Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1e4337b3-c441-3481-9ebb-52fd6f30f386.roa
File: 1e4337b3-c441-3481-9ebb-52fd6f30f386.roa (raw, json)
Hash identifier: HdxlJnS1nd4tMRZZAhZ5yhzfN90bcMhp54mzw5mK7P0=
Subject key identifier: 98:15:D8:50:40:26:BF:ED:94:54:E3:AD:DD:5B:61:83:1E:BA:41:3B
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F43285848143A7FFD60711B0568664B80
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1e4337b3-c441-3481-9ebb-52fd6f30f386.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 11124
IP address blocks: 205.196.182.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7f:fd:60:71:1b:05:68:66:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=ce7e49ea-ade2-428d-8520-7863d7a8f274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:e7:2d:4a:e2:45:50:d6:aa:11:3e:cd:42:
61:40:76:ab:97:b1:f5:f4:3d:05:19:48:2a:cc:66:
ca:42:ae:dc:cc:67:f9:98:f0:92:d4:10:43:95:c6:
9d:19:19:03:d5:ff:e8:85:ec:57:d9:6d:75:5e:bf:
62:33:05:e6:2b:27:a9:a6:4d:bd:d2:47:c4:b5:09:
cc:b2:5e:53:76:59:b8:cd:c0:1d:ce:46:56:0c:fc:
03:e7:32:28:8a:84:64:84:3e:74:e2:ee:f2:38:3f:
8d:9b:21:4f:01:df:98:5d:de:1f:eb:5f:90:b5:63:
d0:e9:55:a8:aa:64:3f:33:ad:23:a2:1c:e3:e7:21:
4c:e9:c5:d7:60:dd:2f:bf:6b:e4:77:cc:79:fc:bc:
c3:ec:c4:bd:cf:f2:06:85:41:a2:32:22:70:3a:e2:
2a:f1:03:ae:ef:8b:e2:c4:77:38:1e:15:72:b0:97:
5b:45:94:7c:58:ff:ba:f6:3b:c4:8e:7a:86:8c:37:
7d:8d:88:86:02:36:67:d9:17:b5:ed:0d:5d:7f:3f:
4e:64:e1:ef:c8:78:44:1f:f1:9f:1b:ad:27:e6:48:
00:e8:cd:24:f2:f5:36:41:75:97:cb:0f:3f:82:5c:
f0:3b:af:f3:66:91:58:b4:93:85:bb:37:cd:2c:f1:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:15:D8:50:40:26:BF:ED:94:54:E3:AD:DD:5B:61:83:1E:BA:41:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1e4337b3-c441-3481-9ebb-52fd6f30f386.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
205.196.182.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:58:a4:f6:82:4b:8e:5f:a4:c0:a5:67:41:ef:40:61:41:a6:
a8:fe:f5:b4:2c:df:d0:a4:f3:25:ae:94:57:70:17:fb:6b:6d:
50:45:b6:b4:8c:ae:29:e9:b1:17:3e:94:80:7c:58:c4:f0:5f:
7f:c5:f6:b6:e2:8d:dc:d7:6d:75:61:58:5f:90:09:cc:85:a5:
bd:73:0e:80:0a:76:74:b1:d1:9f:70:93:be:52:7e:07:2e:cf:
0d:ba:74:03:8f:e0:8e:e6:a9:39:78:87:5a:05:ba:13:fb:7d:
ec:0e:8b:b5:d4:43:d3:3c:7e:98:28:76:92:11:51:00:a8:33:
2f:06:c7:93:a1:22:86:69:d2:3c:84:a6:b5:14:57:f9:e8:41:
66:f3:f2:62:50:0c:b6:a5:79:f2:4c:26:97:61:3e:7f:2f:66:
5f:5a:25:ad:59:2b:22:d8:c9:f8:fe:fd:f3:fa:06:bd:9c:77:
9e:45:79:5c:c9:40:3a:cb:e7:10:6d:e1:88:04:49:be:d2:22:
02:e9:04:4e:96:f5:fd:c3:4a:2b:e3:14:4a:22:f3:97:d0:25:
46:3a:44:84:86:75:ab:7f:ed:24:2f:dd:a7:c9:54:17:15:e4:
c9:39:95:d4:2f:d9:53:24:6a:5c:bb:62:9d:49:62:c0:b9:20:
69:be:2f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:17:53 2025 by rpki-client