Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa
File: db155d25-f432-3f34-9f10-30f49558b253.roa (raw, json)
Hash identifier: XjsCgRrz9mqcT9WBfSLgKvgORzSHRIpn/khhwEIR7Ec=
Subject key identifier: B2:50:48:C0:CD:D6:A5:65:FC:35:36:50:8F:F0:76:6D:0C:5D:93:42
Certificate issuer: /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial: 010D0C9F432858480644FEF97F9A55019E8DB000
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 16509
IP address blocks: 192.111.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:fe:f9:7f:9a:55:01:9e:8d:b0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=9a5a95bf-8ce9-4a4c-9a46-7460dbdf05f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:cd:bc:77:be:df:be:ca:33:c0:8d:5c:62:
e6:2f:52:35:91:4e:4e:52:f9:af:a0:6b:fb:21:a4:
70:36:d9:98:2f:17:d3:cd:73:41:a1:bb:b9:d8:05:
4d:71:23:41:9e:c9:23:77:1d:b2:fa:4b:40:ee:5d:
fd:1b:3d:fc:f0:95:c9:88:83:54:60:cb:88:c2:c4:
7d:e3:e2:34:dc:3c:13:b4:e6:ba:fb:89:0e:af:a4:
6d:be:70:0f:df:8b:44:d3:2b:a3:e3:78:fe:eb:4f:
d0:05:8c:a9:c8:c0:9a:2e:72:7f:60:c0:ca:32:07:
29:24:7b:24:f1:ab:e1:eb:49:e3:5b:6f:43:30:67:
74:ab:94:b2:65:6c:6b:42:68:8a:3b:55:28:2b:67:
ca:32:ea:a1:16:3a:57:54:1d:ba:af:85:8a:c4:bd:
5f:d1:61:06:2f:2d:fa:b5:89:b8:98:50:cc:f7:9e:
b4:be:c5:b7:5d:87:6b:71:78:f8:53:ac:a5:cb:60:
aa:5a:e2:11:39:fd:5b:7d:cc:06:15:3e:c1:a1:cb:
29:f1:67:72:d6:45:10:2f:72:ee:2c:d9:38:c1:91:
16:59:c8:a6:f6:d4:eb:98:7a:4b:5b:fe:33:f3:29:
8a:44:be:29:07:d9:92:41:53:51:50:64:ce:59:1e:
4b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:50:48:C0:CD:D6:A5:65:FC:35:36:50:8F:F0:76:6D:0C:5D:93:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/db155d25-f432-3f34-9f10-30f49558b253.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
X509v3 Authority Key Identifier:
keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.111.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:df:48:4a:ec:f3:03:be:7f:24:ca:2c:14:cc:cf:7c:76:1a:
5d:21:9c:35:a8:e9:c9:0f:ff:a8:ff:f6:2a:39:62:be:11:cc:
6d:1f:9e:86:12:85:34:1b:ad:14:fd:22:7d:9f:fe:ee:7c:80:
ab:56:20:99:83:d9:ad:14:8d:d0:b7:5f:ff:9d:38:73:70:39:
4a:69:28:b2:db:07:2c:d0:f7:3d:a1:3e:8d:0d:8d:23:41:a8:
a5:e7:ad:e5:54:ca:87:a7:c5:30:66:ca:7e:b9:b5:5a:ca:02:
22:08:f7:e7:a0:c1:89:88:e1:12:73:2d:eb:6f:89:1d:c2:fb:
72:0a:55:4f:07:70:af:4d:32:f6:75:eb:fe:ba:51:81:90:ca:
2e:19:65:f9:ff:97:56:f9:d2:f4:cb:4a:62:83:95:ba:6a:4c:
50:cc:1d:9a:11:99:26:af:8c:8c:12:b2:a7:db:6c:01:cb:ec:
25:0c:3a:e6:49:bd:74:47:30:b9:c2:dc:44:3a:17:b6:f1:f8:
4c:10:66:77:e6:cb:d0:0f:4e:8c:73:8d:06:0a:f3:31:c9:3b:
fc:20:17:cb:a3:3e:6d:58:ce:d4:3e:d3:13:47:de:af:fd:0b:
ff:89:f8:a9:ff:e4:57:9d:8e:53:97:a3:fa:34:6a:7d:6f:41:
45:c0:fb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:49 2025 by rpki-client