Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa
File: dab71fff-cbac-3e27-9fc7-f12b013a750a.roa (raw, json)
Hash identifier: 9GQgw8+PL4MOnYXkSLapOAgsjOQy/0DlaDxOhrjOcpk=
Subject key identifier: 68:81:98:9F:F9:65:31:89:63:BC:A4:0E:CC:4D:9E:99:7A:BF:68:0B
Certificate issuer: /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial: 010D0C9F4328584807AA6A0F1EA7DC793C881AA0
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 55178
IP address blocks: 192.230.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:6a:0f:1e:a7:dc:79:3c:88:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=5205a13e-5e1c-4c36-afcf-4adf45c4a614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b3:92:de:61:34:a9:6f:6e:a2:d7:61:80:8c:
82:2e:4d:91:8c:5a:cf:9c:2a:40:35:ea:22:ff:4e:
73:10:c1:25:63:a9:46:a7:7e:a9:b3:40:22:2b:e5:
e0:e3:ba:90:e0:74:d9:99:0b:50:a5:9e:e6:ca:a5:
c0:25:d8:73:0c:cd:3e:c0:a2:ab:8b:43:e1:36:2b:
f1:01:ac:d1:9e:a6:ad:6e:89:ec:21:2f:2e:29:19:
5d:5e:42:aa:b4:90:6f:f9:73:75:1e:c3:8a:5f:7b:
f6:79:a1:9f:f4:52:fb:83:74:3c:62:b4:d9:8d:95:
e1:67:0a:ad:35:36:dc:01:53:47:7b:08:a3:a6:e1:
d5:8c:f3:22:6e:10:73:f0:ed:10:7d:74:7d:fc:15:
37:73:7c:e0:d2:ca:ba:ac:12:d4:10:41:39:4a:e4:
9a:59:cd:fb:d1:46:f8:45:22:2a:ef:b4:01:28:f5:
25:cd:57:fa:5d:37:a1:c1:7c:ca:8c:11:83:85:29:
13:99:47:86:20:cf:c4:58:03:7c:5d:86:8f:38:4c:
98:ca:e7:84:21:05:3a:2c:5c:89:e9:a6:09:8c:ee:
69:4d:cf:f9:12:7b:73:d9:c9:9d:d6:04:8f:48:e7:
b7:74:39:6a:2f:48:75:db:59:f4:24:87:01:12:fc:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:81:98:9F:F9:65:31:89:63:BC:A4:0E:CC:4D:9E:99:7A:BF:68:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/dab71fff-cbac-3e27-9fc7-f12b013a750a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
X509v3 Authority Key Identifier:
keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.230.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:53:d1:ab:5c:e4:23:f0:7e:74:af:0c:6f:e4:fd:55:f4:05:
d7:c2:a3:99:55:03:8f:ca:83:4e:01:dd:81:7c:c9:fe:7e:e0:
1c:56:92:b8:ed:0e:dc:66:4e:c6:bf:64:6a:cf:7d:49:f9:fe:
61:fd:d9:1b:a6:e5:27:11:b1:e3:b8:b1:d6:ec:c4:ab:18:cf:
00:8c:8f:86:c1:b2:41:5c:fd:d7:b0:77:72:3d:9f:0e:f6:c8:
94:ba:f0:1c:d0:ff:00:63:0b:9f:02:7a:4a:ca:57:b3:38:75:
48:d8:4c:ec:0b:ff:35:c1:ca:b1:98:4c:75:b2:f9:ea:08:e6:
5d:39:76:ca:c9:e3:ff:d1:5b:55:94:0d:70:c5:81:7b:7f:d2:
b3:08:11:d3:ce:72:a1:b5:05:9c:5c:9f:89:46:ac:25:10:33:
10:5f:2a:cf:a6:ea:c1:1a:2e:d3:d6:bd:e5:d1:78:2f:53:b2:
81:09:8e:de:1d:77:23:c5:db:7a:4a:0b:ec:8f:0a:be:0e:4f:
af:ac:9f:20:cb:42:82:60:e8:fd:f1:99:20:bd:9e:6f:4e:e2:
8c:d4:81:c1:8a:b7:f1:e6:c8:34:be:07:ba:d7:33:21:bb:a6:
84:43:49:ed:d2:d9:ce:aa:32:dc:5d:58:1d:1e:eb:87:c2:a5:
fd:7a:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:51:45 2025 by rpki-client