Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa
File: 38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa (raw, json)
Hash identifier: wdvpp0l9dMAwrvCnO8oXwEyJNYRcvncssnP0cttdr8g=
Subject key identifier: 83:16:CF:E5:ED:62:9D:87:86:0F:9B:9D:47:91:52:5C:64:3D:3D:96
Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial: 010D0C9F432858480644F75F59E3243B4629FF00
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 7224
IP address blocks: 192.111.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:f7:5f:59:e3:24:3b:46:29:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=a424b247-029b-4ae5-83d1-56f9252c6808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:53:bd:f4:1b:f9:07:bc:a2:ca:1a:ff:0b:f0:
59:fb:4a:fe:e4:cd:d5:98:36:ed:cf:b6:fc:2a:b9:
eb:5f:27:f9:40:29:f9:6a:e1:9e:53:e0:23:8d:21:
69:29:37:3e:58:6d:90:37:6d:a0:83:30:8c:65:f2:
41:a6:57:67:56:ae:05:7e:b6:dc:8e:94:cf:48:6a:
3a:fc:2d:7a:fd:f8:4c:11:32:6a:82:2c:e7:d7:9e:
55:63:2f:59:cc:28:07:ea:f1:75:2b:93:84:c0:7d:
82:5c:14:5f:d9:5c:e2:2d:03:e4:75:52:0f:36:a7:
6f:05:c5:75:61:22:29:e1:4e:cf:b1:85:e2:ad:eb:
0a:b8:72:4d:f5:c1:f2:e9:b3:78:70:36:a9:8e:1b:
d7:71:e7:1b:84:de:9b:4e:fc:ad:21:fd:81:49:10:
22:aa:68:a4:d7:2e:c1:72:17:9a:8c:da:3a:fc:b8:
dd:f1:04:fa:37:9e:2d:e0:5b:67:f3:c5:6b:77:d6:
22:ec:b3:73:16:d7:da:12:f9:5b:dc:fb:aa:78:59:
56:0a:e7:03:95:33:75:29:24:e7:8c:cd:3d:32:0c:
78:ef:19:78:5a:84:f9:98:c8:4d:e8:38:b4:92:d8:
2a:15:f6:bb:98:f2:9f:31:ee:68:ad:31:a7:f4:93:
23:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:16:CF:E5:ED:62:9D:87:86:0F:9B:9D:47:91:52:5C:64:3D:3D:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/38cbafe5-ac1f-304e-99c4-7b00ab42e8fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
X509v3 Authority Key Identifier:
keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.111.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:bc:7c:75:7e:78:12:98:ca:dc:a6:41:bd:91:42:75:36:04:
0b:89:f0:46:f9:a5:cf:50:4f:9b:3d:e0:b4:d6:f1:c1:79:fc:
19:ff:c3:65:7b:26:17:26:9c:9e:41:15:ab:29:55:11:6c:21:
79:69:24:2b:4d:b9:2b:40:6b:4a:11:47:06:44:6d:a8:52:9b:
87:02:2a:ee:5a:9b:c4:f7:d3:be:aa:44:fe:1a:48:a7:4b:2e:
e1:14:0e:4f:a5:23:c2:cc:71:71:db:0c:4f:e9:ad:72:d2:f5:
32:6a:60:9c:8b:0a:c0:37:83:9f:82:c1:60:d8:ae:72:8e:b7:
14:00:52:af:85:4a:31:5c:49:4f:d6:e7:c5:f9:d2:47:b8:a5:
bd:8a:52:b4:53:97:37:dc:52:28:bb:0d:c6:0b:f9:01:0a:62:
a7:86:9e:a4:fa:7d:e2:23:93:d1:cd:ce:f7:e1:3e:66:72:81:
52:7f:f3:48:74:3d:73:55:06:43:9e:97:fd:bb:a3:82:62:a6:
72:c3:73:89:1d:2e:9c:07:dc:6e:5f:54:f3:7a:e6:41:8a:03:
ae:98:59:96:af:cf:b4:fa:50:c8:03:00:16:27:c8:43:3d:9b:
0a:5d:16:96:7e:a3:05:8b:3c:75:9a:63:cd:b1:79:81:e4:06:
97:01:2f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:44:21 2025 by rpki-client