Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/35d3f806-ab98-3711-84ee-81f48a1a9349.roa
File: 35d3f806-ab98-3711-84ee-81f48a1a9349.roa (raw, json)
Hash identifier: DXyXUkvoLlmm1U1mJdvB7qWNql86qDl9zLxfGWxzcuQ=
Subject key identifier: 0C:14:C9:31:D6:53:4F:3E:E6:5F:EC:03:47:17:E4:9A:67:87:1C:93
Certificate issuer: /CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38
Certificate serial: 010D0C9F43285848AF2B822A62A85EA216908100
Authority key identifier: 49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/35d3f806-ab98-3711-84ee-81f48a1a9349.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 7018
IP address blocks: 192.124.92.0/24 maxlen: 24
192.124.93.0/24 maxlen: 24
192.124.94.0/24 maxlen: 24
192.124.95.0/24 maxlen: 24
192.124.96.0/24 maxlen: 24
192.132.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:82:2a:62:a8:5e:a2:16:90:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=4171e0ae-9796-4572-95e9-9f81af4c598e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:93:c1:f7:6e:15:d8:bf:51:60:5c:46:c6:cc:
b3:7e:18:3c:1d:23:a7:3c:f0:a6:f4:73:56:29:bb:
59:6f:21:ff:4f:c5:94:25:89:85:b6:8b:f4:e3:34:
a0:42:b3:40:e5:39:00:ed:ba:f9:6a:b4:bc:a1:7f:
e0:e0:9c:5e:e6:b7:5d:23:67:58:48:a1:d2:56:3c:
63:f4:6e:ab:f7:7a:13:f3:17:68:4b:7c:e4:b9:b7:
07:c8:79:28:d0:8c:05:d6:a5:7d:57:e5:e2:9b:e7:
f6:b9:83:cc:1b:4c:63:8e:92:9f:eb:8f:73:d5:89:
96:7a:f4:1f:9a:dd:15:42:83:3c:50:90:d5:31:1a:
f0:3e:74:9d:cd:b6:46:24:ef:14:8e:c0:70:96:bc:
70:c9:d9:db:c2:aa:55:5b:7a:ed:bf:57:49:dc:5c:
41:11:e1:33:b0:5f:71:cf:46:16:e5:12:08:9d:df:
66:21:e6:eb:54:41:2b:48:93:9e:fe:d5:09:1b:42:
2b:41:d7:1f:d9:02:1c:6d:8b:18:e3:b6:82:28:cc:
9e:b9:02:b6:15:63:24:61:c9:c0:4a:2d:df:59:3d:
b1:f7:2c:1e:74:03:9a:05:9b:a4:20:06:bf:7d:6a:
e8:31:15:ea:09:fa:7d:29:f2:76:e8:5c:0d:50:77:
db:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:14:C9:31:D6:53:4F:3E:E6:5F:EC:03:47:17:E4:9A:67:87:1C:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/35d3f806-ab98-3711-84ee-81f48a1a9349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl
X509v3 Authority Key Identifier:
keyid:49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer
sbgp-ipAddrBlock: critical
IPv4:
192.124.92.0-192.124.96.255
192.132.91.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:b7:a7:9b:5d:b4:c1:ef:4f:6f:b7:45:87:71:7d:d7:1c:29:
f0:14:fd:d5:18:99:ff:9a:ee:c0:08:e7:38:50:2c:14:1d:f1:
7e:68:57:ca:67:86:2c:96:bb:bd:fe:0d:96:00:8a:b0:0f:77:
60:30:b4:8a:b1:77:d4:06:10:49:d8:fd:70:68:e8:91:fb:ca:
47:89:3e:68:38:ff:de:7c:43:3c:d7:37:e5:7b:be:5d:69:13:
fc:3e:f6:19:4a:d0:2c:c8:28:a2:66:37:47:47:ae:4c:39:a3:
f3:ef:eb:75:b9:de:ea:7f:5b:9f:4d:cf:a8:27:36:61:e4:e5:
ef:cd:41:f3:09:78:ee:fb:5f:a6:57:2e:24:f1:f8:cc:84:53:
c0:16:74:db:b6:1a:ec:cf:e1:ea:e6:49:9c:2b:28:10:6e:f9:
ee:2f:a0:ab:c0:c0:9d:84:7c:68:19:d3:c1:c9:22:86:19:c3:
9e:6b:36:04:26:60:23:a6:67:f3:24:3c:12:68:c6:c1:92:25:
f7:6b:a6:2d:7a:27:cb:30:de:93:80:a7:b3:f4:81:d2:52:9a:
9d:a6:d8:d2:60:a9:62:48:76:74:57:86:4a:fd:01:aa:64:8c:
9d:59:64:3d:ab:03:d9:bd:60:05:a5:ad:33:23:05:b0:c0:36:
31:5e:d4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:40:56 2025 by rpki-client