Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa
File: 7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa (raw, json)
Hash identifier: Y3GgNPhUWkyYfiVc9ufN/uSfXNqWfG+ToM12JpUS8wA=
Subject key identifier: DE:D4:89:07:1A:86:D8:BB:05:09:A2:09:87:2E:F8:5A:0F:33:33:F6
Certificate issuer: /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial: 010D0C9F43285848292A9E48769957EA74CD2B70
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa
Signing time: Tue 10 Dec 2024 14:00:52 +0000
ROA not before: Tue 10 Dec 2024 14:00:52 +0000
ROA not after: Mon 10 Mar 2025 13:00:52 +0000
asID: 7018
IP address blocks: 141.195.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:29:2a:9e:48:76:99:57:ea:74:cd:2b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Validity
Not Before: Dec 10 14:00:52 2024 GMT
Not After : Mar 10 13:00:52 2025 GMT
Subject: CN=371c5acc-27fd-471a-a351-dfc04d0bbc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:81:99:b7:f6:65:1a:87:6c:46:61:bf:30:
78:04:77:a6:90:fa:94:aa:88:1e:64:20:78:3c:75:
07:9d:ce:50:52:c3:04:7d:44:ec:cc:f5:a9:6f:56:
ae:10:fa:ee:f3:c4:01:41:45:18:0a:b9:b5:93:47:
f9:43:91:34:7b:28:9d:81:c3:99:26:a0:aa:ec:eb:
84:eb:64:37:dc:0c:34:cd:65:72:7d:ef:bd:51:f6:
3c:5b:dc:d6:bf:d5:92:f2:38:d5:20:cb:cb:83:b4:
31:84:f6:b9:b3:1c:d0:1f:ec:29:06:de:d5:05:4c:
27:f5:cb:36:42:6a:08:d9:97:0f:f0:bb:42:fa:6a:
34:da:28:7c:34:b1:c5:d9:9a:0f:10:96:96:b5:ab:
78:45:04:a7:ad:ba:4f:82:0d:a2:4a:9e:0f:66:96:
77:24:3c:43:25:56:87:59:b6:94:d8:39:33:ab:50:
f5:6c:0c:67:fe:70:af:ae:82:3f:05:ad:b7:73:bc:
1c:a9:96:b4:94:89:19:78:75:24:29:ae:85:27:58:
bc:da:aa:55:65:c0:d6:d6:7f:e1:07:aa:01:99:2a:
a3:4a:b1:76:e2:d2:e2:09:39:94:c6:3c:1b:07:0e:
63:98:0f:9d:e4:6a:d7:23:bc:ab:73:bb:10:64:14:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D4:89:07:1A:86:D8:BB:05:09:A2:09:87:2E:F8:5A:0F:33:33:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
X509v3 Authority Key Identifier:
keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
sbgp-ipAddrBlock: critical
IPv4:
141.195.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:cb:f1:50:c1:ae:46:f6:0b:d8:c7:24:c6:3f:c9:48:f6:e6:
30:51:44:3f:00:b2:2b:45:72:02:ab:03:5b:6a:e8:7f:4f:65:
83:e4:f9:a2:76:d0:c5:53:03:e5:0e:cb:69:17:9c:23:98:84:
da:2d:ed:b7:7c:7c:25:5a:48:ec:b6:bd:ba:20:e0:ea:cd:fb:
b1:e7:e3:7c:3c:99:48:82:99:3a:4c:e8:0a:e9:db:49:77:48:
46:bb:12:a5:3e:52:e2:0c:99:72:76:83:b5:ac:93:5a:d9:f5:
70:96:a0:3c:a4:88:a8:77:8e:75:ed:c9:9b:c5:56:01:3b:ac:
1c:58:a1:8c:1b:31:a6:5b:fb:e2:b6:9a:aa:59:12:dc:c4:a3:
58:c3:75:84:55:30:09:b3:93:37:5f:5b:21:90:58:c5:db:b9:
70:04:5b:3c:d4:cb:f2:5b:c7:93:82:e5:dc:7e:8a:7d:89:49:
e1:7c:7f:0a:1e:44:17:11:a2:4c:e2:dc:73:51:33:72:b0:6f:
37:63:a9:df:ab:6e:18:e3:b6:b4:7b:b0:d0:2c:0f:fd:46:8a:
4f:c8:7b:e9:2b:11:04:b8:3c:ce:f2:26:a4:52:6a:7f:43:b0:
6d:70:ad:62:79:e7:20:9f:21:1d:26:70:9f:a0:c5:33:7d:b5:
3b:4d:da:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:38:36 2025 by rpki-client