Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/75b7045f-c36c-37c2-b78d-396dac2abcf6.roa
File: 75b7045f-c36c-37c2-b78d-396dac2abcf6.roa (raw, json)
Hash identifier: qzOUhsHXgTf7PALW0bZnHToJ5sl8F3km8N3Y9cTQhLM=
Subject key identifier: 55:F8:BC:C3:A2:A8:E9:68:69:7E:DA:21:3F:0A:E0:AC:84:4E:50:C7
Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial: 010D0C9F43285848C150CFABAEE58CCDD8780AC0
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/75b7045f-c36c-37c2-b78d-396dac2abcf6.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 931
IP address blocks: 128.254.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:cf:ab:ae:e5:8c:cd:d8:78:0a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=638bf39c-7ac1-4869-9a15-fed6e858c48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:68:01:78:fe:22:f5:74:32:ff:fc:0d:81:
f6:ca:cf:07:3e:41:d0:b1:f4:e7:9b:c8:56:e2:a9:
e5:02:51:da:a3:a1:f5:29:c0:d6:83:30:52:4f:90:
1e:3b:4a:ca:77:97:8e:57:24:8a:78:a0:7d:04:64:
f5:0e:51:90:e4:34:10:b0:b0:de:56:19:4d:d4:b7:
e6:72:01:38:a1:43:e2:c4:72:e2:34:e8:86:d6:15:
b2:6d:f6:58:91:1a:26:ae:3c:8f:21:6b:5b:52:7f:
25:52:5f:7c:c6:f7:ea:fc:82:39:e0:15:e8:be:98:
97:43:5e:54:be:a9:d6:c3:03:65:fe:9f:1f:4e:96:
8a:3c:3a:72:42:ef:34:61:db:a1:d3:8a:48:39:1b:
36:8b:1f:b2:53:c9:88:61:bf:84:ac:6e:41:d6:37:
49:dc:3a:79:3a:72:3b:d8:33:5b:3e:c8:0c:fa:f6:
47:6a:1c:a5:ed:5c:d2:8e:fd:c2:80:a9:0b:ac:91:
cc:61:9c:83:97:ee:0c:ac:c3:00:be:49:c0:b9:37:
c1:7c:c0:34:a3:52:b5:e6:6f:02:64:3c:a5:ed:de:
bc:03:d8:60:ef:de:9a:cd:c1:cd:4e:ef:c7:97:34:
c0:61:4e:bc:a4:23:9a:52:0e:1b:88:6f:eb:31:25:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F8:BC:C3:A2:A8:E9:68:69:7E:DA:21:3F:0A:E0:AC:84:4E:50:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/75b7045f-c36c-37c2-b78d-396dac2abcf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
X509v3 Authority Key Identifier:
keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
sbgp-ipAddrBlock: critical
IPv4:
128.254.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:36:21:67:4e:c4:c3:2a:c9:1c:29:00:fd:02:ee:94:f1:9c:
d4:94:41:97:15:c7:0c:d8:49:8a:c4:9c:ba:11:3e:47:75:e2:
e3:aa:81:38:25:39:ee:b7:cd:de:73:de:df:93:64:55:d8:a2:
02:68:c8:fe:dc:3a:fd:c2:7f:43:c1:44:29:a3:9e:f1:04:09:
cb:01:df:1f:97:64:59:4a:32:4c:2c:41:6a:a5:b7:59:ac:13:
f6:1d:26:20:90:18:6b:67:ea:4c:ff:8a:d7:a1:78:ca:49:a1:
cf:20:d9:a2:8c:b7:cf:a8:43:56:74:82:85:cc:b1:68:dc:a9:
9f:22:13:64:49:0c:0e:33:89:c3:1a:b1:58:50:c9:29:1a:42:
64:db:4e:20:7c:82:bb:cf:80:0e:41:68:52:0d:79:ea:9b:c4:
e5:30:36:a3:5e:86:b7:4c:0b:8e:12:95:4a:05:b6:70:26:e9:
b8:fc:8a:bd:5c:8b:d5:1a:3e:0e:e1:66:2d:f2:00:7d:7e:90:
2e:94:d0:83:01:90:df:34:b8:ed:4f:0e:30:b8:dc:29:48:67:
9f:e8:9e:fc:49:c6:cd:35:05:7b:ce:25:63:cf:df:c4:96:df:
16:87:93:bb:44:8e:7b:b7:78:2c:c5:aa:56:79:e3:78:22:41:
9c:4f:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:42:09 2025 by rpki-client