Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/3d5daa13-cf4c-3d26-8131-b9837235efd2.roa
File: 3d5daa13-cf4c-3d26-8131-b9837235efd2.roa (raw, json)
Hash identifier: BUM+u+Am1fXdt1oADR12GRjsKeZjjeVGyJ2egJAZUJU=
Subject key identifier: B2:1F:81:E0:28:94:8B:3F:8B:31:38:2D:DC:5A:4F:12:41:4E:68:DA
Certificate issuer: /CN=45b8fbfe-2e8c-4cd8-ab63-10254221356e
Certificate serial: 010D0C9F43285848FD569D11EF8611E4C3CE9C80
Authority key identifier: 41:EE:BD:C1:99:0F:E8:FA:C2:55:8B:D8:A8:36:EA:5A:60:04:26:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/3d5daa13-cf4c-3d26-8131-b9837235efd2.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 396480
IP address blocks: 192.84.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:9d:11:ef:86:11:e4:c3:ce:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45b8fbfe-2e8c-4cd8-ab63-10254221356e
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=4e4e8639-05d9-4d06-a0cd-3ed00048c028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:55:d7:f6:4a:1d:09:1a:0a:22:21:0d:40:
36:4c:46:6a:a7:a2:91:a1:fd:39:85:e2:48:af:d0:
90:42:f3:50:cf:02:90:0d:d9:c8:1a:2f:c1:c5:ea:
15:79:41:4e:5e:81:69:8c:5a:5b:65:e3:fb:a7:8a:
bf:33:b6:4d:cc:1f:f4:e5:4f:87:63:f0:d6:8b:9e:
3e:3f:af:2e:9d:6c:d6:bc:70:8d:e9:da:e2:53:ef:
1b:1a:f4:aa:27:c0:0b:15:9f:51:68:4e:dc:36:61:
e9:66:46:76:99:c6:f6:87:11:a1:03:64:30:88:a9:
17:cc:56:c3:57:d0:29:c4:12:d5:3f:75:f9:8b:5a:
b1:04:d1:c9:89:49:af:1a:3f:a5:ac:d9:cd:a7:98:
95:14:22:f3:39:d3:56:63:f7:a5:2a:1d:51:97:74:
8d:12:8b:00:65:8b:f0:15:07:1a:41:6e:64:83:3a:
00:41:e0:49:25:bb:3d:36:27:d3:30:0a:8e:4f:fa:
3f:50:ee:99:51:29:85:02:bc:73:83:d3:9e:0c:b7:
e8:a6:ba:2c:c4:d9:f7:c1:2f:48:a5:55:22:22:57:
08:64:26:d7:2a:15:9b:53:f7:94:53:d3:32:1a:65:
bd:5e:b5:7a:94:88:bc:f5:aa:cb:21:4d:09:31:03:
a1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:81:E0:28:94:8B:3F:8B:31:38:2D:DC:5A:4F:12:41:4E:68:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/3d5daa13-cf4c-3d26-8131-b9837235efd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e/45b8fbfe-2e8c-4cd8-ab63-10254221356e.crl
X509v3 Authority Key Identifier:
keyid:41:EE:BD:C1:99:0F:E8:FA:C2:55:8B:D8:A8:36:EA:5A:60:04:26:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/45b8fbfe-2e8c-4cd8-ab63-10254221356e.cer
sbgp-ipAddrBlock: critical
IPv4:
192.84.243.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ec:6f:ee:e5:4a:c7:8b:c9:4e:6d:dd:3e:46:86:e4:2b:1f:
f8:59:3a:e0:3f:3c:2d:41:2d:e9:4e:0f:9a:43:7a:35:78:77:
f3:6e:ad:24:79:87:62:4a:26:a8:a3:7f:e8:c4:46:5a:f5:40:
f2:f4:a8:3e:93:2f:22:d0:14:37:b8:98:4b:4d:ff:50:7d:18:
1b:98:6f:b8:9e:68:30:8f:b6:4b:f4:b9:6b:fe:ee:22:c1:73:
31:7e:4c:d5:46:8c:ba:5c:c6:54:fc:c3:d1:fa:19:ce:e1:dc:
be:1c:5a:cf:b6:ca:68:50:5c:b4:5d:e5:66:5b:84:26:e0:99:
52:e3:71:b4:58:e9:ee:40:6e:86:7b:ad:94:93:3b:77:9e:b5:
68:3b:30:08:86:fd:45:1b:20:7b:bf:22:82:03:d3:c0:05:1c:
c4:4f:73:9f:80:6a:53:d3:58:17:c8:0e:27:26:5f:2a:52:df:
81:05:37:8e:5b:65:db:ef:e3:60:8f:84:25:af:9a:4f:1e:a2:
d6:ae:01:33:0d:3a:d9:9b:ee:ca:e4:0e:54:2b:66:d1:50:e4:
7b:7d:4c:17:1b:b0:6b:26:b5:93:f1:f8:9d:67:21:9d:aa:b9:
c4:c7:4d:59:a9:ca:7f:29:9d:77:2b:60:9b:73:68:bb:7b:26:
37:52:9f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:59 2025 by rpki-client