Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa
File: 0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa (raw, json)
Hash identifier: gvLepEz1AcENyDY9Ke1OhRdaQ1IMx2LGFeEMbSop/78=
Subject key identifier: F5:88:21:BE:3D:3D:D9:08:62:76:E2:C2:12:25:90:28:13:F2:E5:FB
Certificate issuer: /CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1
Certificate serial: 010D0C9F43285847FFF5EC177DA6EB5E60E51900
Authority key identifier: 99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa
Signing time: Mon 25 Nov 2024 19:46:35 +0000
ROA not before: Mon 25 Nov 2024 19:46:35 +0000
ROA not after: Sun 23 Feb 2025 19:46:35 +0000
asID: 26677
IP address blocks: 192.139.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:f5:ec:17:7d:a6:eb:5e:60:e5:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1
Validity
Not Before: Nov 25 19:46:35 2024 GMT
Not After : Feb 23 19:46:35 2025 GMT
Subject: CN=1d10fa2f-18b8-402f-b84d-35956dd4fd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:b4:71:e6:ee:ff:2e:23:e0:93:25:25:cb:
dd:65:0e:f2:af:e2:df:d2:95:b7:f8:24:f4:88:4c:
e5:f7:25:cf:02:85:49:2d:e0:b4:38:61:9b:03:ff:
81:87:86:88:2c:d9:c6:08:7f:c6:c4:1f:fb:30:7b:
53:22:90:73:e3:49:1b:2f:d2:89:91:7f:d5:2d:66:
c4:d7:c2:1a:79:0c:d2:0c:d9:86:68:cf:94:a6:b6:
35:91:97:f2:ff:3b:8e:e0:91:13:4e:cd:82:05:fb:
55:b4:78:8e:c1:6f:a1:a8:1c:b0:85:08:7b:82:8a:
2d:2c:c9:bf:15:76:ba:d7:6c:45:c7:27:67:ba:d0:
91:56:70:64:09:4c:6a:37:ef:1a:82:68:85:a6:7f:
8a:41:a2:0d:08:34:b3:74:1f:8a:1c:5f:8e:02:1f:
90:1c:ee:ae:0f:75:ec:c1:a0:dd:4e:73:77:84:ef:
d7:e9:ad:05:89:5d:9e:44:b8:17:94:6b:85:7c:02:
80:39:17:d7:d4:41:ab:ca:a3:38:f0:d0:49:f0:bd:
d4:0f:e5:24:5e:e2:e5:62:c0:ae:43:61:f9:13:63:
b0:2c:e8:bc:b0:b2:4d:19:6a:0e:fa:cc:ee:82:9c:
b0:c7:bd:cc:18:73:47:20:ec:fe:a7:f3:0d:9e:65:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:88:21:BE:3D:3D:D9:08:62:76:E2:C2:12:25:90:28:13:F2:E5:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl
X509v3 Authority Key Identifier:
keyid:99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer
sbgp-ipAddrBlock: critical
IPv4:
192.139.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:ad:5c:8e:9a:c7:b2:e0:80:35:28:15:5b:30:0c:cd:7d:b5:
b6:1e:88:2f:1e:6b:61:54:dc:79:63:d8:3d:94:b2:45:42:ce:
db:28:ff:9c:a4:fc:38:7b:92:d6:74:2c:32:41:00:a7:97:21:
c3:20:d4:ec:f6:6b:a5:37:07:3e:60:be:1e:45:26:6a:25:0e:
53:5a:35:d7:41:4c:a9:e9:9d:90:6b:4f:5e:d6:80:0e:a8:16:
4e:73:f5:ed:f1:bd:73:f6:e6:35:11:2c:6d:90:4e:f7:ab:09:
be:89:24:6f:db:e0:dc:8b:65:68:15:cb:38:da:99:b6:5a:64:
6b:09:1f:33:ba:02:fa:ac:77:3c:3b:7d:0f:31:bd:df:e3:97:
71:b1:d6:9e:b5:64:ee:d3:ef:ee:50:3d:52:8f:0a:c8:65:b8:
49:e5:e0:99:08:39:a1:24:92:6f:9e:2b:a0:14:8e:a3:60:06:
52:34:04:01:6c:fd:8d:60:40:d7:5d:b5:92:9e:5e:89:2f:5d:
89:8f:7a:e9:22:7e:56:8e:36:4b:1b:fc:2f:e0:c5:b9:2f:09:
c1:4c:a6:8c:5c:40:46:ef:dd:63:94:da:a2:15:f1:ca:88:bb:
2a:d9:65:0f:b5:4b:a6:78:e3:a7:22:9d:2e:45:07:6f:41:e7:
27:7d:4e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:02:11 2025 by rpki-client