Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa
File: fde4e71b-e3e8-3394-a523-a42805ae411a.roa (raw, json)
Hash identifier: qCKOElvT4M4vGfZwSxfFXCXt44XC7lIgmxgcDCXfeqc=
Subject key identifier: 21:E7:AA:9F:A7:27:D0:B9:EB:7C:F9:EA:B2:4E:4E:65:BA:47:7B:52
Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial: 010D0C9F432858485B6AF2659E63678F96260260
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 14500
IP address blocks: 192.151.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f2:65:9e:63:67:8f:96:26:02:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=d7c07c86-5400-4f6b-ba28-0b197e195242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b9:e9:99:02:88:86:1f:e2:bf:8e:6e:1d:ee:
a4:21:c5:b4:8f:1c:6d:b4:dd:6d:1e:8d:5b:5c:f2:
48:da:a7:6b:ac:91:06:71:d8:c6:a7:91:84:5c:b1:
88:58:06:67:e1:eb:c0:ef:04:ae:3d:c8:3f:23:aa:
19:d1:fd:aa:61:b9:27:c3:12:7b:f5:22:8d:36:0c:
57:6a:ac:74:97:a1:ab:39:ba:f5:25:88:e0:39:a0:
05:ee:d9:45:bd:1a:79:9e:d9:f3:cd:2a:36:30:03:
8c:7d:7d:8e:bc:df:c4:ca:28:24:99:2e:8a:a4:69:
16:1c:c0:76:8c:60:cb:1b:b8:d7:04:69:31:c1:68:
f6:63:2e:7f:32:6a:f3:78:99:b7:e1:a7:22:9f:40:
82:b5:a7:0a:9b:21:22:36:4f:99:13:c8:2a:e8:44:
8a:18:5c:e0:6f:07:3b:b4:85:1a:f5:1a:11:63:ee:
2c:30:98:99:dc:a2:80:4c:63:4a:45:00:ce:43:9b:
3d:e4:17:f6:ed:d8:26:af:6c:3d:8f:5c:d4:cb:df:
f1:f1:a9:a8:f8:ed:bd:0c:e6:d3:83:2f:ce:86:3e:
ee:f8:2d:c2:1e:14:a2:06:27:49:35:4f:f2:6b:50:
6b:ce:97:1a:df:2a:7d:bd:e1:b4:64:0a:c9:35:df:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E7:AA:9F:A7:27:D0:B9:EB:7C:F9:EA:B2:4E:4E:65:BA:47:7B:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/fde4e71b-e3e8-3394-a523-a42805ae411a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
X509v3 Authority Key Identifier:
keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
sbgp-ipAddrBlock: critical
IPv4:
192.151.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:34:57:6b:16:6e:ea:3d:a1:8c:8b:ac:da:90:b5:95:f3:35:
b7:7c:4e:d3:4e:18:1f:4a:a6:5e:23:2f:91:b4:d9:0e:77:69:
8b:42:41:05:ea:8c:17:c3:f5:d8:5e:98:20:0c:c0:bb:99:af:
a2:f1:8a:57:22:c7:0f:7d:8f:11:c4:46:ff:b1:9c:64:b5:e0:
de:64:9a:5c:80:de:5d:dd:fe:40:90:3d:10:e6:fb:2e:ab:0a:
b5:01:cf:e8:70:0b:e2:51:da:c4:e1:a5:09:7d:a0:98:d4:9d:
a4:69:99:99:19:a3:1e:5a:96:eb:76:6a:7a:b4:3b:8c:92:3f:
e3:61:15:c6:94:f5:cc:49:25:b1:f6:37:d0:07:03:7e:71:39:
eb:00:a8:36:f2:62:29:41:41:2b:ee:e1:43:48:f0:69:1f:32:
cc:c9:f9:d8:ca:c4:8c:2a:18:74:d7:ac:b9:d4:44:42:01:4b:
dc:05:16:98:c5:f8:9b:5b:3d:2d:d3:22:cd:1b:53:a0:5e:ad:
a9:67:d0:50:a5:fa:af:eb:0a:b3:a2:53:65:44:b0:6d:ea:d8:
fc:f9:50:06:71:4a:05:fa:ac:7a:9d:c9:0a:ac:a5:b1:13:98:
3e:bf:92:89:e9:a4:0a:ce:d2:7b:2d:0f:93:0d:99:c9:44:a8:
85:db:54:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:15:42 2025 by rpki-client