Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa
File: 1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa (raw, json)
Hash identifier: f/f1qD44ar8gVjA4exLPhTj1A3Fm0Oeq28MaZc1zVOk=
Subject key identifier: AC:63:BA:5F:E2:F2:35:DF:A8:FE:C0:E7:77:15:90:82:EA:F7:A0:03
Certificate issuer: /CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Certificate serial: 010D0C9F43285847FF4A471DC364B0CE44E5FC40
Authority key identifier: DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 7448
IP address blocks: 143.192.0.0/18 maxlen: 24
143.192.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:47:1d:c3:64:b0:ce:44:e5:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=135a25e4-6a94-45c6-b694-2d6e8256166a
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=f132ee23-fa09-4c7a-8af7-01059b1fec6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:dd:52:f1:ec:3d:20:0a:08:03:b6:00:1f:
0f:1f:73:02:41:85:8f:7d:c3:c6:89:6a:12:20:25:
74:fc:16:46:42:10:4c:9d:4c:e4:fa:cf:9f:bc:31:
d6:76:50:6e:dd:03:04:5a:09:5a:59:f0:36:79:4b:
61:66:46:f5:58:c3:f3:c4:a4:14:60:f9:38:db:f8:
f7:a3:16:f2:4d:e9:d6:de:10:bd:ff:72:ab:4e:84:
ae:67:a8:74:8a:aa:63:41:df:d5:fc:82:78:e5:95:
9c:74:bb:17:82:8f:fc:d0:9e:d8:25:be:8e:9d:ab:
02:28:ce:d5:7a:43:d1:6c:7f:9e:3e:65:ad:3d:3a:
db:81:bc:b3:a0:49:01:96:7e:04:f4:9b:12:c3:65:
d9:4d:a9:a6:e4:a2:4e:79:6f:85:26:2b:05:e9:89:
1f:a6:96:00:cf:b3:1d:8d:27:1b:03:3f:eb:86:4b:
86:2a:52:c2:87:d6:25:23:86:30:c3:25:e5:b5:8d:
36:3d:1e:bf:93:58:16:8c:f8:29:91:b0:58:41:b0:
b4:60:03:54:5d:c8:a0:fb:09:94:4b:10:b3:00:58:
fd:35:a5:f8:ab:7e:f3:55:01:35:2d:3a:73:4f:ba:
65:8f:c6:52:e2:da:e0:2f:66:69:71:a4:b6:ca:e1:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:63:BA:5F:E2:F2:35:DF:A8:FE:C0:E7:77:15:90:82:EA:F7:A0:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/1aa3f1ab-cc78-36b4-b890-552ec2d4c98a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a/135a25e4-6a94-45c6-b694-2d6e8256166a.crl
X509v3 Authority Key Identifier:
keyid:DF:3E:80:AC:3D:00:CF:34:16:78:D5:D9:42:F3:E2:1D:BD:C0:F1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/135a25e4-6a94-45c6-b694-2d6e8256166a.cer
sbgp-ipAddrBlock: critical
IPv4:
143.192.0.0-143.192.95.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:a8:89:19:bf:cc:20:29:7b:4f:09:1f:cc:64:d4:41:49:f4:
a0:53:b2:a7:18:87:cf:a0:54:83:b9:8c:cd:f9:19:a6:aa:7a:
be:22:a6:e8:7c:85:df:06:4b:a6:07:8f:d8:8e:ba:3e:96:53:
7b:93:32:fd:ce:c8:73:89:13:e7:ca:00:35:2f:20:23:28:5e:
08:a7:98:f7:a5:a1:c8:04:21:65:9e:93:c2:50:96:87:2e:e5:
49:f1:34:24:d8:f9:f7:2d:5c:17:3b:a1:a6:8b:c7:07:03:e7:
97:77:16:af:cf:ae:ec:49:25:a2:f4:8a:59:c4:ef:b2:26:13:
a1:e4:3b:57:88:28:fc:9e:9a:c6:e5:27:76:1f:86:db:fe:28:
7d:f5:fb:95:32:41:9f:54:c4:4e:1b:a0:6b:21:e0:ea:c1:dd:
92:bd:60:fb:23:8e:01:c8:67:48:38:90:b2:21:59:32:4e:3d:
d6:41:f4:26:bd:61:28:ea:3d:64:01:fd:29:3e:ec:f1:b1:19:
6f:d1:b8:53:aa:a5:d9:f8:83:46:6f:cd:2e:1c:f2:cd:82:b0:
90:c8:aa:e1:9f:e1:b1:32:0d:ec:86:93:ed:78:6c:42:b0:b9:
05:2d:aa:a0:65:88:df:33:f6:0a:26:eb:0e:1b:c3:de:9f:31:
83:3f:7c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:32 2025 by rpki-client