Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa
File: fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa (raw, json)
Hash identifier: xw4mqeEZL63K7k4cRITe6w1EvvSnQWfeXHrAD4Uzs04=
Subject key identifier: FA:AD:76:57:DD:84:EE:6D:AC:47:B1:CB:A1:42:42:CF:F9:1E:2F:E3
Certificate issuer: /CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9
Certificate serial: 010D0C9F432858489075F2210F07F716151560F0
Authority key identifier: F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 398949
IP address blocks: 192.64.206.0/24 maxlen: 24
192.64.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f2:21:0f:07:f7:16:15:15:60:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be90895a-3c43-4b38-a5aa-b1ebc261b6f9
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=838260b0-1b32-48eb-861f-15d739b1feb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:b6:a4:e5:d5:96:29:5e:42:6c:b7:50:ce:
b0:0f:6c:8c:fb:1d:dc:0c:78:54:a0:f2:22:f4:fa:
e3:22:fb:0e:b1:ff:58:9b:79:49:f0:ae:39:c6:b7:
b7:c4:f4:49:af:45:01:5a:3b:39:0b:1d:fd:1d:6d:
8c:dd:1a:ad:cd:e1:5e:9d:a1:5c:c1:f8:4b:00:f2:
d2:e9:40:0a:b8:b9:11:c1:4c:23:c9:16:c8:dd:37:
e6:2a:f0:d4:f1:f3:d3:1a:5c:68:b3:3d:2c:ac:43:
af:0b:f4:19:41:47:98:e5:32:66:2d:7c:56:69:6d:
65:20:ad:58:51:34:4d:75:98:3d:ab:60:5d:cd:a0:
2a:ac:c4:64:a0:77:3f:16:20:0a:63:9f:4e:9b:59:
03:4a:9d:31:6e:73:00:87:c3:31:0d:68:12:0b:8e:
82:a7:10:13:f6:2f:91:f3:b4:e0:2c:5a:0c:ce:a4:
b6:47:eb:0e:04:59:88:5e:c7:8e:92:81:75:cc:66:
65:f4:c0:7b:ba:6c:63:cf:ad:f9:b8:01:63:9f:ee:
38:8c:be:13:99:95:d9:fe:d9:f9:51:ed:81:25:b5:
01:43:8a:3d:68:66:49:5b:4a:1b:cb:77:06:3c:f1:
14:15:d6:f1:95:64:e9:30:59:e3:1c:ec:31:6d:d3:
f5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AD:76:57:DD:84:EE:6D:AC:47:B1:CB:A1:42:42:CF:F9:1E:2F:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/fe2e6333-2d0e-3d3a-ba9e-33923101cfbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.crl
X509v3 Authority Key Identifier:
keyid:F1:55:6A:36:5B:CD:2A:BB:61:C0:A5:AC:37:B5:7E:E2:D6:D6:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/be90895a-3c43-4b38-a5aa-b1ebc261b6f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.64.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:ee:51:15:ed:66:c2:38:71:58:34:bf:a6:18:e8:af:33:83:
42:cc:17:14:2f:c2:b0:42:1f:56:98:ce:ae:1f:f5:71:96:83:
1a:38:74:46:ad:54:d6:cc:99:b1:9d:b9:64:8a:b2:ae:23:86:
6f:5f:8a:b4:cb:17:13:af:45:68:49:5b:53:ad:8d:ca:07:10:
14:c3:45:66:6a:78:3a:f9:b0:78:58:a5:57:07:d8:a3:17:13:
4a:c7:f2:0c:e7:39:44:94:d5:3c:46:c2:a1:af:08:5e:4e:0d:
35:53:3d:f4:e3:e9:64:38:98:8e:b8:29:fd:7e:6a:34:ba:b4:
2e:30:88:df:ac:4f:c4:d4:42:59:5f:56:a1:9a:06:bc:0c:91:
b9:79:b0:d4:1c:73:20:cd:47:b9:e0:50:0c:d6:18:64:25:88:
94:c7:2b:f7:e1:ba:a2:70:81:f9:4f:df:96:b1:24:e3:4f:b6:
f3:c9:81:62:ea:e0:cc:5d:3b:66:ac:72:c9:20:f8:d9:60:70:
5f:2e:1f:57:57:ca:2b:9d:c2:01:39:ae:84:a4:61:7f:b8:b8:
ea:df:7b:b7:31:6f:0b:8e:48:11:9e:81:9f:29:f0:77:ef:cb:
fc:14:89:ee:c9:88:03:cf:7a:f7:73:e6:a1:95:94:e2:63:10:
2c:03:c9:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:49:03 2025 by rpki-client