Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/161110c3-49e9-3c76-9d7b-fe01390b15f3.roa
File: 161110c3-49e9-3c76-9d7b-fe01390b15f3.roa (raw, json)
Hash identifier: PA1jAov4CUqSimP9uM0gmrdqExB/ZI/l0U4zXNHBW2w=
Subject key identifier: B2:08:EB:6B:D7:C4:04:DC:8F:70:BA:F8:EA:42:D7:62:71:C2:B4:1B
Certificate issuer: /CN=f345059f-2ab8-4c1d-b4fb-177daf3fb761
Certificate serial: 010D0C9F43285848EC968EF26504579F4878D480
Authority key identifier: FE:61:2E:43:24:27:8F:08:AB:7B:98:D3:B9:88:3A:BE:3C:71:98:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/161110c3-49e9-3c76-9d7b-fe01390b15f3.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 3807
IP address blocks: 192.207.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:8e:f2:65:04:57:9f:48:78:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f345059f-2ab8-4c1d-b4fb-177daf3fb761
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=bc2955f8-101d-4d95-94b9-98679678f690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:3c:d0:53:04:d2:c2:59:32:cb:6f:f3:68:
48:d5:77:d0:41:02:88:20:0d:25:b1:8a:08:89:5a:
62:9c:13:f8:b6:7a:aa:5a:d3:23:5a:d3:18:b7:7c:
16:3a:2c:b3:57:6f:55:73:83:55:f2:2b:ae:ae:58:
c4:52:96:83:bd:93:40:2f:7c:14:42:ae:74:f2:57:
2b:46:9c:a0:4c:2e:51:94:69:ea:df:f6:6d:33:95:
aa:10:c0:a1:3c:d3:63:4f:bd:38:d5:48:c2:b4:7d:
46:91:8c:36:fb:a1:b3:05:f2:8b:cd:94:6c:68:fc:
9f:ec:8a:52:41:bc:be:2f:c9:4a:f0:37:71:14:27:
d9:2e:29:b1:54:9c:e4:f1:77:bf:4a:12:04:58:a6:
d9:1b:f2:3d:6e:64:a4:12:3f:66:02:20:9f:65:39:
6d:3a:2b:7d:14:86:d2:f6:3a:92:30:1e:15:56:fa:
3c:db:d8:d3:a8:ce:f8:41:55:7e:b5:a8:88:bc:4c:
99:fc:ec:3d:75:9a:34:2e:7f:e7:21:ad:88:41:11:
64:77:2d:10:f3:2c:0a:28:be:4f:d6:25:66:18:81:
fc:a0:14:fc:ae:62:66:53:5f:b4:c3:37:2b:dc:e3:
71:5d:70:59:57:0e:ff:83:e3:21:57:c9:c2:75:a9:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:08:EB:6B:D7:C4:04:DC:8F:70:BA:F8:EA:42:D7:62:71:C2:B4:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/161110c3-49e9-3c76-9d7b-fe01390b15f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761/f345059f-2ab8-4c1d-b4fb-177daf3fb761.crl
X509v3 Authority Key Identifier:
keyid:FE:61:2E:43:24:27:8F:08:AB:7B:98:D3:B9:88:3A:BE:3C:71:98:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f345059f-2ab8-4c1d-b4fb-177daf3fb761.cer
sbgp-ipAddrBlock: critical
IPv4:
192.207.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:a6:b2:9a:37:b5:1b:37:10:84:29:e0:cf:12:04:50:e3:26:
88:40:1c:3d:04:f1:08:35:28:81:94:c9:ba:4f:29:6b:f1:18:
d0:9c:7c:29:87:7c:4a:ba:ee:1d:b0:f2:88:f8:6c:34:b7:08:
b5:be:11:cc:be:e5:20:af:3a:00:3a:d6:1c:ea:b7:20:6b:53:
da:c5:9a:02:a0:33:b1:29:f6:ce:f5:a6:f9:58:33:ad:37:bc:
8f:f9:8b:5c:8b:65:09:c2:0c:63:3a:71:50:1b:0b:90:73:0b:
fc:40:bc:0f:3f:d0:30:15:0d:6d:c8:52:b0:cc:2a:51:aa:21:
cc:83:6f:41:da:28:30:c7:6b:32:8b:1c:e3:6e:9a:15:ff:f1:
2d:ee:13:7b:00:11:76:0a:c2:43:30:ff:fd:59:87:a6:7d:f8:
03:ef:9b:6a:38:d9:0b:af:38:ec:63:27:64:d3:92:91:6a:3e:
3f:95:4d:9e:7b:13:ed:c5:c4:8b:8d:d6:5e:d9:5e:70:31:5f:
36:2e:e5:1e:83:2e:49:ff:81:3f:1a:ad:e9:c5:41:2a:13:23:
64:b3:cc:bc:02:1e:eb:83:94:af:56:62:09:3a:49:47:b4:6c:
a5:0b:95:c9:b6:94:ad:88:c1:61:2c:e6:ae:33:d3:17:b6:49:
f8:c8:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:16:39 2025 by rpki-client