Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/7a3ac42f-b8f2-37ec-8544-541f5fe42523.roa
File: 7a3ac42f-b8f2-37ec-8544-541f5fe42523.roa (raw, json)
Hash identifier: QGxZg3M9+bhK3B2DCQpfkt3OovAD8OR+HlBDFl9BLOo=
Subject key identifier: AB:3B:BB:57:D3:29:B8:AC:B5:8B:F4:FD:37:B8:48:60:A3:3D:B9:A0
Certificate issuer: /CN=56b96151-8a90-41ad-aefc-1091ab214a92
Certificate serial: 010D0C9F4328584812D5338822F375FE80A24980
Authority key identifier: DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/7a3ac42f-b8f2-37ec-8544-541f5fe42523.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 395096
IP address blocks: 199.91.188.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:33:88:22:f3:75:fe:80:a2:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b96151-8a90-41ad-aefc-1091ab214a92
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=9f5cd6ef-1568-49fc-8829-94bd9b821392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:b2:80:32:26:b3:5f:09:5e:e7:bd:35:97:
1f:04:bc:59:58:7d:5e:1a:4c:3c:7d:2b:5a:df:60:
2c:ca:af:5c:94:4d:47:fb:f3:b9:fc:e9:2d:72:c3:
4d:51:eb:15:8e:24:a1:4f:7e:82:dd:b9:99:34:dd:
8a:ae:e9:23:09:e3:67:fa:34:3e:10:8c:3a:12:72:
aa:b9:0d:21:64:51:15:0a:cd:4a:dc:49:17:66:e5:
68:15:c6:7b:9d:ff:dc:b1:47:30:4a:f5:96:bb:e8:
2a:f9:a0:d6:0e:24:0e:58:85:72:68:06:71:95:9a:
b5:32:e0:1d:72:97:66:7f:ec:9b:ab:12:e1:d9:52:
f7:e5:78:eb:c8:ec:c8:f4:45:af:1f:4b:e7:86:1c:
ef:a5:38:86:74:41:ab:31:ca:40:ac:01:85:f0:dc:
b5:5b:b6:d6:86:73:9b:42:cf:ef:56:88:ab:e7:cc:
b3:be:ba:51:66:2d:fe:9b:5a:cb:b3:4f:65:ce:79:
54:1b:68:ac:61:cb:41:94:ca:8f:5e:b8:89:0b:de:
43:8a:c7:b2:74:0b:9d:eb:57:54:41:f2:6d:7c:e3:
65:49:60:f7:bc:ad:42:87:53:80:24:66:85:12:94:
5d:0d:14:c5:90:65:15:a6:6a:82:35:96:54:ce:c4:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:BB:57:D3:29:B8:AC:B5:8B:F4:FD:37:B8:48:60:A3:3D:B9:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/7a3ac42f-b8f2-37ec-8544-541f5fe42523.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92/56b96151-8a90-41ad-aefc-1091ab214a92.crl
X509v3 Authority Key Identifier:
keyid:DC:FC:BD:81:79:AC:17:F1:5F:B1:DD:0D:72:15:FA:F6:4F:1B:95:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56b96151-8a90-41ad-aefc-1091ab214a92.cer
sbgp-ipAddrBlock: critical
IPv4:
199.91.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:1c:5a:32:f8:72:d9:83:24:fc:0a:4f:67:ea:1f:73:81:e7:
a9:a4:94:ed:e3:ec:96:00:57:55:05:41:df:8d:4e:d1:cf:66:
85:46:91:6e:b4:07:44:ef:9b:ec:16:25:a0:ea:66:72:49:70:
cc:a3:fb:c5:37:c7:cb:e9:10:33:dc:a9:4a:45:be:4d:8f:03:
01:6d:1d:f1:0d:b3:53:c9:95:99:30:67:12:8a:e0:fd:df:89:
f8:79:34:75:23:bd:42:af:06:01:8f:cb:ba:92:ca:4f:d9:45:
a1:89:21:90:8c:ba:bb:ea:99:9d:e6:83:ae:f2:ac:d3:3a:01:
48:cf:5d:97:06:ce:cf:ca:90:0a:96:bc:fd:f0:b9:a5:7e:80:
8a:a8:99:35:a6:20:22:d6:4c:74:f2:7c:34:83:f4:8a:58:43:
79:64:d1:dc:1d:bb:95:b5:d2:03:df:7e:70:41:c4:7c:5a:80:
f4:38:64:bf:59:00:6a:ff:9e:2e:3b:a7:b5:5f:8f:53:3a:4f:
b2:c2:d0:8b:75:93:19:eb:44:d0:ef:7f:16:79:a4:8b:25:00:
a0:63:82:95:eb:94:8a:df:fa:45:b9:7f:7e:dc:09:1f:99:42:
a2:dc:3c:5a:84:6d:3e:f1:11:a4:d7:27:1f:7e:7b:1c:09:42:
0a:cd:e3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:49 2025 by rpki-client