Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a08a2c0d-d1ec-3553-842e-05e4bbc8991c.roa
File: a08a2c0d-d1ec-3553-842e-05e4bbc8991c.roa (raw, json)
Hash identifier: 8lv9dawT84HLX30v1jdv58wGyYkYv9FqSgCYcERB1EU=
Subject key identifier: C3:1E:F0:E9:47:6B:32:7B:99:F1:BD:40:44:71:FC:5F:11:21:CB:2C
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858491AA6BE2F5368D54494B9C680
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a08a2c0d-d1ec-3553-842e-05e4bbc8991c.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 40934
IP address blocks: 184.94.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:be:2f:53:68:d5:44:94:b9:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=f3acc72a-3ad0-4017-9be4-b1fa8c05e560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:12:6a:b5:70:f0:6e:b9:dc:9c:09:07:e4:a4:
2d:b5:67:00:bb:3e:c2:75:78:3c:a7:dd:ac:20:39:
21:ea:10:9c:b8:90:ee:2e:41:0d:7b:7e:b7:c2:c7:
45:70:3f:be:48:4d:db:e0:46:75:a1:21:b2:d0:3a:
21:16:b0:74:03:89:42:02:b2:3e:5d:67:b9:52:24:
8d:55:9f:92:a9:93:04:17:75:94:c0:04:57:20:68:
e1:31:9c:90:1c:68:4f:43:3b:a9:6d:bc:47:9c:2f:
78:fa:7f:73:09:d4:3f:ba:d9:41:a3:5e:d0:19:fc:
1f:af:04:1a:f9:5a:3f:bd:57:1d:32:09:3b:14:bf:
84:6b:3a:c6:cd:3f:5f:f3:85:e5:c3:73:b0:a2:6b:
ee:a0:29:b3:33:43:cf:50:db:a2:0a:3b:56:51:02:
db:3f:24:38:93:d1:57:00:c4:57:b1:5d:05:8e:fc:
e1:af:40:6d:6d:96:a0:fd:89:3d:d4:f0:45:0d:c8:
1b:11:c1:19:de:b0:47:f2:c4:0c:fd:b0:d6:77:4f:
47:af:12:7f:33:f0:fb:a8:7d:e4:e4:9e:b5:51:6d:
1a:47:68:bb:ae:28:47:34:82:1e:85:1a:cb:23:94:
7c:ec:b6:c9:32:19:58:a0:53:24:07:73:4d:76:86:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1E:F0:E9:47:6B:32:7B:99:F1:BD:40:44:71:FC:5F:11:21:CB:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a08a2c0d-d1ec-3553-842e-05e4bbc8991c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
184.94.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:33:9e:2d:16:1c:8c:7f:d2:93:3e:bd:33:32:df:d6:e5:36:
56:8e:da:8a:50:15:a2:de:62:df:d2:73:50:18:85:7a:c9:11:
74:a6:5d:4e:70:bd:cd:73:02:82:0f:bd:0d:c7:87:ef:64:a9:
8a:af:aa:e1:9f:e7:b2:05:9d:67:f2:9e:e4:8f:d0:ee:6c:9d:
7f:5b:74:c0:fa:b1:82:82:44:bb:a5:62:b3:c5:21:a8:1b:1e:
66:06:fb:d4:37:7e:c4:03:82:19:3a:a8:5a:74:b5:7c:10:8f:
75:ad:43:c1:5f:f2:ce:86:0c:eb:9d:bb:88:84:e4:3e:d7:ef:
0a:2f:e6:98:aa:ec:79:62:4c:ec:5c:c4:37:9f:83:e2:b2:9d:
f2:c8:d9:2d:9c:ef:21:05:05:ef:4e:92:e5:ff:04:15:e0:dc:
03:4c:5e:da:b2:3d:83:6b:b9:1a:89:4d:6b:34:0c:34:26:06:
58:c0:b1:f0:61:24:9c:ad:e6:a5:f3:d3:29:71:2c:94:e2:06:
55:82:88:5d:7c:ef:35:b4:c7:27:58:35:bf:f7:90:04:41:c3:
4f:11:af:92:aa:86:51:35:8d:1e:a9:72:47:05:57:b1:82:f9:
52:b2:7c:2a:8a:d6:20:de:81:62:ed:e4:22:b0:ff:d9:56:01:
f2:56:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:58:03 2025 by rpki-client