Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/f9deaefc-8ba7-32c7-98fb-103c988a9e08.roa
File: f9deaefc-8ba7-32c7-98fb-103c988a9e08.roa (raw, json)
Hash identifier: mJzBrITDXzjq0qh6U8nyPpiCzQ4NpEPwqYXQ9s4r8U4=
Subject key identifier: 29:CC:20:2F:D4:91:A6:3D:FD:43:3F:9D:88:91:1A:89:7B:75:54:25
Certificate issuer: /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial: 010D0C9F432858493243D930BF3F21319F7CA100
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/f9deaefc-8ba7-32c7-98fb-103c988a9e08.roa
Signing time: Sat 15 Mar 2025 13:00:52 +0000
ROA not before: Sat 15 Mar 2025 13:00:52 +0000
ROA not after: Fri 13 Jun 2025 13:00:52 +0000
asID: 2013
IP address blocks: 192.80.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:32:43:d9:30:bf:3f:21:31:9f:7c:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Validity
Not Before: Mar 15 13:00:52 2025 GMT
Not After : Jun 13 13:00:52 2025 GMT
Subject: CN=652cd3e9-5f96-4e77-8106-b5f17f1e05e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:44:d6:79:cc:6b:3c:3c:e5:c2:20:69:3f:
94:74:77:0c:61:3c:3b:eb:6c:e6:05:58:0e:87:28:
0b:a6:59:10:a6:8f:f2:44:74:61:7b:12:db:be:43:
76:aa:3d:55:02:89:85:7d:d1:37:9d:16:c1:7f:38:
6e:ab:5f:a1:68:e5:9a:97:58:98:e1:1d:ce:78:ab:
78:f1:42:4c:de:b0:2a:c0:b9:fa:e2:2c:6d:67:b0:
a6:9b:ff:b0:3c:8a:4a:3a:98:1c:da:5f:ec:db:91:
dd:99:4c:cf:08:04:f6:73:be:a0:db:6b:a9:b8:56:
c9:b0:f7:72:2e:b4:4b:79:d4:d4:15:3a:49:fd:cf:
cf:48:0b:a6:47:d6:66:f6:83:80:1e:0a:86:38:d7:
56:a4:79:ca:78:15:4d:a8:bb:81:2e:e9:f5:d8:16:
97:c1:56:2c:45:76:eb:5b:19:eb:b1:7b:d3:99:48:
00:e9:35:66:76:4f:1d:af:e4:51:98:4b:1b:a5:8a:
75:25:cd:4e:b5:c7:8a:de:bc:4f:10:ec:6a:97:e7:
48:98:39:f4:62:70:df:94:5a:bc:5d:4c:0d:c0:bf:
38:ba:59:ed:e4:c3:b4:93:a2:4c:1b:e1:12:d5:1e:
09:ba:d1:ca:29:05:63:2b:3d:17:38:17:e7:84:2b:
2b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CC:20:2F:D4:91:A6:3D:FD:43:3F:9D:88:91:1A:89:7B:75:54:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/f9deaefc-8ba7-32c7-98fb-103c988a9e08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
X509v3 Authority Key Identifier:
keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
sbgp-ipAddrBlock: critical
IPv4:
192.80.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:50:1e:e0:c7:23:a9:01:54:ee:db:ae:b0:1c:86:af:47:2d:
32:91:1a:a0:ac:c2:12:c6:34:d2:89:35:b0:60:43:5c:61:6d:
bb:39:29:64:36:ab:7e:d7:10:01:63:9e:48:c0:0e:6a:af:f9:
05:da:de:78:27:46:cf:c3:51:ca:37:09:0f:f7:0f:bf:8c:a9:
67:6e:c3:1a:4c:76:8d:ba:f3:9a:2f:fc:dc:25:b3:6b:6c:50:
54:fc:8d:3a:12:2b:5f:67:10:42:d2:a0:ba:2a:da:78:a1:dd:
84:a1:48:13:ba:36:1b:e0:65:b7:4a:e2:ea:7e:da:7d:ff:f9:
34:4e:a2:11:08:49:d9:48:4e:78:df:1d:eb:ad:52:86:48:fa:
3e:e3:4c:f0:b6:2b:60:28:de:13:5c:3f:72:a4:b0:15:76:f7:
6e:73:28:78:85:c5:66:99:35:8b:2b:a0:22:e2:78:c3:ec:57:
19:f8:36:91:1d:b2:1e:14:71:ac:64:5d:9c:6b:6c:51:4d:1f:
5f:51:2e:1d:e2:a5:54:63:01:64:04:2c:22:77:de:a2:58:5a:
6b:c2:fe:7b:f0:ae:f7:6c:3e:bf:e3:4f:aa:ec:b5:f5:35:f6:
85:cf:e6:42:23:e6:2e:da:56:ab:f9:55:a3:46:e6:4e:9f:d5:
9c:92:2c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:40 2025 by rpki-client