Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f98c6c76-aba3-3d70-abae-3d5ce8748f3f.roa
File: f98c6c76-aba3-3d70-abae-3d5ce8748f3f.roa (raw, json)
Hash identifier: 8fXYXDaTxOx3socRQdkX6yYaw1N80CVEkRhxVYAjK8I=
Subject key identifier: 42:B5:30:E4:B8:08:7E:BF:CB:BD:24:06:97:CC:6F:F2:3C:B1:FA:DF
Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial: 010D0C9F432858487E5067EE13942E2EEC7DAC00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f98c6c76-aba3-3d70-abae-3d5ce8748f3f.roa
Signing time: Fri 10 Jan 2025 02:00:40 +0000
ROA not before: Fri 10 Jan 2025 02:00:40 +0000
ROA not after: Thu 10 Apr 2025 01:00:40 +0000
asID: 0
IP address blocks: 192.67.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7e:50:67:ee:13:94:2e:2e:ec:7d:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Validity
Not Before: Jan 10 02:00:40 2025 GMT
Not After : Apr 10 01:00:40 2025 GMT
Subject: CN=1ca3bb36-768a-40a9-9a62-58b810f67f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:e4:b2:bf:9e:3a:8b:fa:63:b3:a2:f1:e8:
b1:b0:48:2e:84:21:e0:cb:64:a6:30:c7:a5:7d:d3:
fa:ab:ec:e9:c6:ff:a3:1c:7b:92:b0:24:7b:21:cf:
5f:5f:2a:5d:04:a1:ba:b2:0e:fd:ee:c1:c7:d5:84:
5d:7c:8a:47:2f:4c:93:0e:09:03:58:ff:07:9e:89:
3a:f5:cd:33:a5:a3:f6:99:25:95:81:50:21:84:1a:
44:7d:77:8f:49:02:40:24:a7:b6:bc:f7:c9:5e:6e:
e8:1f:67:30:c3:09:42:87:22:4e:c9:e3:e9:d6:a8:
ba:d7:d1:18:51:73:a7:c5:b6:06:b7:97:cf:76:a5:
1a:e5:59:4e:1e:5e:91:26:a4:16:4d:e3:16:d5:63:
ea:17:18:9c:d4:68:31:6f:cd:af:81:2d:83:4a:e3:
b7:cd:2e:dc:2f:f9:e5:27:ea:58:dc:1d:80:c0:12:
de:d7:0b:91:72:6c:6e:55:55:a4:3d:6e:62:8b:1e:
59:fa:3b:40:6d:12:df:9c:52:d2:3b:56:8e:9e:e0:
51:57:30:8f:15:f0:bf:dc:6c:aa:bf:0c:9c:60:91:
1f:05:d1:da:48:ca:71:19:76:9d:87:8a:54:f7:d3:
78:e6:cc:17:31:e1:24:22:fd:f2:74:bb:95:25:50:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B5:30:E4:B8:08:7E:BF:CB:BD:24:06:97:CC:6F:F2:3C:B1:FA:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f98c6c76-aba3-3d70-abae-3d5ce8748f3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
X509v3 Authority Key Identifier:
keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
sbgp-ipAddrBlock: critical
IPv4:
192.67.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:dc:d4:a1:65:00:e8:b6:ee:a5:9b:5b:2a:8e:45:aa:f1:a5:
a7:a5:a5:13:76:23:bd:13:db:82:63:91:04:79:76:97:4a:d3:
97:07:07:1b:83:83:78:15:70:ae:3c:1d:9a:ab:f5:dd:b3:1f:
74:1e:8e:23:65:34:a8:76:02:04:b3:32:ec:c3:82:12:e1:50:
56:d3:aa:22:63:b9:e2:87:33:2d:1a:79:6e:2f:17:ea:c3:bf:
19:2a:c5:67:df:39:4b:a9:da:5c:bf:80:8b:05:d8:02:83:10:
fc:eb:01:1c:5c:86:be:cd:8a:cd:68:07:bf:7c:f6:de:c4:ed:
38:dd:5e:43:a3:bf:79:50:aa:98:af:05:c0:ab:72:68:62:1a:
47:29:a7:17:de:f0:a9:7d:15:ca:de:e6:23:66:f7:74:76:78:
92:00:05:54:ad:7a:d0:f5:a3:39:5c:50:3e:62:cb:8b:db:08:
e4:c3:ea:3d:78:dd:e4:cb:95:e7:d1:e5:66:13:66:de:0f:a3:
f0:1a:e9:9f:1d:bb:74:c6:b7:05:6e:8e:5d:43:f8:a5:bd:c3:
e0:db:33:77:95:14:77:3f:a7:e0:c4:d1:f0:91:11:35:73:5d:
80:54:a7:46:ad:e6:4c:a9:47:67:d4:bc:a1:07:9e:24:67:b8:
b2:1f:62:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:09 2025 by rpki-client