Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/2541f1b1-088d-30fb-a498-b60976d5c04d.roa
File: 2541f1b1-088d-30fb-a498-b60976d5c04d.roa (raw, json)
Hash identifier: yGDo12ZtWeYEIhrqc3vUFA+LKKGw4xe7dtD6JDJEfQo=
Subject key identifier: C3:28:BA:B3:A3:68:AA:2F:A3:F2:D0:5C:E6:65:EE:EB:5B:95:28:C8
Certificate issuer: /CN=1fb001d4-3a2b-436f-a572-51822a315945
Certificate serial: 010D0C9F4328584819CFCDDEF29CD68D0D134040
Authority key identifier: 74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/2541f1b1-088d-30fb-a498-b60976d5c04d.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 395363
IP address blocks: 52.119.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:cd:de:f2:9c:d6:8d:0d:13:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb001d4-3a2b-436f-a572-51822a315945
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=11db0b03-d021-43e9-adc7-5be75625fd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:b9:8e:6d:68:46:d8:37:94:4f:9c:b9:d7:
1a:17:98:d1:68:e1:81:c5:4e:01:ea:14:d4:e3:6a:
2f:57:7e:fc:c4:b9:4c:de:c3:cc:df:c7:9b:f8:4a:
09:73:8c:bb:0e:b6:e7:fa:8d:60:23:b5:9c:8e:7f:
74:bf:cd:c8:db:1a:f9:92:38:45:e9:7e:ba:57:87:
7f:19:76:db:49:38:d1:f8:76:8c:c0:b7:eb:3c:32:
cb:75:bf:ee:07:5b:16:bc:a6:41:3f:36:4b:b6:16:
9c:04:92:9e:ac:5b:04:56:84:2b:b3:67:58:38:00:
ab:c8:f8:19:1a:f2:fd:13:9d:ff:5f:2d:bf:95:12:
70:a9:d4:a1:c6:d0:b3:f3:d5:f8:18:58:ab:0b:62:
76:99:27:af:33:6e:d7:3d:39:9d:8f:88:ea:37:4d:
8c:35:15:47:c0:38:d9:e0:f7:e5:68:22:2c:27:20:
a7:7b:ba:f6:53:36:af:5f:8d:f0:69:d0:5b:0c:57:
66:37:24:44:c5:d5:5d:e9:31:52:f5:5b:50:6d:5d:
f0:0b:f3:43:5f:90:84:a1:d1:5b:75:41:9b:a9:11:
e5:48:e6:37:5b:b2:b3:e8:12:2f:cd:ff:1c:d0:73:
48:57:19:80:4f:56:b0:49:d7:d1:71:0c:e3:b6:55:
00:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:28:BA:B3:A3:68:AA:2F:A3:F2:D0:5C:E6:65:EE:EB:5B:95:28:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/2541f1b1-088d-30fb-a498-b60976d5c04d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945/1fb001d4-3a2b-436f-a572-51822a315945.crl
X509v3 Authority Key Identifier:
keyid:74:A7:7D:4E:AC:37:8A:A8:0C:D0:C2:2B:4C:5D:6F:5B:36:BC:20:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1fb001d4-3a2b-436f-a572-51822a315945.cer
sbgp-ipAddrBlock: critical
IPv4:
52.119.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:50:da:93:cc:78:68:ff:7d:38:3e:cc:c5:dc:0a:ba:7f:e1:
cf:4b:50:aa:04:fd:65:36:13:67:4c:d2:dc:e1:c0:6f:d3:22:
d8:c5:fa:f7:7d:84:68:0b:e8:b7:21:a4:c0:e1:c6:e7:d5:95:
5f:23:a8:7e:c5:b4:a1:84:cc:13:a5:74:11:93:a7:9b:3b:a4:
c0:ec:bc:96:14:45:c9:d1:03:fb:9f:10:4f:66:e2:bb:ba:9a:
7e:45:b2:3d:56:8d:57:0d:38:4c:54:50:82:d8:5f:2b:55:0b:
03:9d:3d:84:82:6b:4b:a0:d2:7d:a7:f6:09:ed:f0:5e:60:e9:
f1:58:ec:72:b8:77:26:b6:f2:f8:1e:60:41:fd:08:c0:60:2c:
c0:7c:e9:73:63:cf:eb:68:b0:7b:bb:2d:52:74:e3:18:d3:8f:
b9:65:30:62:96:31:af:93:25:aa:fc:52:82:b3:87:55:1b:4e:
ae:27:d1:20:4c:fb:8b:77:43:3a:44:30:01:2c:05:58:96:0a:
21:7b:80:9c:3f:79:64:9d:3d:c5:39:85:03:34:33:a2:f5:90:
62:1a:6c:72:6b:2c:66:b6:65:7c:76:79:30:82:8c:f4:ac:94:
6e:ea:5a:50:20:e5:a4:82:2d:a4:2e:8e:0b:1d:96:55:40:51:
c5:dd:42:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:03 2025 by rpki-client