Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1c33a1aa-367a-3277-98d8-4c828b79ec3f.roa
File: 1c33a1aa-367a-3277-98d8-4c828b79ec3f.roa (raw, json)
Hash identifier: PEvNqkKbInf39HICTSUUbAQiluFOw9Bj6AgdV9shAnA=
Subject key identifier: 15:79:24:D3:AE:96:D5:4E:66:57:60:AC:E1:97:C3:75:7D:DB:D0:4F
Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Certificate serial: 010D0C9F43285848C5822E6065F563EF4112EA00
Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1c33a1aa-367a-3277-98d8-4c828b79ec3f.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36492
IP address blocks: 136.23.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:2e:60:65:f5:63:ef:41:12:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=ded2780b-9129-482d-a147-9a00b74b947c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:4f:3c:38:8f:9d:f0:61:6f:be:83:de:ac:
e5:85:19:d4:55:60:b2:97:5e:9c:75:61:0a:51:73:
2e:ea:ba:28:7e:1b:3c:55:82:29:0d:8f:b5:b2:0a:
5e:01:ba:33:4e:dc:b6:08:02:ad:ba:f1:bd:04:34:
53:c3:f5:8f:fc:ad:e6:e7:a2:7f:cc:4b:88:b4:17:
63:90:29:9e:70:25:71:cb:7a:6e:75:5b:7c:cb:8c:
1f:68:72:1b:e0:f1:87:d0:06:0f:78:52:d6:99:df:
60:5d:a9:7c:01:70:33:93:ea:47:4c:03:c0:21:19:
19:14:54:fc:98:40:03:66:b7:8b:6e:01:8c:42:c0:
99:47:fa:23:41:a6:61:a5:93:8c:c2:5b:77:df:f4:
e3:0b:a7:d7:d6:00:41:58:cf:78:df:3b:95:c3:80:
21:a4:b5:50:22:e3:e8:aa:be:1f:78:be:0c:44:6d:
57:65:88:1e:61:4d:65:3d:2b:ff:ba:8b:ff:10:35:
4b:38:5c:ec:e5:b7:f3:a2:f9:8b:93:8e:26:d6:ac:
fe:7c:77:cc:d4:cb:4c:55:b0:23:50:d3:c6:b9:ca:
a9:e8:06:ba:a6:62:99:47:f4:90:e0:22:df:5c:75:
5a:aa:78:54:93:fb:cf:26:5d:05:cc:62:0a:c1:4a:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:79:24:D3:AE:96:D5:4E:66:57:60:AC:E1:97:C3:75:7D:DB:D0:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/1c33a1aa-367a-3277-98d8-4c828b79ec3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl
X509v3 Authority Key Identifier:
keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer
sbgp-ipAddrBlock: critical
IPv4:
136.23.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
da:ec:35:1b:21:2c:97:6b:d8:dd:15:cc:f0:dd:c5:f3:21:bd:
0f:16:ce:32:2b:9d:db:6b:39:33:09:2b:18:35:f2:e9:70:79:
d7:ba:5b:8c:d2:bf:66:5d:18:3e:92:c2:80:4e:1a:35:cb:a3:
17:d2:71:10:12:8d:ab:43:30:6b:08:08:b1:b6:fd:d6:4b:aa:
5a:af:cd:48:d6:b7:96:75:db:1c:01:0d:4f:40:28:bd:70:89:
25:49:69:84:cc:4b:80:85:f2:bb:28:24:4f:d3:fb:a1:15:54:
d4:2a:25:cc:6e:1c:44:b2:ff:c4:9a:2a:49:09:1d:20:64:b5:
06:5b:e0:2c:19:2f:35:68:74:a2:29:d2:eb:ff:df:02:d2:03:
f3:2c:a0:d2:d7:dc:78:3a:a1:ef:3c:b9:e4:91:3e:3d:d4:fc:
2e:75:ab:cf:01:a8:e4:74:9f:5b:61:7f:b8:9d:08:fc:a8:f1:
1b:76:d0:86:8e:5d:38:24:7d:8e:1c:bd:0d:18:bb:38:d4:53:
5a:18:2a:ee:cc:37:3e:69:c7:cd:ac:d6:9d:7f:8e:6b:f8:d5:
6c:f9:ca:d8:83:39:62:ac:0c:fd:36:f4:b0:78:1d:55:30:e6:
ad:7d:b9:38:41:ea:95:c6:b8:d9:5b:ba:30:91:96:4a:ad:72:
81:9a:bf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:44:34 2025 by rpki-client