ipAddrBlock: critical
IPv4:
129.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:52:f0:41:6c:44:5f:39:6f:e0:68:b2:08:1a:aa:fd:ac:30:
59:07:b4:60:ad:a2:0e:0c:90:40:20:84:bb:c8:fb:cd:85:33:
aa:c3:a3:87:2b:8b:26:a4:aa:89:d4:b4:6a:6f:a0:49:bd:58:
af:90:83:b0:c5:6a:a5:ea:bc:c6:92:47:68:e9:87:83:4f:68:
b7:ba:52:21:60:92:a9:17:c3:af:e4:d1:1c:ea:52:bf:57:12:
27:16:0a:bf:6d:8c:33:04:35:99:3e:b0:7b:fe:14:16:c1:12:
4d:36:b2:cd:72:83:cf:38:13:5f:33:15:85:e5:96:79:6e:c2:
db:91:65:64:69:5c:09:0a:84:c8:93:3c:6e:d8:22:c1:8e:53:
35:b4:6c:12:eb:c3:8d:e0:04:2e:94:80:eb:0f:26:fe:4c:c5:
cb:23:2a:15:05:72:59:a2:d6:e9:88:51:60:af:2d:b8:e2:8d:
53:1f:df:23:3e:83:5a:14:20:39:e2:8d:5a:b5:cc:95:a7:5e:
fe:5c:f8:29:c9:3b:3c:bf:34:bb:b0:f9:ac:c2:82:be:98:41:
49:fc:46:56:de:4e:5a:fc:06:79:06:8e:7b:c8:ab:39:ca:ec:
2f:02:1a:f9:bc:18:dc:9f:a9:2d:30:d0:c9:38:57:eb:06:dd:
e9:b6:97:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:41:47 2025 by rpki-client