Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/0cdb9dfc-12df-3dbf-8ade-adacc0bdb456.roa
File: 0cdb9dfc-12df-3dbf-8ade-adacc0bdb456.roa (raw, json)
Hash identifier: 5Lrk+Rqg80yF4HyQmq1CSNHk/oPqioUlcfZvKBydrdE=
Subject key identifier: 20:D8:B7:8B:56:6B:97:C2:05:D8:C0:B0:1D:6A:18:4E:97:58:21:29
Certificate issuer: /CN=d689207a-c713-4157-97a1-5bb990bd3816
Certificate serial: 010D0C9F432858480644F705EA08A7E8EC54BB80
Authority key identifier: C9:B3:C7:F4:BA:34:D4:0E:33:66:60:6E:75:59:F9:43:9E:75:34:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/0cdb9dfc-12df-3dbf-8ade-adacc0bdb456.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 16509
IP address blocks: 192.225.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:44:f7:05:ea:08:a7:e8:ec:54:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689207a-c713-4157-97a1-5bb990bd3816
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=58c7dc4c-d139-4840-9f81-b4e34e605a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:4f:64:a6:2c:98:24:f1:b1:0b:97:ef:2a:
a2:e4:d7:0d:0d:ac:09:bd:d2:19:fa:32:1f:19:4e:
3e:90:cc:e2:79:36:b4:da:ff:b5:8c:8c:3d:5a:57:
2d:86:99:61:12:51:1f:c6:78:b8:ad:5e:69:58:c7:
ce:bb:e5:d9:a3:59:7d:07:4d:99:92:15:ba:db:b0:
8c:b0:b7:d2:96:be:1a:f6:6f:b5:ee:56:42:1c:f4:
4d:17:06:6e:46:88:79:e2:ae:88:72:e4:98:75:3a:
59:46:68:24:9e:37:23:b6:f7:82:72:09:a3:6c:88:
09:d8:25:80:75:ba:14:36:1d:e8:fa:19:e1:96:99:
f2:3a:06:a9:4c:ab:76:0e:87:65:e9:68:db:02:23:
76:f1:42:c7:d3:ae:99:8f:14:fe:e1:fc:f4:f6:36:
79:d5:0c:df:e8:1a:5f:99:c1:b7:4d:a0:1c:f2:04:
d1:4a:47:54:1a:b4:9b:ec:bf:1e:be:0f:68:9a:c6:
2b:fa:12:05:d0:4e:a5:45:b7:f4:21:95:f2:8a:b5:
8b:0e:dc:85:f5:a9:f0:82:26:18:a9:c1:9b:ed:9a:
81:9c:ea:8a:3c:ef:31:d6:42:cd:0c:29:9b:af:bd:
66:4e:0b:3f:38:11:b3:60:ae:a5:8d:7f:17:7d:84:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:B7:8B:56:6B:97:C2:05:D8:C0:B0:1D:6A:18:4E:97:58:21:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/0cdb9dfc-12df-3dbf-8ade-adacc0bdb456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816/d689207a-c713-4157-97a1-5bb990bd3816.crl
X509v3 Authority Key Identifier:
keyid:C9:B3:C7:F4:BA:34:D4:0E:33:66:60:6E:75:59:F9:43:9E:75:34:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d689207a-c713-4157-97a1-5bb990bd3816.cer
sbgp-ipAddrBlock: critical
IPv4:
192.225.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:d4:d5:93:21:82:6a:d7:e9:65:47:81:98:45:28:47:1b:10:
b1:7f:1c:be:82:94:32:71:31:4d:cd:d6:7c:85:a3:56:72:90:
ca:ed:16:39:c6:ff:56:95:70:d9:a9:b3:eb:66:0a:3d:b1:7b:
11:8c:b9:18:40:40:cc:b6:bd:f9:6a:d4:82:96:40:32:bb:01:
7d:c2:65:95:01:37:d5:e5:56:34:30:0c:6e:ce:d8:ec:72:16:
58:2d:7c:c9:5a:46:9c:5b:ff:73:c4:b5:af:ae:49:4d:0b:ed:
09:66:09:cc:41:2e:00:91:95:e7:63:55:70:56:08:64:01:1f:
15:6b:29:82:94:6a:9e:79:bf:6b:79:7c:7c:c9:87:ca:39:55:
fd:5d:80:20:8c:75:b1:68:79:45:34:49:e3:67:3a:59:0a:d9:
1f:6f:ab:1f:ed:59:08:de:fd:99:5c:a3:83:bf:e2:ad:72:60:
96:74:fd:dc:c8:fb:e9:c9:b7:bb:9b:8f:52:bc:cf:2a:e8:70:
59:05:73:da:14:c8:45:84:10:b2:20:dd:8e:58:09:59:db:2a:
8d:ae:58:2b:95:68:2c:db:ca:16:a8:a2:87:6c:03:6e:8a:b8:
24:3e:94:7c:d7:e2:68:a1:bb:ab:e8:d5:b5:97:5c:2d:76:99:
87:7a:53:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:56:19 2025 by rpki-client