Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/52f23f50-50ed-3124-8040-864858a28df3.roa
File: 52f23f50-50ed-3124-8040-864858a28df3.roa (raw, json)
Hash identifier: GUcojWqEKyFlIPfGJL2OGMvM96y6Fhfk3LikklQzYrU=
Subject key identifier: A2:3D:B3:DE:A0:6B:A1:F7:F5:39:4A:83:68:68:3F:EE:A3:55:68:A0
Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Certificate serial: 010D0C9F43285848EF61539374560FAFD456D180
Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/52f23f50-50ed-3124-8040-864858a28df3.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 192.190.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:53:93:74:56:0f:af:d4:56:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=917d2161-5820-4f1c-a5c6-70b65299ed36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:5c:6e:5e:c5:15:fe:30:e2:53:f5:f7:ba:
6a:e9:fb:d1:6f:0c:f6:8f:c1:82:be:c7:a4:b8:b1:
00:ad:36:fc:96:03:7d:3b:ba:b5:05:bc:ba:e8:1a:
65:02:0b:fd:2f:90:6a:1d:ff:ba:b5:de:24:b1:0b:
dc:15:a6:9d:73:40:36:90:bd:5b:56:38:75:b3:57:
f1:cc:22:15:70:a9:56:b0:14:92:d5:e7:53:62:83:
a6:30:84:4e:78:5f:0f:91:5b:dc:af:ee:03:9b:79:
33:64:10:9f:8d:38:63:16:2e:e4:2e:99:3e:a4:b0:
c0:8a:84:d6:e5:2d:af:d0:d3:33:ec:9b:e5:e7:66:
4b:f6:f3:c2:e0:ff:16:f8:50:4c:cd:2f:4e:6a:d5:
64:ad:97:52:58:d3:e9:ad:6d:67:fa:4e:fb:9e:78:
3f:b9:bc:f2:07:2e:5f:2d:b6:5a:35:84:94:b2:e7:
6e:b4:98:ba:b4:60:e1:dd:22:5c:38:6c:0b:97:72:
95:d2:61:ae:96:25:fe:5f:12:41:12:4c:46:57:3d:
0e:5e:e9:36:42:09:04:4d:aa:d6:6b:bc:7f:96:fd:
4b:34:ec:f0:a5:bc:49:df:ab:19:2e:01:53:fc:1e:
39:95:6f:e2:a8:6e:7e:9e:66:41:4c:7c:a6:3b:8a:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3D:B3:DE:A0:6B:A1:F7:F5:39:4A:83:68:68:3F:EE:A3:55:68:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/52f23f50-50ed-3124-8040-864858a28df3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl
X509v3 Authority Key Identifier:
keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer
sbgp-ipAddrBlock: critical
IPv4:
192.190.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:f6:de:2b:37:be:5d:8b:03:d5:ff:6c:27:a7:ce:5e:c8:f4:
7b:77:a0:56:8d:16:8d:46:65:a1:e8:c1:2e:e2:75:02:6b:bb:
b7:04:64:b9:e2:2f:2c:bc:c8:ee:ba:4a:a7:22:65:43:0d:16:
fe:70:bb:8f:0f:9a:70:db:a8:34:dc:43:44:e4:68:c8:0f:2d:
e8:2d:f1:13:51:fc:99:df:5e:52:68:2f:1a:8b:82:c8:60:9b:
56:27:6a:29:5a:34:17:e1:49:f2:90:83:aa:3e:0e:cf:af:62:
dc:5f:04:83:7f:35:9b:1f:01:20:fc:b5:36:93:87:27:74:78:
98:2c:c0:b0:fe:a5:71:e9:0e:31:44:7c:0b:9e:84:c2:92:25:
a0:4b:71:43:49:97:b3:6e:28:14:87:55:6b:2d:e0:f0:8b:87:
58:13:1d:10:94:0d:99:38:f5:f4:82:24:2b:5d:9f:1c:af:d7:
1e:7a:a1:a4:30:d4:57:ac:bb:56:a1:b3:7e:b4:8b:80:84:a5:
ab:83:b0:87:2d:84:1f:99:38:ce:12:2b:ce:f7:36:5f:27:ed:
28:e6:53:5c:13:21:c7:24:c3:c9:7a:8e:65:42:41:40:e0:42:
39:9a:2e:c2:28:41:34:11:f6:20:48:f2:b5:59:86:61:37:1c:
c5:27:de:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:57 2025 by rpki-client