Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa
File: 2094b4f3-9720-3bee-8fcd-e854d365402a.roa (raw, json)
Hash identifier: 8xym58+mlg0PMpHLmhOVfoUH3EkLg5QiZMfjKT6851s=
Subject key identifier: 14:9A:11:7F:6B:C2:F7:E1:30:CD:CE:A2:AB:C9:E5:29:9F:BD:15:87
Certificate issuer: /CN=ffa0abd5-7cf8-42cf-8a46-626b50efd30e
Certificate serial: 010D0C9F43285848EF613E950A2ACA96DEC2BC40
Authority key identifier: EF:73:C0:BB:9F:57:F2:4E:BA:FC:55:B9:53:8A:12:0F:1A:34:8A:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 393877
IP address blocks: 192.133.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:3e:95:0a:2a:ca:96:de:c2:bc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa0abd5-7cf8-42cf-8a46-626b50efd30e
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=c484c625-acb7-47f8-9b85-697a54039e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:4a:69:37:09:2f:41:c8:14:9c:84:6c:60:
a6:87:65:db:d1:b2:09:24:f9:22:04:14:df:89:1b:
ec:61:ab:51:88:10:6c:34:78:70:fc:30:d1:cd:44:
e8:80:cc:07:73:02:05:f8:e5:3c:9f:d1:b5:45:66:
c4:49:44:61:23:62:cb:1b:15:6a:73:5e:0f:0a:6f:
01:2e:cb:42:33:4a:c8:d1:06:38:de:a8:02:7f:a9:
1b:ef:d9:26:fb:a7:db:71:6d:c6:67:2f:6e:9b:00:
5b:f6:83:41:e5:30:dd:c5:49:07:d1:c8:4a:23:f4:
75:c8:bf:68:6c:86:83:67:2f:23:0b:a3:83:a6:d6:
95:1d:d0:10:d0:e5:6f:80:bf:94:1f:0f:16:70:61:
d3:7a:5c:18:1d:e3:3a:4e:47:02:44:f4:42:99:0f:
db:56:64:2f:5d:9c:6d:31:85:42:82:4b:16:35:64:
ef:7b:b1:06:e5:b9:b5:12:2a:64:6e:a7:e6:ee:b2:
57:60:49:36:9a:58:f9:fb:b4:a6:30:fb:c1:1f:dc:
fd:7a:e8:9e:e5:0f:fa:52:95:d8:56:29:f8:bb:c0:
df:a4:a5:b4:ca:37:a9:54:aa:77:1b:66:c6:48:e8:
1b:d4:49:7e:6c:63:77:14:f3:4c:84:9d:89:07:34:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9A:11:7F:6B:C2:F7:E1:30:CD:CE:A2:AB:C9:E5:29:9F:BD:15:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/2094b4f3-9720-3bee-8fcd-e854d365402a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.crl
X509v3 Authority Key Identifier:
keyid:EF:73:C0:BB:9F:57:F2:4E:BA:FC:55:B9:53:8A:12:0F:1A:34:8A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ffa0abd5-7cf8-42cf-8a46-626b50efd30e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.133.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c2:c6:1b:ea:42:17:7e:09:04:ea:6b:5c:7d:4d:71:95:9f:a9:
b2:85:c2:bd:fe:f7:1c:19:32:d7:bb:9a:02:45:86:a5:fe:b9:
88:89:3e:82:24:52:4e:e4:df:ec:ba:73:85:2d:96:3a:35:81:
c2:6a:e2:50:75:e4:82:3b:0d:e7:34:fc:8c:6b:c9:d4:08:0c:
49:53:a6:27:ae:0a:8b:49:f5:37:f2:63:46:fb:77:90:64:11:
2d:94:eb:64:b5:70:0d:47:02:ec:af:e0:d3:a3:ca:c1:55:a5:
fe:39:ac:57:0a:da:48:74:a4:1c:49:88:53:cf:8f:48:06:3b:
ed:e6:84:65:4f:5d:96:82:1f:6f:c8:f7:d7:82:1e:27:d4:7a:
c5:2d:4a:db:4d:91:ef:3d:b1:be:5d:a8:44:ff:f8:ab:0e:f3:
c8:fa:c2:18:e7:8f:c4:dd:17:da:4b:80:cf:07:ee:c0:91:d8:
1d:31:b2:32:aa:dd:fa:31:ea:58:38:5d:db:6e:d8:fe:c1:0e:
96:f3:e0:08:ad:5e:68:13:fb:c0:43:8b:fe:ba:0b:5f:78:ab:
b5:f8:91:d5:50:4b:07:e9:4a:87:42:59:9c:b3:52:e0:c8:02:
8b:7c:15:f6:5f:c5:e4:f9:c0:51:f9:4e:a8:23:c3:2a:b5:20:
ab:1e:54:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:33 2025 by rpki-client