Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/752c601a-7e44-38fa-a562-2121c064f9d3.roa
File: 752c601a-7e44-38fa-a562-2121c064f9d3.roa (raw, json)
Hash identifier: lrrCNvBm80CHg4FIvFDIhHG1tYuWdTIma2v8d6Htryc=
Subject key identifier: 18:47:1F:63:AF:C8:A7:AE:FA:30:51:C1:71:9E:D0:B8:63:E7:05:E7
Certificate issuer: /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial: 010D0C9F43285848A13614DC6592327124389480
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/752c601a-7e44-38fa-a562-2121c064f9d3.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 393573
IP address blocks: 192.254.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:14:dc:65:92:32:71:24:38:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=fa4f02fa-4371-4115-aa53-949721419db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:4b:3f:b7:14:ab:26:43:76:c1:1d:c5:e7:
cf:14:8b:ac:ad:4e:e1:61:f6:8d:12:84:7f:2b:08:
44:37:1d:c5:4c:27:ea:3e:53:ba:71:ea:eb:b5:ce:
ff:53:62:63:36:bf:fd:8f:7c:ad:11:24:cd:41:e0:
58:5b:63:6f:53:30:51:e9:a7:47:57:77:57:7b:09:
0e:a5:b8:df:39:93:b0:46:e3:00:70:83:ea:cf:86:
29:76:4f:47:9a:06:f2:8e:4b:06:f1:9f:3c:d6:4d:
e3:8c:72:bc:6f:0a:51:18:5a:08:f7:07:f7:c5:ed:
5b:f9:e3:9e:28:ac:d1:b1:9c:ed:b1:a3:ad:20:cc:
da:62:18:c6:d0:58:6f:26:e8:e9:f3:1d:57:d1:1a:
f2:5f:69:98:19:ba:b0:74:e5:5b:88:17:a4:2b:1c:
73:9e:b0:4d:26:78:45:2d:d4:87:c6:37:26:1c:79:
e5:a3:6e:e7:a9:b9:9e:8a:e6:7e:8f:d7:ee:99:de:
89:a0:a9:08:85:fc:6c:17:7d:24:52:dd:41:3f:c9:
fc:c5:49:03:a5:86:02:d0:a0:d3:b2:87:11:b6:33:
36:e4:37:ff:81:4f:a3:84:e6:fb:71:a6:4d:34:78:
68:8c:15:47:ec:55:0c:5d:40:b2:4f:4f:88:32:0e:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:1F:63:AF:C8:A7:AE:FA:30:51:C1:71:9E:D0:B8:63:E7:05:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/752c601a-7e44-38fa-a562-2121c064f9d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
X509v3 Authority Key Identifier:
keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.254.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:af:2e:14:36:2f:84:e3:f1:32:a3:38:45:b6:15:28:83:f5:
49:e1:89:23:fc:41:a0:9b:75:2d:a9:01:e2:90:59:5e:03:d9:
3a:cc:e6:da:80:91:95:c6:7f:d0:d7:66:60:10:6e:4e:b8:80:
eb:06:9b:25:de:29:bc:e4:f9:96:54:45:e5:b6:f9:db:1a:61:
a5:b0:f2:6e:19:33:7f:48:fe:c9:b8:17:9a:11:c2:02:06:ad:
a9:a5:ca:3d:68:80:a2:d5:c9:13:af:17:5e:77:61:7d:17:7a:
24:e4:e4:3d:e6:2a:2a:5c:c1:59:80:8c:b1:7a:e0:4e:04:ef:
50:12:35:c1:08:ce:c5:d8:98:b8:22:d9:2e:08:a4:bf:28:94:
b3:ed:54:ad:1a:dc:56:05:11:a1:32:c1:2d:00:bc:55:a9:bd:
0b:5c:cb:ab:1d:83:fa:03:b2:57:57:58:45:2f:40:6d:d8:eb:
0c:0b:c5:5f:05:a0:a3:bd:bc:9b:24:8b:52:39:2f:fe:1b:06:
6c:99:80:96:16:55:96:ab:ac:fe:06:dd:86:13:ea:e6:6c:22:
17:8d:18:72:7b:02:d0:71:7f:2e:d4:1a:7d:ed:73:88:95:c9:
af:7d:71:71:da:af:4c:c2:60:02:d5:4c:cb:a2:c5:aa:8e:9a:
01:45:05:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:48 2025 by rpki-client