Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/0ec82cfd-0705-3a1e-8ad9-59ae4978c880.roa
File: 0ec82cfd-0705-3a1e-8ad9-59ae4978c880.roa (raw, json)
Hash identifier: 7DH1N8ALxdyOeAW11jMWe/xGPryeOvfnE6Wxe1BptwI=
Subject key identifier: 25:E9:8F:0F:AA:89:6A:68:AE:D4:5D:85:14:4E:03:D1:3E:28:4A:8E
Certificate issuer: /CN=ce55f9da-9b86-4bde-883a-5aacddf9560b
Certificate serial: 010D0C9F43285848D7A65262799DF9B6231F5180
Authority key identifier: FF:C2:C2:39:B6:C6:12:D0:46:43:E4:F3:10:34:1A:14:F0:0E:D5:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/0ec82cfd-0705-3a1e-8ad9-59ae4978c880.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 54735
IP address blocks: 205.132.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:52:62:79:9d:f9:b6:23:1f:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce55f9da-9b86-4bde-883a-5aacddf9560b
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=9094f86f-22fe-4423-a73b-5e20d2e33fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:10:6a:3f:f8:23:ce:42:d2:1a:23:88:99:
44:98:2a:5a:bd:42:2c:d1:6e:ee:c7:a0:72:05:fd:
3f:1e:f7:b7:48:d4:03:94:52:65:5d:7d:5a:46:c5:
f2:8b:32:15:fb:04:cb:6a:b0:07:2c:dd:fa:71:fa:
28:12:dc:1f:68:09:92:09:1c:85:dc:e0:18:e4:f2:
ba:24:d7:1a:8f:d6:79:08:68:b1:7c:99:a4:79:1d:
30:46:68:2d:18:5a:63:a1:4d:c6:ec:cd:20:90:cb:
27:1c:85:f8:02:2a:b3:35:20:73:a5:62:14:c7:64:
7e:ed:cb:dc:03:87:33:50:dc:f0:71:70:99:f2:0e:
5e:20:b5:bc:a0:2c:25:d3:49:1f:c9:1a:d3:97:26:
2a:2e:15:38:73:fe:9f:e3:3f:22:cf:13:80:e7:70:
d5:02:95:6f:74:f7:fd:5c:7a:c2:41:6c:27:96:11:
25:cf:18:65:60:0f:25:82:98:30:48:e3:f2:7c:89:
eb:79:33:89:26:9d:29:c0:9b:44:07:62:c2:b7:27:
5c:6c:31:63:89:0a:54:6b:4c:e2:fa:6a:76:1c:69:
e0:a6:8f:f8:e7:08:da:3c:f9:40:7f:68:98:96:5c:
f3:b1:03:6c:0a:bc:1e:e8:cc:b2:41:b0:7e:2a:da:
29:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E9:8F:0F:AA:89:6A:68:AE:D4:5D:85:14:4E:03:D1:3E:28:4A:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/0ec82cfd-0705-3a1e-8ad9-59ae4978c880.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b/ce55f9da-9b86-4bde-883a-5aacddf9560b.crl
X509v3 Authority Key Identifier:
keyid:FF:C2:C2:39:B6:C6:12:D0:46:43:E4:F3:10:34:1A:14:F0:0E:D5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ce55f9da-9b86-4bde-883a-5aacddf9560b.cer
sbgp-ipAddrBlock: critical
IPv4:
205.132.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:b7:c4:8a:94:27:22:9a:50:95:f6:e7:7d:ea:41:85:5c:dc:
59:48:fa:3b:17:c1:80:3e:ba:d6:6e:64:69:13:ec:34:d7:1c:
8c:9f:16:e1:60:58:f2:1c:95:de:44:3e:ff:c7:49:79:32:9f:
69:6e:4f:27:a5:d0:5e:49:61:b7:da:49:c6:0c:60:ba:f5:4a:
c6:ac:b9:0f:bc:b2:ee:23:28:94:65:c6:9f:cb:eb:bf:96:4d:
d7:9c:dc:69:4a:18:70:f6:ec:b8:17:3a:40:95:af:55:8f:a4:
a5:76:43:41:34:32:03:50:d0:23:d0:fb:d3:fc:73:63:cd:59:
f8:1d:39:9b:1f:44:e8:e9:59:71:7d:d2:c2:24:0a:2d:42:24:
cc:1b:00:af:29:df:0e:54:bc:e9:8a:06:0d:d3:4e:53:e1:21:
56:17:b8:73:bd:9f:ec:0b:00:62:2f:5a:18:9b:88:68:37:8b:
64:13:7c:ea:4e:ea:0f:92:2c:8e:31:01:04:3a:f8:47:ff:f1:
b4:75:bf:f2:26:da:eb:f6:0c:ee:47:4f:fa:6b:7f:a9:ab:61:
67:4f:db:23:d6:01:3b:be:d3:34:8b:34:88:41:4d:98:f5:f2:
12:1e:05:5c:24:bb:71:77:26:f4:52:8e:06:3e:9d:ab:8f:45:
c0:83:c4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:36:32 2025 by rpki-client