Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/f8f28901-c226-35c0-b637-349a0ecd0236.roa
File: f8f28901-c226-35c0-b637-349a0ecd0236.roa (raw, json)
Hash identifier: pmnMy01d20S6EXdYrq71pFyEiAwm96NMJUbk1mL5rTU=
Subject key identifier: FC:9F:42:31:4C:0F:86:CC:73:2D:27:73:16:AE:2A:25:ED:39:38:9E
Certificate issuer: /CN=c682a716-bb81-4916-beba-279628f77a85
Certificate serial: 010D0C9F4328584909E6A54A127FCE591C1D6B00
Authority key identifier: 31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/f8f28901-c226-35c0-b637-349a0ecd0236.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 192.122.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a5:4a:12:7f:ce:59:1c:1d:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c682a716-bb81-4916-beba-279628f77a85
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=0b68e4cc-77c7-4530-b6bd-befbd1407548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:9a:ee:9f:d8:9b:6d:c2:54:a6:a7:65:ed:
54:08:0e:19:4e:bb:1e:c4:e2:bc:d5:c0:75:ff:26:
7c:30:47:0f:77:19:5e:9e:0d:06:af:ca:d7:47:85:
4e:e2:5f:02:6e:eb:06:82:ec:90:f7:cf:fc:25:5e:
c6:3a:c1:25:ff:61:4d:38:b7:7f:c3:1d:04:6e:1f:
53:4f:db:40:cd:e2:06:20:c5:c8:7b:a4:87:ff:27:
58:14:7a:b7:d2:32:e6:48:1b:34:be:08:a1:bf:05:
0c:27:6e:8d:65:b8:24:d2:fe:05:85:84:9f:d7:7b:
e7:dd:b0:ce:44:00:bb:31:2e:96:27:49:47:d4:36:
3c:da:01:d2:6c:14:84:f3:71:7f:ad:33:8f:ad:d9:
dd:53:6c:75:05:22:97:f8:84:2e:5a:3c:ca:9e:54:
27:cd:f9:a5:51:e9:1e:92:01:5a:58:c1:48:6b:d9:
69:0d:59:22:ab:ac:c2:a7:38:32:fd:62:5e:f2:ca:
1b:f5:fd:a9:de:90:5e:b6:f0:1a:33:cf:8b:d5:83:
6f:9d:41:f6:8b:1c:43:50:9c:95:a2:7b:48:4a:a8:
38:fa:b2:f0:7e:cd:4b:00:d2:5e:45:10:d6:d7:e9:
2a:17:84:4d:ae:cf:7a:8b:a8:00:9a:ac:6d:4b:e9:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9F:42:31:4C:0F:86:CC:73:2D:27:73:16:AE:2A:25:ED:39:38:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/f8f28901-c226-35c0-b637-349a0ecd0236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85/c682a716-bb81-4916-beba-279628f77a85.crl
X509v3 Authority Key Identifier:
keyid:31:33:86:30:81:B6:CE:2C:43:BF:2D:C1:E2:63:81:23:C4:07:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c682a716-bb81-4916-beba-279628f77a85.cer
sbgp-ipAddrBlock: critical
IPv4:
192.122.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:37:87:53:82:66:23:a7:eb:1a:e9:2c:88:69:a0:a0:d0:d0:
eb:04:fe:39:08:84:ff:78:fa:f4:5e:2f:a9:43:33:e1:3b:b2:
30:bc:dc:dc:84:1e:bb:9b:c0:29:a2:06:04:46:6d:e1:e6:d6:
51:42:b6:6e:13:91:57:1a:6e:cc:1e:3d:5b:20:e5:6b:5c:79:
b6:7f:30:75:01:20:8c:69:5f:72:2e:10:06:c9:0f:f0:94:1e:
5e:b6:31:f3:af:d2:aa:7c:b6:53:af:3c:ed:16:66:5e:5f:ae:
e4:a6:3b:62:e2:f2:ce:4e:ac:de:be:ca:1b:3e:7f:16:23:bf:
1f:8b:67:85:e3:ea:af:c2:f1:11:29:0d:84:70:c3:c3:37:14:
12:68:41:7e:22:d7:7f:59:5d:33:a7:a2:d0:99:58:6a:f5:e4:
7f:06:76:5c:aa:ac:b0:a1:fe:53:b0:db:9a:89:e7:fe:af:fb:
73:bd:57:b2:3d:a6:31:8d:57:58:12:1e:02:ef:9b:3d:26:e9:
c3:f3:e5:49:c2:2b:0f:5b:c2:ce:a7:f8:66:38:0a:ac:03:0e:
ee:df:3f:bf:86:2f:77:f4:79:b4:51:dd:e6:8a:cf:d1:ed:55:
91:4d:58:8d:01:39:7c:bc:3f:17:ed:2a:92:60:24:d9:82:c3:
07:f0:fe:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:05 2025 by rpki-client