Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0ce5fa4-b496-3b86-bf4c-0b610b2803ff.roa
File: d0ce5fa4-b496-3b86-bf4c-0b610b2803ff.roa (raw, json)
Hash identifier: SXeh7rmITDW5BoE58EcjpqcErGNUz9xQpM41IXOkPpw=
Subject key identifier: F9:C7:6C:24:CD:23:2D:88:EB:A8:F3:EB:3A:EC:07:B7:AA:02:C2:78
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F432858484AAAE4AC84D2FABF93758180
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0ce5fa4-b496-3b86-bf4c-0b610b2803ff.roa
Signing time: Sun 22 Dec 2024 14:00:51 +0000
ROA not before: Sun 22 Dec 2024 14:00:51 +0000
ROA not after: Sat 22 Mar 2025 13:00:51 +0000
asID: 212238
IP address blocks: 192.253.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4a:aa:e4:ac:84:d2:fa:bf:93:75:81:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Dec 22 14:00:51 2024 GMT
Not After : Mar 22 13:00:51 2025 GMT
Subject: CN=555d1803-7c65-42cd-935e-d93cdcf3a629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:56:cc:6c:e0:ef:13:b6:35:a5:a7:e8:3e:1d:
83:b6:55:38:e2:51:77:ce:8e:68:c6:40:3e:b4:a3:
37:3c:d6:d2:1d:c8:33:ce:11:2f:e8:92:fa:55:5d:
b3:2b:7c:eb:81:0a:2f:7f:c0:d9:a7:03:3a:2e:64:
61:f4:df:d7:02:21:60:4e:f8:32:1c:fe:f4:fb:cf:
25:bf:ca:34:7a:3c:8d:8c:d3:a1:40:fa:46:b4:be:
97:e6:2e:86:54:4c:04:fc:a6:87:50:91:cf:b1:fb:
a7:92:24:a4:71:3a:f3:b9:ef:4c:aa:f7:60:38:8c:
32:bc:c6:a0:f9:c6:0e:8c:36:6f:1e:78:0a:68:9f:
02:2e:39:69:e2:e3:ce:16:28:2b:62:56:0f:08:14:
47:ba:8d:7b:4a:91:25:bd:c6:00:09:08:b4:0a:57:
fb:9b:9d:99:43:98:05:1a:b7:bc:80:be:d5:d7:25:
54:63:9b:64:16:85:c4:60:1f:52:05:9d:15:78:90:
80:6d:99:35:9f:e7:44:19:ac:aa:a4:de:c1:e4:86:
21:af:4b:0d:b2:97:72:44:e0:6d:9a:12:ca:17:36:
e0:d6:82:b8:00:5f:43:42:38:8f:80:88:6c:85:14:
bd:18:73:d1:10:ab:4d:dd:23:74:16:1e:45:e6:09:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C7:6C:24:CD:23:2D:88:EB:A8:F3:EB:3A:EC:07:B7:AA:02:C2:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d0ce5fa4-b496-3b86-bf4c-0b610b2803ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
192.253.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:7b:b9:67:39:5e:dc:77:f1:f8:fc:47:6c:0f:c7:22:ef:84:
3e:ef:59:c5:59:fe:2d:52:e3:b8:8f:3e:1d:b0:d7:e4:72:16:
99:be:0c:2f:f3:6e:30:91:96:44:5e:75:73:e7:d0:df:f1:29:
ad:5c:66:62:f9:f5:62:ee:dc:6b:c4:4a:87:cc:b2:53:a8:4e:
22:ac:82:e3:38:7a:5a:77:cd:2c:08:43:e3:53:c0:7d:db:86:
e8:9d:f7:6d:88:4a:4b:45:f1:10:f6:67:de:79:06:fb:cd:a0:
62:7b:c9:7b:82:07:5b:4c:e7:c6:29:ab:6e:73:f2:15:30:03:
01:65:5d:ac:e7:96:4d:7c:c1:96:9a:b8:0c:8f:6a:d8:ca:9f:
c4:4b:ee:5e:e0:f1:35:c2:9f:e2:06:d8:d0:55:76:ab:13:58:
b3:82:3b:60:1d:f0:00:28:d3:25:5a:25:00:0c:93:1e:08:00:
1f:36:3d:e4:ab:05:0b:8f:2f:d8:4e:da:97:64:b9:26:d1:9b:
45:fc:f1:22:b4:29:b1:18:5f:0a:70:e4:b2:ec:65:60:d0:b3:
b7:1a:ac:a2:f3:8e:71:f8:db:be:37:33:bf:c3:41:e7:62:9a:
01:ed:3d:de:32:17:53:96:2f:5d:e8:9d:42:90:60:c3:b6:cf:
31:78:c1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:43 2025 by rpki-client