Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa
File: 19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa (raw, json)
Hash identifier: xY271Y/PtWiEWncOARqvsC7qKB2R3hZ1wNUeiBe7bOA=
Subject key identifier: 98:DC:24:E7:92:52:B9:9D:C2:BE:A1:09:1E:9A:C1:DC:50:0D:18:D5
Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial: 010D0C9F43285847FB1A32EF78B8E2627498F640
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 5645
IP address blocks: 192.252.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:32:ef:78:b8:e2:62:74:98:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=25c79635-2de2-491f-874a-e02b98100525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:18:25:ca:65:0d:36:e6:b3:8f:87:61:df:
a2:c7:92:86:da:7c:61:4b:ce:3c:3f:7a:44:90:1b:
36:2d:24:80:fc:cf:1d:74:46:fa:75:09:e8:4f:50:
7a:7a:06:5a:b0:95:c2:60:10:13:d4:6d:15:11:1b:
89:65:74:a8:90:ce:88:d1:c7:1b:27:97:d7:49:7b:
1c:2c:ac:bb:3f:ab:0f:82:1d:d4:01:10:b7:31:ea:
a9:58:ee:a8:cf:1f:da:9a:49:e5:ca:57:89:87:98:
ee:91:48:8c:08:8d:2d:a0:4d:53:20:04:8f:b3:1b:
ee:35:a8:b3:38:ba:49:eb:69:a8:a2:5c:10:54:1c:
db:2d:ec:38:d4:78:02:08:6c:27:63:8e:34:c8:fe:
7f:66:da:bd:6c:d5:07:74:23:49:9a:dd:18:6e:18:
86:7e:13:73:8c:72:a6:fc:98:0a:7d:e3:39:99:8f:
56:2c:89:ba:e8:11:f7:5f:d3:d1:bc:fa:b7:d8:75:
06:1d:fb:44:80:d1:ac:04:b7:e2:48:fd:35:ed:64:
a8:cf:57:39:bf:8d:d6:fe:a0:56:e5:3d:94:df:b4:
ba:f4:ad:fc:e6:67:fc:67:3e:71:82:66:3b:7b:4f:
7a:0b:22:0c:36:46:00:28:1b:d2:cc:0e:3f:09:c8:
f7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DC:24:E7:92:52:B9:9D:C2:BE:A1:09:1E:9A:C1:DC:50:0D:18:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
X509v3 Authority Key Identifier:
keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
sbgp-ipAddrBlock: critical
IPv4:
192.252.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:4b:bc:29:1b:42:0b:54:ed:63:84:33:84:b2:d9:bd:bc:25:
0b:ac:a4:d2:44:db:e5:6a:b8:19:4c:85:b9:fb:56:4c:ca:05:
bf:9a:36:64:33:fa:9f:99:8c:79:03:29:b4:ae:24:40:14:11:
63:a9:e9:83:62:7b:fe:6e:65:dc:89:94:2e:b1:ea:58:59:f9:
3a:38:9a:52:ce:08:b3:b0:84:8a:0e:e2:da:73:e0:93:5e:6e:
20:9e:61:2e:65:20:08:89:f5:ea:dd:18:a1:46:a7:0f:26:76:
00:aa:06:84:78:4e:eb:cf:13:01:6c:2e:f1:55:1f:8c:8a:79:
9c:c6:d2:e6:b1:b6:f8:34:3a:3f:40:13:8c:e7:fe:72:b7:b1:
6a:20:81:ea:27:14:98:55:40:dd:2a:96:a4:2a:a9:a4:aa:f7:
05:04:6d:f5:f3:59:b9:28:e3:78:78:c4:67:5e:57:10:b0:b3:
be:5e:ae:1f:de:03:fe:9c:07:a1:e4:62:3c:b8:2f:03:23:c6:
5a:db:87:ae:38:ec:be:69:84:d8:ea:4d:f6:46:7e:a3:45:82:
ae:ef:e4:c6:cc:e3:b4:1b:41:a2:5a:6a:86:d1:82:6a:37:9d:
0c:b7:a3:02:c5:2d:1b:72:52:c5:5f:0b:4f:ea:f2:41:83:89:
ab:44:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:09 2025 by rpki-client