Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa
File: 48a21514-9b84-3789-b983-3138fee23ce0.roa (raw, json)
Hash identifier: xUPEArt0hq8bjSseBBHJ25vHDkZhDa738q7pTlyRS+k=
Subject key identifier: B3:36:E2:FE:8F:1E:0A:B6:2A:48:A0:DB:30:01:65:6F:BD:DF:51:DF
Certificate issuer: /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial: 010D0C9F43285848372018134140998275121F00
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa
Signing time: Sun 15 Dec 2024 14:00:53 +0000
ROA not before: Sun 15 Dec 2024 14:00:53 +0000
ROA not after: Sat 15 Mar 2025 13:00:53 +0000
asID: 54994
IP address blocks: 168.235.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:37:20:18:13:41:40:99:82:75:12:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Validity
Not Before: Dec 15 14:00:53 2024 GMT
Not After : Mar 15 13:00:53 2025 GMT
Subject: CN=a09cc105-7873-4736-962a-0dc8eac7dda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:11:40:19:81:01:e4:c9:3a:fc:7e:4e:c8:b8:
7f:93:9e:73:7f:82:89:ab:67:3b:15:57:b2:25:36:
d6:05:46:b4:08:9d:5b:fb:64:8e:22:12:c7:16:64:
7c:14:cd:1f:6d:0e:a1:e5:96:57:cc:58:0a:3e:4e:
31:cd:03:81:58:3d:7d:87:d3:36:50:3c:9b:b5:0e:
27:9c:20:ad:ee:6f:22:78:f2:cb:51:70:4f:b7:fc:
e3:c8:a6:20:ac:d4:76:91:37:c0:bb:27:22:35:9c:
d6:8f:86:44:ee:74:2a:92:cc:79:0c:df:55:7c:17:
f3:fc:cd:a6:40:7c:ba:e7:ac:7a:8e:b5:f8:25:e6:
49:3f:f3:b7:47:58:94:a9:e0:bd:5f:13:8e:fc:c7:
87:cc:24:70:39:3d:65:9c:d5:63:c5:fe:6c:f5:bd:
c6:54:1b:29:1e:67:d6:df:50:ff:7e:ab:c9:ef:42:
22:f3:be:21:98:7f:6e:36:a1:7f:92:4d:bf:81:60:
c4:68:a4:0a:16:a4:21:87:72:2e:ef:7a:7a:33:a1:
cf:db:b7:b4:fc:97:9f:1b:15:09:9b:4c:c9:a1:e2:
2f:e1:76:59:6d:02:a9:fa:63:4e:ab:50:d1:ee:f2:
49:35:23:27:8f:77:d4:84:c5:46:42:af:03:ab:08:
44:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:E2:FE:8F:1E:0A:B6:2A:48:A0:DB:30:01:65:6F:BD:DF:51:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/48a21514-9b84-3789-b983-3138fee23ce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
X509v3 Authority Key Identifier:
keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
sbgp-ipAddrBlock: critical
IPv4:
168.235.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:35:39:71:26:ce:00:20:d0:86:20:7c:be:0f:66:37:5f:ab:
b9:cd:6e:ff:d9:79:2c:98:08:d1:e0:6c:11:4f:ac:64:a4:a3:
19:cf:a3:a6:de:23:77:d6:6a:b2:78:b8:55:c0:be:98:af:05:
79:dc:a6:e0:5a:ca:2c:37:18:ae:75:75:8f:cc:4e:f3:af:c2:
7d:fc:06:cb:59:57:37:16:fd:54:90:c5:5a:28:b8:5a:5b:41:
c2:c1:cc:b4:90:e6:f9:78:9f:91:00:1b:6f:f4:c0:de:dd:66:
26:4d:7b:9f:c4:eb:63:07:3d:f1:e4:8c:71:c2:8d:6a:11:a5:
c7:d7:b9:67:0c:90:8a:73:e9:de:26:17:34:6e:e0:12:2b:ae:
4c:d1:5f:a3:89:60:0e:e1:c7:fe:1b:81:fd:cb:4f:55:99:85:
f3:01:2e:71:9d:3a:3d:ae:80:64:f6:3e:09:09:23:e4:f6:59:
c3:6a:91:9f:95:3d:63:7e:d0:2e:ee:2d:96:67:45:eb:c7:31:
dd:48:47:19:bb:07:1e:ba:1d:2d:0e:75:e6:c1:4b:71:b3:cb:
0b:55:ee:68:0b:d2:29:f9:43:5c:70:7e:78:f3:a2:2a:f6:47:
3e:cb:66:8d:7b:ba:2a:00:99:e1:51:66:bc:d7:99:0f:d9:14:
94:e4:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:53:48 2025 by rpki-client