Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/26f8cb14-37ca-305b-8850-4a0a76ab5fa8.roa
File: 26f8cb14-37ca-305b-8850-4a0a76ab5fa8.roa (raw, json)
Hash identifier: WOxoT7eYXUhlZPV/V8BQMJCso9IOh4Ttxj10ml1stdw=
Subject key identifier: F0:27:0F:06:34:9A:2F:45:E9:55:4D:7F:31:9D:12:71:9D:DA:42:8E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E8034C4A8DD8122B5C580
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/26f8cb14-37ca-305b-8850-4a0a76ab5fa8.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 128.109.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:80:34:c4:a8:dd:81:22:b5:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=27e24198-b020-4db2-b014-3b5a6846bcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:d8:60:ca:fa:25:3f:a9:e9:66:94:88:76:
71:cf:3b:0c:2e:a7:90:d7:a3:63:19:da:d1:3e:12:
72:84:c2:80:d5:e5:14:5f:f8:bf:ae:6c:c3:a9:46:
0b:ed:e4:0f:32:6e:de:12:ec:68:03:18:ff:c0:56:
98:24:d0:9b:16:df:7c:aa:63:3b:1f:8a:0c:58:1f:
5e:8d:cc:75:71:b8:1c:61:f0:b8:eb:a7:5b:9b:57:
fa:3d:d7:cb:7e:80:ca:09:5a:1b:22:19:e7:d5:f9:
fa:2f:c3:cf:76:c1:df:88:c9:c8:8b:3d:af:14:21:
99:46:e2:d7:4f:90:b3:2a:6c:0f:8d:10:cb:d0:7e:
bc:02:6a:e8:c8:e8:d5:7b:ad:9a:4c:cf:e2:63:88:
c7:82:7c:1b:a8:e2:8d:98:7c:39:1f:85:95:93:27:
5b:ee:39:17:78:f2:80:92:07:d7:98:7e:22:06:9c:
17:01:48:98:be:7f:27:65:af:20:9d:06:88:2a:8c:
f9:e4:f5:73:e6:06:98:0c:06:36:fb:b2:aa:59:6b:
36:17:b3:30:63:18:61:28:ca:36:89:f2:6d:c9:7b:
c5:7a:87:99:8a:a2:a2:ed:97:c4:09:ac:81:08:a9:
93:22:9e:2a:c0:61:e1:fd:df:b5:36:b0:97:b6:e3:
dd:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:27:0F:06:34:9A:2F:45:E9:55:4D:7F:31:9D:12:71:9D:DA:42:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/26f8cb14-37ca-305b-8850-4a0a76ab5fa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:67:09:00:7a:e8:e1:50:79:ee:15:0c:6a:55:6d:da:f5:92:
57:0f:28:af:7b:4f:d6:90:77:23:52:30:fa:f4:e8:42:a7:f1:
06:b3:00:20:47:b9:2b:9d:6d:f3:a9:17:36:26:42:af:ac:cd:
bf:4d:0c:46:2a:7f:2b:4c:ae:c9:be:f3:06:5f:28:74:d9:9e:
a8:70:c3:85:64:6a:af:9e:cf:74:04:6e:0d:b7:fc:5b:bd:11:
ba:4c:9e:34:9b:af:08:b5:e8:f2:6d:20:46:0e:f4:1b:3f:77:
39:32:14:85:59:e4:89:74:cf:95:06:fc:60:cd:f0:36:12:3c:
1d:d8:ec:4b:c4:11:a0:0b:7f:2d:3a:9b:c2:de:f0:22:13:a2:
cb:0d:8e:8c:3d:7f:f7:2b:cc:b4:e3:fa:a1:97:62:9f:43:e1:
72:30:3c:98:2f:83:b2:a7:0e:8a:bc:a3:28:1e:c3:92:4c:b5:
ce:b2:3a:a1:08:ad:f4:4e:25:99:91:77:42:d6:08:7f:0f:8e:
6b:c5:2f:01:9a:a5:e8:33:65:e8:5d:33:e8:bb:f8:29:e2:bb:
e8:06:95:f7:27:9b:f9:39:05:09:88:64:78:51:cb:48:4c:ca:
e5:a0:76:dc:af:2e:38:56:55:d8:b5:d8:bf:37:06:8e:16:d4:
f5:24:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:13:05 2025 by rpki-client