Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/d2d3a3d0-45c0-382f-b4f7-e9e97c20187e.roa
File: d2d3a3d0-45c0-382f-b4f7-e9e97c20187e.roa (raw, json)
Hash identifier: Q3aBAqZQU1bqn0M/4hN+zekxImUZRZlcUw62Hjna2dI=
Subject key identifier: 05:D5:B1:10:C0:C2:01:C2:4E:26:23:C6:04:E3:DA:96:90:59:78:12
Certificate issuer: /CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Certificate serial: 010D0C9F432858488AE09852E3078210D078E568
Authority key identifier: 05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/d2d3a3d0-45c0-382f-b4f7-e9e97c20187e.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 394840
IP address blocks: 67.219.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:98:52:e3:07:82:10:d0:78:e5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f0496a8-0ca9-45ec-820f-8e88c36e58b0
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=434ed745-ebe0-480e-a7b4-2bf9c8048c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:dd:2f:28:9c:d3:ff:06:3b:c3:4f:17:9d:8c:
34:0b:7e:bf:bf:96:87:f1:de:a3:b8:f1:f6:a7:61:
cb:cd:56:8c:75:aa:a3:ef:84:56:1e:bc:0b:5a:6a:
ce:cc:ff:64:dd:89:27:54:1f:b9:3a:4a:b2:d4:f6:
3f:6f:72:46:bd:03:22:0c:f9:2f:09:67:01:e1:4f:
03:fb:32:d2:3a:a2:2d:53:71:e4:9a:2a:ba:6e:0a:
4d:42:75:e6:d0:f0:ca:45:98:24:14:90:c1:53:7e:
cf:47:71:f6:4a:49:bf:b4:39:ac:5c:78:25:3a:d0:
ec:5f:d8:1d:02:94:1b:76:ec:b1:ef:4e:bf:db:9b:
40:4d:48:29:6b:07:e3:ac:7a:72:05:06:dc:29:7e:
dd:3c:b0:3a:ef:a3:7c:cf:fd:5e:80:44:43:ae:c7:
0f:40:1e:15:07:b3:ef:22:91:62:ca:ef:4e:c8:df:
e5:f0:14:ea:1b:a9:a6:45:cb:a1:30:f1:ca:c3:84:
9a:81:ca:5d:bc:13:d1:1f:8a:f9:fa:bc:f5:25:a1:
e7:d0:49:6c:94:ae:a7:78:61:4c:b1:ba:ef:c9:60:
85:b2:a2:bb:4c:03:da:f6:f9:ed:35:bd:df:9c:2c:
66:49:77:bc:97:9b:f3:24:04:78:cc:de:7e:ab:bf:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D5:B1:10:C0:C2:01:C2:4E:26:23:C6:04:E3:DA:96:90:59:78:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/d2d3a3d0-45c0-382f-b4f7-e9e97c20187e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.crl
X509v3 Authority Key Identifier:
keyid:05:D9:B2:96:82:27:BD:F9:0D:F7:EF:51:3A:A8:D0:AB:C5:A1:D5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1f0496a8-0ca9-45ec-820f-8e88c36e58b0.cer
sbgp-ipAddrBlock: critical
IPv4:
67.219.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:4e:33:2e:28:5b:55:51:58:de:f5:cd:00:31:78:f2:24:56:
64:ee:9a:88:ea:95:c5:ee:9c:c1:ea:5a:1d:8d:01:92:32:72:
ab:09:8b:6b:24:79:1f:b0:d0:83:01:a8:e0:72:7a:8c:43:5d:
81:fe:f2:d1:4b:0f:ff:ca:43:f3:59:7d:64:5b:6d:12:5c:fa:
36:02:24:42:f7:d9:bf:8d:8d:1e:a3:41:9e:9d:23:65:6e:b1:
73:60:d9:bf:58:06:1c:99:97:35:c1:63:8c:2e:a6:49:0c:f7:
a6:68:e2:61:95:94:4e:17:e6:a2:23:4b:34:1e:88:a6:21:bc:
fd:62:ac:0a:1c:81:96:9b:b2:9f:9b:03:85:d3:2b:93:b9:5e:
ca:b2:35:fe:2a:1b:be:85:20:41:ca:84:29:7d:08:88:a1:a7:
b0:32:1b:bb:a5:1c:15:16:b7:9e:8d:d8:2e:b6:b8:7c:b0:fb:
10:d4:bf:59:75:dd:e7:b4:72:38:a5:7e:87:7b:fe:fd:db:fc:
de:e5:bf:57:a5:68:1f:2d:f6:e7:31:36:a8:13:0d:4b:1d:df:
7b:95:9e:ec:c1:81:93:2c:1b:11:7c:ab:2a:02:b4:ea:d5:cc:
b8:6e:da:31:e3:48:02:74:51:fd:d0:bd:21:5b:e8:38:eb:9f:
78:40:fd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:32:18 2025 by rpki-client