Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/f1b4a17e-47a2-30dc-a4e1-9dd4bd95e967.roa
File: f1b4a17e-47a2-30dc-a4e1-9dd4bd95e967.roa (raw, json)
Hash identifier: pdJ25IL+wy4H3oW5MN6zlbpYn36UD2w4fqJmYs5peew=
Subject key identifier: A7:67:1E:29:A5:F8:52:C5:D2:49:60:DB:FE:0A:DB:EC:C7:ED:65:7E
Certificate issuer: /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Certificate serial: 010D0C9F43285848A400C3BACA40316BCF597480
Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/f1b4a17e-47a2-30dc-a4e1-9dd4bd95e967.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 26380
IP address blocks: 12.10.32.0/23 maxlen: 24
12.22.152.0/22 maxlen: 24
12.22.156.0/22 maxlen: 24
209.64.210.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c3:ba:ca:40:31:6b:cf:59:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=90e7c06e-f3f1-408a-a459-19d40c0eaf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:93:b5:e0:b1:a6:21:8a:21:e8:ba:02:cb:b1:
b0:6b:51:b6:bb:e2:12:58:0a:83:c7:24:d2:ce:66:
3b:c7:09:5d:cd:08:e0:3e:20:64:d8:3f:a3:2e:3b:
be:0e:d5:8a:3f:c8:39:01:98:85:05:12:8b:84:9b:
a0:e9:70:8f:6b:4f:11:f4:45:ae:52:36:b5:5c:18:
f2:36:e3:f8:93:04:0f:5a:0d:6d:6e:f9:7f:1c:6c:
34:41:26:4f:4d:8b:20:65:61:af:ed:ad:a2:1b:ea:
c1:3a:b5:db:c7:0c:ff:c3:5b:11:38:95:54:f3:09:
ac:33:be:4e:44:6e:97:71:bc:c5:28:f1:43:64:93:
89:39:4e:cc:3a:42:10:11:3a:3f:3a:80:39:af:b8:
cd:82:00:23:b2:4c:cb:60:df:ba:c7:8d:70:7e:06:
03:19:73:10:05:15:4f:d0:bd:f8:cd:16:dc:a4:c9:
79:b6:c0:3e:ef:ff:bb:bd:c1:45:d7:22:71:53:8d:
d3:c1:88:dc:d6:6c:66:c7:c5:49:37:e2:f4:7d:8c:
b8:a1:0c:12:b4:65:9f:58:e2:f3:d4:3e:5d:1e:58:
99:cf:e6:79:30:aa:ff:ca:d7:8f:96:2f:97:e0:6b:
a5:99:0a:df:58:39:75:c5:95:a5:0b:2c:65:3d:99:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:67:1E:29:A5:F8:52:C5:D2:49:60:DB:FE:0A:DB:EC:C7:ED:65:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/f1b4a17e-47a2-30dc-a4e1-9dd4bd95e967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl
X509v3 Authority Key Identifier:
keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
sbgp-ipAddrBlock: critical
IPv4:
12.10.32.0/23
12.22.152.0/21
209.64.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:9f:c4:4c:16:a9:bd:30:a5:af:38:bd:e4:21:03:e2:63:58:
7a:ce:91:fb:f4:3d:76:a5:c8:6c:e9:b2:e4:73:32:ce:0d:50:
c2:21:93:17:b8:ca:88:d1:d5:d1:5b:7e:33:63:bf:5b:48:62:
ce:b1:f5:2b:97:be:8e:61:42:cd:7e:35:9f:f0:40:70:a2:e6:
3d:d9:be:75:0b:c4:da:f2:9d:95:6c:fc:ae:2e:cc:01:e0:44:
47:7b:29:b5:7b:af:b0:98:4d:23:af:b7:90:7f:de:96:65:90:
09:d4:0b:7d:27:f9:27:5e:35:56:96:7d:cc:7c:22:ff:03:7b:
53:8f:2b:36:04:5c:99:7f:a1:f8:e7:d9:ff:c8:64:79:1a:20:
8e:3a:25:4b:85:e1:cb:d9:f6:9d:2d:bf:83:9d:11:ce:6c:15:
3e:92:10:e9:82:73:1a:37:94:d8:c2:d5:67:09:e9:e8:ae:dc:
7d:c5:ee:5b:51:da:99:7c:ce:4d:64:a3:5c:0b:a8:67:72:63:
e4:bf:fc:8f:c9:30:3d:63:7a:e6:f8:62:70:73:3b:5f:68:67:
4c:8a:2a:ae:5f:0f:4a:dc:91:02:08:07:ca:ff:fd:a1:95:e0:
43:9c:0e:9e:95:37:1d:c0:75:c3:b4:6e:07:bd:41:7f:4e:ba:
f5:b8:0c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:07:03 2025 by rpki-client