Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a3dc9795-9236-3def-a653-ce48d2f188e3.roa
File: a3dc9795-9236-3def-a653-ce48d2f188e3.roa (raw, json)
Hash identifier: 3pyU8Ek6Ys7z5KkewoskvWz64z0dRL9M22gUF8aQggo=
Subject key identifier: C7:15:3D:23:A0:F9:FD:63:E5:E5:BD:9F:B4:3A:E8:01:DE:4F:4A:A0
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F4328584882809140B42B2A01A2FA7F80
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a3dc9795-9236-3def-a653-ce48d2f188e3.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 12083
IP address blocks: 24.214.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:91:40:b4:2b:2a:01:a2:fa:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=fbc5bdaf-c2c5-4c70-b6ff-b119a1a747c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:4c:02:52:75:70:03:09:15:d5:2c:21:9f:
c1:47:f5:2d:a7:84:06:8c:26:1a:88:32:a2:30:d4:
f0:95:b7:ca:46:17:4b:3a:0b:e7:27:ac:cf:0e:f7:
10:27:31:23:ca:ca:db:cd:84:9e:37:85:58:87:99:
14:96:a5:e3:e1:ed:a1:f7:a8:47:a4:45:c2:a4:cd:
46:b9:7c:e9:bd:81:24:5c:0b:fc:bd:01:45:85:69:
c9:cb:9b:dd:72:a9:c6:a5:53:44:df:1c:ca:8e:02:
80:fb:ce:ec:3a:c0:55:8c:ee:f1:ab:c7:61:ba:4a:
b4:b8:94:2f:c2:9e:43:1f:be:51:ed:b9:b5:01:ef:
99:99:27:c6:88:62:35:b1:fa:c6:c9:68:df:47:00:
3f:ff:19:4b:2a:04:69:3d:3f:a1:5c:02:77:b0:3f:
16:0f:43:85:b7:2b:a5:eb:cb:9e:8a:d2:39:81:b9:
4d:d8:9f:37:6c:87:0f:0c:28:d1:4f:b0:d2:1b:c9:
97:9e:ff:4b:e3:42:56:ef:5c:41:4e:f8:88:06:de:
dc:c4:b5:4d:ab:d4:06:7c:40:fb:e5:90:48:56:86:
69:cc:e3:38:d4:68:e7:5c:cb:ec:7f:90:4c:a0:35:
6d:88:47:e1:39:14:f5:f6:c0:05:d2:05:b7:d7:11:
e3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:15:3D:23:A0:F9:FD:63:E5:E5:BD:9F:B4:3A:E8:01:DE:4F:4A:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/a3dc9795-9236-3def-a653-ce48d2f188e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
24.214.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:79:c4:2a:37:d8:86:f0:32:65:39:d5:84:a4:72:90:a7:1e:
24:f8:34:34:98:2b:25:cf:66:13:90:fe:7d:55:9f:3b:22:0b:
0b:fc:19:96:3c:07:f6:53:8a:e3:df:41:47:82:a1:1f:dc:69:
c9:84:40:a5:0e:f9:66:fe:67:58:2e:fd:ab:80:28:3b:e0:e4:
fe:a7:24:4b:ac:bb:c3:4d:3d:66:3b:35:e7:fe:3f:8a:b7:8c:
43:6d:f5:90:01:6c:f8:3b:44:50:fa:34:f4:bd:f5:6c:15:cf:
3a:2e:75:9c:74:c5:f0:bd:20:4c:4f:d2:ca:b7:93:af:6e:d6:
94:9e:ab:31:d0:21:df:36:67:f6:c8:c7:93:50:7c:03:6b:58:
75:49:86:fd:1a:08:f0:72:57:85:1e:d0:11:d4:54:a0:a5:0a:
28:1b:1f:bc:ab:a5:7b:03:53:4e:78:03:e2:7c:ee:d8:2e:04:
4b:82:35:6e:79:4d:88:05:de:c6:a7:3b:6e:46:62:49:27:d4:
24:bb:56:a9:ad:7b:77:fe:c8:89:0b:92:9a:9d:d2:e6:44:74:
71:ac:16:98:da:f9:d5:6c:02:01:5f:24:fc:6f:10:37:a7:f0:
62:05:30:90:f9:67:5c:55:9c:68:4d:8e:4e:b5:7a:b0:e7:fb:
40:33:d5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:09:59 2025 by rpki-client