Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa
File: 5a8aa138-b40a-3f8d-8630-d273b7a86699.roa (raw, json)
Hash identifier: a9Fbwe9tP0fTxqrbwMa8dLb28+a9cRWL5f5Ah9wRVB4=
Subject key identifier: 42:53:FE:2A:CA:DD:31:30:3A:34:DF:AE:FC:BA:12:50:6C:50:21:DB
Certificate issuer: /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
Certificate serial: 010D0C9F432858494B63FFE645B4BA1729412200
Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 19782
IP address blocks: 192.200.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:63:ff:e6:45:b4:ba:17:29:41:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=515ff4ed-080a-4436-943c-1014d06603e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:22:a7:e9:ef:27:10:03:d7:0e:46:cc:fd:1d:
80:a1:10:55:bc:07:71:e4:42:fb:ec:50:9e:65:be:
8d:b5:ef:c6:01:5d:9c:0c:35:5e:5d:58:84:41:a4:
78:08:c1:16:b1:31:1b:55:4c:96:33:13:9f:f6:8b:
00:a9:a5:da:69:1f:70:e0:d0:84:64:a5:6c:2f:53:
26:30:8e:38:a8:a6:cc:64:8b:bc:b4:9a:4e:c1:b2:
37:86:64:54:15:05:d0:1a:cf:f3:ff:3a:fc:ef:23:
73:e6:1d:9c:9e:6f:ec:be:ae:d6:12:11:f7:2d:ae:
0e:b3:a0:49:38:2b:7f:ef:fa:6e:a9:29:e2:c4:16:
af:25:9a:d7:46:75:9d:28:0e:22:3c:2b:f4:b4:3f:
2b:e3:36:28:14:94:56:82:a4:63:5a:36:28:2f:13:
4c:a5:79:83:a7:33:72:a7:7c:a5:cf:58:d3:bf:17:
89:36:a5:c3:8e:92:56:bf:6c:8b:b8:21:12:20:59:
0e:b5:95:19:21:6a:e4:cb:fd:17:d1:87:00:cb:dd:
f1:b7:22:3e:35:a9:32:d4:4e:92:c2:00:e5:47:1c:
58:84:00:d6:91:21:53:66:d7:8a:18:74:17:a3:5a:
a3:3c:f4:f6:92:98:3c:f5:9e:14:19:f0:1d:47:5c:
d0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:53:FE:2A:CA:DD:31:30:3A:34:DF:AE:FC:BA:12:50:6C:50:21:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl
X509v3 Authority Key Identifier:
keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
sbgp-ipAddrBlock: critical
IPv4:
192.200.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:d4:b6:19:4e:17:c8:27:af:47:86:eb:cb:3d:fa:16:93:38:
ab:37:f1:dc:77:ed:b1:bd:7a:8d:7f:42:b9:f8:e2:cc:83:fd:
95:82:0a:9d:88:e2:70:4d:68:1e:7f:fa:a5:c3:8c:0d:c6:c0:
30:43:ee:f6:f5:8f:f6:4b:2b:f7:34:51:3b:5f:90:8e:75:60:
dd:1a:31:9d:98:df:a8:8c:9b:ac:0a:de:b5:e6:57:17:a6:6b:
58:b3:9f:d0:f6:b5:10:1b:93:cb:7f:fa:b5:5a:c5:d3:bc:b6:
93:6d:0d:e0:da:24:8b:02:be:b4:1f:37:80:9d:b3:c0:8e:03:
f6:ee:aa:80:1f:03:04:52:97:ed:84:dc:d9:23:4b:f7:b5:51:
25:82:f6:32:0b:a7:d6:48:1b:cd:49:01:da:82:0c:00:e1:f0:
53:8c:7e:3d:b8:7f:45:43:4b:e3:31:ab:f1:88:eb:7f:2a:a9:
4e:f9:d4:2b:5b:c4:7a:ea:35:3e:fc:d3:d9:fb:c7:68:71:86:
6c:58:c1:d6:5e:6c:12:2d:86:84:c5:2f:98:dc:77:69:b3:c3:
e6:31:7a:bb:00:a2:7e:16:ae:47:6f:6b:b8:c0:a1:48:fd:34:
99:6f:11:59:6e:55:55:a8:b1:bd:80:36:9b:9d:ad:f7:65:e7:
bf:28:98:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:26:10 2025 by rpki-client