Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa
File: ff5499bf-8280-386d-a55a-c494181be5f5.roa (raw, json)
Hash identifier: 26XhUgxZV731u4QtWMszd4gn1vqmyJkELOS1umSDSFs=
Subject key identifier: E3:43:25:13:EA:0C:C5:65:A1:77:A8:B9:BD:1F:03:C2:D9:35:71:99
Certificate issuer: /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
Certificate serial: 010D0C9F432858488815E6CFEEB197B9A9FA2180
Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 393909
IP address blocks: 172.86.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e6:cf:ee:b1:97:b9:a9:fa:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=f72a146e-4d36-4ec5-9a86-76d0ab4a959d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:aa:b4:34:9e:86:c8:81:a1:27:81:f6:64:
2f:1b:b2:b4:c3:3b:35:d0:b1:3d:0b:5e:09:40:0a:
bc:fd:fc:e0:02:59:a8:b5:0f:d2:e9:a5:3d:7b:41:
98:20:33:d9:b7:42:d7:9b:c1:64:47:80:48:8c:7c:
2a:16:e7:b7:47:fd:43:1e:6f:f7:cf:99:b8:5e:c0:
fb:54:f5:0c:c2:7d:64:fd:9f:1c:0d:19:38:06:9c:
66:67:e7:82:1d:23:3b:2b:9f:2b:56:55:54:f4:4d:
93:0d:f3:ea:12:37:4d:2f:7f:5b:ca:df:42:5f:2c:
7b:a0:f6:06:31:c0:e8:21:84:73:5d:e9:ca:f4:32:
04:76:7e:8a:65:94:0c:43:bf:6a:ef:f5:a3:95:61:
64:b9:1d:68:86:bf:60:8d:ec:55:88:69:28:70:ca:
05:d1:1d:6d:11:cd:90:03:40:8e:58:8d:7d:00:96:
de:9f:aa:e6:a9:55:ea:ff:81:12:63:e3:b0:f0:43:
fb:84:cf:e1:6d:7e:52:1b:18:fd:a2:46:0c:81:ff:
8f:a5:13:12:d2:1e:80:44:e9:7f:4a:ab:49:bd:ae:
19:27:b9:44:05:c8:95:48:d9:74:52:ba:43:2e:00:
c7:f8:93:ca:38:df:54:a0:db:7f:8c:30:a7:0b:93:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:43:25:13:EA:0C:C5:65:A1:77:A8:B9:BD:1F:03:C2:D9:35:71:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ff5499bf-8280-386d-a55a-c494181be5f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl
X509v3 Authority Key Identifier:
keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
sbgp-ipAddrBlock: critical
IPv4:
172.86.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:4d:d8:d9:bb:81:2e:0f:cc:a9:ea:a8:7f:ff:5b:a0:0e:34:
c7:3b:19:f3:2f:15:ed:c5:19:fd:0d:a6:18:29:bc:d9:42:9c:
71:a4:77:50:8f:17:34:69:ef:7a:6a:f9:80:47:b1:3e:62:a2:
bd:a0:fb:ec:c3:5f:a0:04:a2:79:c5:3f:4c:11:0f:c4:7b:de:
c9:ef:dd:13:26:2d:3b:73:f1:23:b4:68:15:9e:d9:a9:95:ba:
44:b7:d8:68:54:fd:b1:a3:f4:dc:71:f6:b3:57:6a:69:43:2c:
5e:a7:97:8e:e0:d7:40:7d:15:30:b7:28:de:e7:61:92:f0:79:
21:2d:90:44:9c:b7:08:ec:02:61:85:fb:d5:a4:76:c8:ea:db:
7a:4c:f0:d0:1e:17:87:02:0e:f4:ab:a8:b2:a0:d5:b8:86:88:
8a:03:0d:24:75:5d:79:a0:0b:96:d6:9a:24:d1:1b:8f:39:56:
2c:2b:f1:4d:e6:f1:be:0c:d2:06:37:02:f3:21:d4:25:78:dd:
11:b4:21:46:1e:b0:e5:94:3e:a3:02:67:80:7d:da:39:44:a8:
90:cc:57:25:fb:7b:60:4d:30:91:3d:c5:64:a2:da:2c:3d:23:
91:21:57:e3:ab:9d:93:3e:05:34:7f:5a:2f:dc:92:e4:f1:62:
80:97:3c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:23 2025 by rpki-client