Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/64bbaefe-121e-3227-8c64-63eb0383f20d.roa
File: 64bbaefe-121e-3227-8c64-63eb0383f20d.roa (raw, json)
Hash identifier: 1A3bJvDPMmliwo8iKAY7pVCsfJ3ArLLzfnsVEnoPHa8=
Subject key identifier: D4:E5:E6:50:AF:AE:8E:55:F1:C0:AE:EC:F6:B0:CD:00:62:09:A4:F9
Certificate issuer: /CN=f8b0cb92-fb04-41d4-b39f-43c745f21faf
Certificate serial: 010D0C9F4328584957F400D3E85BF2585F077260
Authority key identifier: 18:29:B3:63:61:A7:54:DB:72:0C:B3:00:F5:31:20:17:95:8D:5D:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/64bbaefe-121e-3227-8c64-63eb0383f20d.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 25950
IP address blocks: 192.169.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:00:d3:e8:5b:f2:58:5f:07:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8b0cb92-fb04-41d4-b39f-43c745f21faf
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=49d18f15-7b39-4662-b2f8-7f4107dbb9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:5d:c0:d8:68:35:3f:60:26:96:1f:6b:4e:
4c:43:8e:d9:5f:4b:a7:bb:cd:6b:c7:43:4a:5e:ec:
8b:d8:75:c7:f3:6a:27:c1:11:c6:e0:25:f2:f1:6d:
2d:51:90:97:ba:91:f1:92:3a:ce:6c:22:54:5a:95:
0b:a8:80:e5:b6:98:cc:10:86:10:68:e3:87:f7:06:
18:39:86:e5:00:b5:18:20:ad:58:93:ad:a1:a6:8e:
2d:b6:56:dc:f1:ed:e7:02:45:23:60:25:83:ea:d9:
75:3e:44:50:49:87:16:0f:62:42:52:95:c9:21:b3:
88:c8:1a:97:15:e1:ab:32:09:32:39:ab:a8:1c:f4:
03:ac:af:51:c5:1b:88:91:34:fb:4c:97:bc:f9:ee:
5e:31:a4:55:64:af:fa:e8:9c:ca:5b:77:59:c2:1f:
79:d1:f9:72:a1:91:29:fb:af:4e:4f:7d:6f:4b:df:
e7:57:19:4f:a5:5d:1d:05:17:81:f7:c6:21:c0:3c:
9f:1f:a2:7d:ce:99:26:29:ab:0f:76:09:da:7d:9a:
53:a7:99:45:18:36:32:a2:ca:be:0e:4a:88:59:1f:
5c:2a:e9:44:ab:e6:6c:59:62:f9:3a:fe:3c:fa:bd:
79:24:71:b4:67:fc:1f:55:30:da:a1:5c:67:fa:44:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E5:E6:50:AF:AE:8E:55:F1:C0:AE:EC:F6:B0:CD:00:62:09:A4:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/64bbaefe-121e-3227-8c64-63eb0383f20d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf/f8b0cb92-fb04-41d4-b39f-43c745f21faf.crl
X509v3 Authority Key Identifier:
keyid:18:29:B3:63:61:A7:54:DB:72:0C:B3:00:F5:31:20:17:95:8D:5D:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f8b0cb92-fb04-41d4-b39f-43c745f21faf.cer
sbgp-ipAddrBlock: critical
IPv4:
192.169.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:77:5c:41:c5:42:fe:33:77:c4:fc:65:a1:23:55:c8:39:0c:
67:f2:b7:52:2b:b1:83:73:c7:38:fc:7b:a8:95:3d:77:d3:99:
a2:a4:eb:2b:af:6e:f8:69:26:10:99:54:9b:76:93:a7:29:09:
ec:95:b7:b9:fb:76:9c:2d:ed:cb:cf:80:5a:ad:8a:97:b3:ce:
e3:dc:23:79:d8:63:23:6c:c6:ce:de:94:21:3f:78:51:f0:04:
a1:55:0d:f5:3a:98:c1:8d:83:c9:b7:fb:c0:51:83:fd:09:fd:
3c:0d:9c:8c:c8:28:b1:0e:a7:81:df:84:96:78:37:b6:1d:50:
dd:34:be:69:47:b3:e3:83:dd:f1:c1:53:07:d4:1b:f9:53:c8:
3e:4b:3d:eb:75:58:4b:2f:32:91:ee:99:9c:64:21:19:5d:81:
72:67:2e:a0:14:dd:bb:c9:17:15:d4:38:a4:a4:4b:af:33:fb:
0e:cd:31:a9:6d:07:e6:65:ce:49:d0:50:3b:66:fe:f0:3b:a1:
a1:59:74:b7:47:4e:e8:67:08:cf:11:5e:e4:7c:e8:c1:4d:a7:
09:f1:1a:dd:8e:11:0c:65:d3:d1:a6:dd:f0:a5:df:92:63:42:
c8:ba:e7:b7:a8:bd:fa:e8:e9:a3:2e:0d:36:ec:78:47:90:c0:
11:ab:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:53:22 2025 by rpki-client