Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53b335cf-de56-3c10-acfe-56ecac5e5d0f.roa
File: 53b335cf-de56-3c10-acfe-56ecac5e5d0f.roa (raw, json)
Hash identifier: FdCQHIilweIfCw0/uou4eNgQwhkmzMBaox5zsCmUS9Y=
Subject key identifier: 23:8A:B2:0B:39:58:01:68:1C:86:98:A4:5D:06:B1:31:59:FC:FD:AB
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F43285849419E8021CCAE7E3B3A97B680
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53b335cf-de56-3c10-acfe-56ecac5e5d0f.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 81
IP address blocks: 128.109.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:80:21:cc:ae:7e:3b:3a:97:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=b95005ed-a035-49d4-81d2-18cbecce16ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:87:b5:33:ae:6a:1c:45:2d:4e:22:8c:8c:
f1:97:6a:ee:81:4f:7f:c6:2c:6b:6e:94:8e:d3:5b:
bf:ef:73:da:b5:36:73:34:df:d8:89:be:22:98:b0:
19:75:a0:d5:a2:8e:16:97:56:bb:ae:ea:a1:e7:83:
e3:9e:24:13:31:5e:70:09:40:66:ae:22:d3:8d:ad:
4d:12:a6:b1:8a:f0:27:de:b8:ec:24:c2:7b:e4:4c:
2b:50:c8:79:06:9d:8e:03:1f:9c:bd:9a:ca:20:65:
58:1e:80:62:6f:39:35:b6:3f:3d:2f:8c:f9:d7:a0:
65:8f:7e:11:03:2d:81:21:41:46:80:2d:c8:9b:e5:
5b:42:23:bf:ce:59:ce:ef:5f:c9:66:a3:24:50:41:
9f:2f:09:11:92:b8:99:ec:f8:c4:df:f4:e1:f0:8d:
fc:99:e5:75:8c:20:31:0d:03:02:59:58:93:f9:14:
e9:e0:12:a4:ab:5f:a2:01:6a:38:2f:c7:44:5a:49:
ae:a7:2d:5c:2b:d0:58:6e:80:79:80:b0:f4:c5:10:
60:14:95:e7:c7:93:3e:ae:5d:70:58:b5:9a:e0:ad:
8b:9b:ea:f8:8b:a4:93:fd:42:a9:c0:4a:9b:94:02:
a7:87:61:be:cc:e9:ab:27:90:62:07:b7:52:23:ce:
56:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8A:B2:0B:39:58:01:68:1C:86:98:A4:5D:06:B1:31:59:FC:FD:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/53b335cf-de56-3c10-acfe-56ecac5e5d0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:45:be:32:9c:d4:be:74:ae:11:7f:e2:28:9a:fa:90:cd:d7:
11:55:61:2e:56:60:7e:e8:10:0d:14:93:34:8d:95:f9:c3:e6:
a7:70:00:90:07:91:fb:ae:bf:07:67:fb:05:fc:08:ac:52:01:
06:c0:32:5e:0e:d5:ff:bf:f8:2a:6c:68:4d:29:ee:ec:cb:c5:
09:ea:23:71:ac:04:dd:28:93:81:2e:a5:36:9d:06:b6:f8:87:
d2:a6:52:c8:11:03:1b:7e:24:e4:2f:4d:f2:5f:0d:7f:05:c9:
c4:ff:9e:87:7d:4e:5d:3b:fd:55:66:df:a1:06:15:fe:96:4c:
a5:68:36:9e:ab:38:a6:ba:3a:ad:1b:ca:3e:dd:61:2b:9b:33:
4f:ec:05:74:fa:34:1f:aa:eb:65:90:63:08:d5:0b:f9:9f:3f:
e0:7a:bc:fa:86:d4:eb:bb:98:cf:ed:9a:96:84:fb:57:1a:b3:
88:e3:b0:ea:14:fc:f5:bd:f8:c2:56:36:cd:91:ef:16:7f:b6:
24:f9:ee:fe:12:13:f7:c5:a2:86:47:70:70:93:b1:43:7a:b2:
4d:64:6c:24:9b:a6:41:ae:53:81:d3:d8:e6:86:fd:d5:5d:98:
5f:a9:ec:ab:28:38:e5:39:a2:fc:6b:65:eb:99:9b:7c:45:c1:
a3:72:11:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:19:15 2025 by rpki-client