Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa
File: 68c427e0-a575-3b64-98f5-5f2c2b108936.roa (raw, json)
Hash identifier: RKdZeG/Dm4dE92vhwqdbcIBUPgosXsyF6CV4BvgL2CI=
Subject key identifier: 31:E2:C3:DD:FA:92:6F:4C:27:4D:60:16:AB:7F:15:69:F9:16:87:4F
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150CF768B205CA3DE05E3A0
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 931
IP address blocks: 128.254.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:cf:76:8b:20:5c:a3:de:05:e3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=a1859c1b-89bb-4d31-9e52-9928287fd05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:01:4d:fc:c4:39:9d:f0:bd:91:25:72:af:
3a:c0:75:6a:28:13:fd:eb:fd:6a:42:4c:3d:22:89:
7d:ec:06:90:fd:b7:b5:40:94:9d:3b:75:a1:20:c3:
1a:9e:57:70:5c:68:7e:37:cf:5c:03:15:12:69:e1:
bd:39:06:31:aa:92:8b:d2:c4:77:c8:3e:44:68:f1:
15:f5:17:94:e0:89:cd:2b:39:4a:82:06:36:e6:f8:
5e:8d:7f:7c:a9:35:93:9c:b2:29:70:bc:3d:df:bc:
fb:1c:f3:a2:8a:43:8d:b3:72:f2:ef:96:7d:e3:b9:
62:f2:14:48:6c:f9:09:f3:04:70:9e:53:6e:b4:47:
9f:76:06:dc:e7:a4:c4:cb:68:68:ee:c2:59:61:be:
cb:26:53:1b:0f:ea:10:25:c0:97:72:26:2d:e4:cb:
36:d6:aa:dc:0d:d9:e1:33:25:5c:35:d1:52:13:01:
aa:41:28:04:df:8a:95:32:2f:87:3f:f8:56:76:eb:
19:39:51:45:f6:47:17:19:36:cc:72:0e:7d:5e:33:
fb:84:43:f7:00:c3:6d:eb:a6:6d:ba:ec:b0:d6:60:
23:e2:fb:ca:f0:9f:18:8b:38:82:f4:ac:59:c9:9d:
ff:fa:b6:45:a5:c7:ea:83:45:c6:1c:bf:15:5a:00:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E2:C3:DD:FA:92:6F:4C:27:4D:60:16:AB:7F:15:69:F9:16:87:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/68c427e0-a575-3b64-98f5-5f2c2b108936.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:0d:3a:5a:cc:fe:ad:ce:95:09:b0:4c:1c:0b:f7:0f:65:53:
0f:a2:d6:df:0e:39:31:74:54:79:7d:bf:2c:a0:eb:80:e0:30:
aa:24:79:df:5e:b4:16:77:e9:88:12:0e:80:64:4c:5d:71:ca:
af:d6:5b:7c:39:87:c1:b7:43:20:78:d0:95:2b:22:36:31:cb:
93:82:ea:27:ad:db:e6:50:a9:8d:0d:a8:9f:13:97:c3:5b:72:
48:63:d0:ce:da:e4:9e:88:d6:7b:66:c3:c4:64:ef:0e:f2:fc:
d7:b5:bc:49:9d:cb:96:82:2b:9d:a4:20:09:c5:4c:b8:95:fb:
f1:08:6c:37:0c:20:89:09:6e:03:24:66:5d:a8:06:01:25:2e:
bb:3a:67:56:e9:61:ce:b9:15:27:c0:05:d9:68:20:e0:21:e4:
68:5e:f0:2f:ab:13:e4:a3:7d:61:06:fc:e5:73:a4:1d:cd:47:
e1:f6:a9:33:c3:75:95:54:b6:d0:5b:ba:04:3c:ab:f8:31:fa:
1c:92:f2:6d:db:62:eb:82:fd:46:51:1f:a4:37:a1:e8:17:b7:
b9:85:46:87:ab:4a:cf:b6:f6:a3:17:b2:a9:c6:d9:4b:b6:4d:
97:29:8a:19:09:5e:37:bb:af:fc:d7:b6:4a:27:ab:c7:1f:38:
5d:26:e3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:47:19 2025 by rpki-client