Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/23aa5ada-e8c6-3774-8704-d313c1478c4a.roa
File: 23aa5ada-e8c6-3774-8704-d313c1478c4a.roa (raw, json)
Hash identifier: 1ivY4XlE9o4I/u1qr+tnECdav+lK82cTaKOen39/7v4=
Subject key identifier: AD:FC:D8:33:86:40:A4:60:2B:11:02:90:88:3E:28:C3:39:30:10:DE
Certificate issuer: /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial: 010D0C9F43285848F9269DACEDE1A465C57F3080
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/23aa5ada-e8c6-3774-8704-d313c1478c4a.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 19331
IP address blocks: 192.199.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:9d:ac:ed:e1:a4:65:c5:7f:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=e09e69e3-c23c-451c-bd8b-ef0d518186ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:ff:d7:8f:56:5b:db:ac:d9:7a:f2:44:7d:
90:7a:3d:2c:6c:07:da:45:ba:5d:c6:c8:b6:cd:26:
48:49:74:e5:ce:31:57:dd:d5:d7:8c:e0:2e:9f:e8:
99:79:c3:df:49:94:42:3e:5e:49:1f:e2:95:80:a2:
5f:bb:02:a9:f2:c1:44:4e:84:1c:86:79:ef:5b:c6:
dc:2d:3e:c1:a8:9b:1d:77:0b:9f:9c:ac:f3:bf:cd:
ad:e5:fa:06:36:04:d5:0e:d0:93:e4:c1:e1:a7:0b:
16:fc:cb:82:4a:3e:11:2b:df:07:e5:26:e9:31:e3:
7b:22:b7:df:4a:0b:16:76:f3:6b:0d:a0:38:87:85:
49:dd:b1:96:ce:1c:eb:4a:50:99:cf:0d:cc:2c:4c:
9a:15:08:79:0f:a5:9c:db:b5:11:35:f3:74:55:a0:
c7:dd:ad:01:82:99:9f:eb:1c:cb:26:b5:61:22:95:
0b:16:8b:89:4f:fc:21:a8:50:2a:47:d4:36:6d:08:
e7:9a:a9:9a:ef:55:12:e0:0e:1e:8f:87:83:81:c1:
e0:22:42:0e:e1:78:86:c5:57:b3:08:33:3c:34:53:
c4:5b:69:fb:ee:04:51:6b:26:22:16:cc:07:a0:fb:
da:2b:07:8c:23:6f:a7:a3:f1:03:ac:09:67:c2:09:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FC:D8:33:86:40:A4:60:2B:11:02:90:88:3E:28:C3:39:30:10:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/23aa5ada-e8c6-3774-8704-d313c1478c4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
X509v3 Authority Key Identifier:
keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.199.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:53:bf:97:ac:4b:e0:ec:df:4f:9d:e4:ba:1b:41:47:7b:13:
ab:3a:97:c7:bf:ab:cd:06:62:23:ce:f0:f0:63:b8:74:cc:0b:
a9:17:47:2c:e4:aa:b5:60:c4:58:31:45:11:a3:b3:02:5b:2d:
da:4d:04:5e:2f:d2:bc:32:1a:9e:35:67:bc:22:61:fd:35:80:
89:58:a9:2b:90:21:1f:ae:da:e9:b9:f5:7a:36:43:c4:38:05:
74:e4:80:8b:56:7c:4b:b7:9f:e5:25:16:68:bb:4a:1b:66:1a:
7b:a3:65:97:f5:0d:a1:12:b9:fd:be:78:65:ef:56:ec:27:0d:
8c:b9:83:70:4f:89:a6:fa:62:08:4a:f7:a2:7f:03:e3:3e:ff:
7f:0e:b2:8b:0e:81:d0:5d:ca:a5:24:04:f0:87:d6:e4:45:dc:
c9:9d:3b:80:58:85:af:82:fe:16:32:46:5f:6e:85:86:3f:30:
6c:0d:3d:c3:41:99:fa:7c:f1:3c:50:18:52:93:4a:02:9b:41:
54:c8:a1:9e:57:ef:83:df:5b:85:90:be:8c:cf:34:3c:75:19:
4f:3c:91:88:88:57:45:ed:04:3f:40:58:ce:ba:dd:54:71:87:
9b:ef:5a:80:5f:9e:7f:3c:7e:30:ed:41:09:73:49:be:ce:04:
60:b8:db:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:41 2025 by rpki-client