Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f24d15b9-d273-33e7-b758-4692935b92f9.roa
File: f24d15b9-d273-33e7-b758-4692935b92f9.roa (raw, json)
Hash identifier: g9TOkocN93qAAT12pDVECCJwL0DwztTzw3wjkFj1e8A=
Subject key identifier: 2E:37:7D:23:AB:67:AB:18:BD:D1:7D:26:CE:1E:6A:C2:14:24:B7:AA
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F432858494B6422A25F665E30843DC300
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f24d15b9-d273-33e7-b758-4692935b92f9.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 11404
IP address blocks: 192.92.0.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:22:a2:5f:66:5e:30:84:3d:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=36f46a49-b53f-4a4f-8edf-aa37e77b6ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2e:50:be:cc:6e:f1:fe:74:24:bb:63:1a:99:
e9:be:a1:f1:ad:bf:5f:40:e8:07:05:8c:20:93:cd:
29:e3:d4:50:98:57:43:5d:3c:06:d0:08:ea:2b:cf:
06:41:3a:89:5e:1c:be:67:c3:d6:42:63:12:fa:0b:
7c:c6:e5:2e:75:fd:4c:57:94:80:3a:19:25:bb:6a:
19:42:f7:3d:1b:49:0a:77:9a:3e:26:58:32:ae:61:
5d:54:c8:6f:2f:b9:17:d1:bb:af:7d:6d:37:6e:1f:
39:1d:8b:1c:bb:a2:ae:a9:1f:44:54:31:95:26:e4:
88:57:11:86:45:ea:69:aa:a4:11:09:2c:28:3a:35:
66:a8:fc:21:71:fc:ff:84:2a:1f:e4:7b:47:28:f9:
c1:eb:dd:f3:a2:d8:a2:44:f0:5d:19:c1:35:89:ef:
4e:6d:b2:d4:a9:f8:19:b9:d6:91:f1:01:65:8d:13:
6e:87:e0:95:50:dc:58:bb:5d:27:78:d5:15:47:08:
a0:1e:d2:24:b4:7d:57:a1:3e:f2:22:d2:ff:b2:47:
46:89:51:c7:6a:66:67:b6:37:1e:0b:93:e2:74:01:
85:14:b6:54:9c:d3:f8:44:de:2c:51:5a:aa:cd:77:
e5:11:5e:34:d6:a2:22:71:89:4f:20:54:77:73:b2:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:37:7D:23:AB:67:AB:18:BD:D1:7D:26:CE:1E:6A:C2:14:24:B7:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f24d15b9-d273-33e7-b758-4692935b92f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
192.92.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:74:c9:05:3f:fa:73:b8:89:9c:c9:17:4f:8a:f3:b8:a8:c7:
ca:31:26:bb:2c:27:26:f9:33:8a:af:81:35:3d:85:6b:fd:85:
7b:b0:55:11:fd:92:7e:2a:0d:bd:07:35:05:4d:08:b5:d0:15:
45:d3:08:7a:0c:bf:12:f5:16:52:52:ba:0a:0d:5a:6e:9d:d8:
96:3a:23:ab:c2:f9:2e:cd:66:77:21:94:c4:e6:27:4e:89:cd:
72:92:56:19:7d:c6:35:59:e2:59:73:d2:56:40:3f:a8:df:43:
c1:65:43:38:46:89:29:66:04:9d:6a:ed:07:b3:98:c2:49:e0:
e0:4f:9b:c7:f7:43:f6:2d:75:8b:1b:f2:f3:7c:d5:45:fe:d3:
1a:6d:76:d8:25:2a:ba:2e:0f:3f:3a:14:df:e8:08:a6:1e:45:
b7:54:25:b3:88:f3:b6:ef:77:21:f2:5c:58:ac:c3:bb:d8:e9:
78:e1:b7:9f:d3:fe:18:9b:68:5c:ef:98:e3:ef:71:2b:48:58:
3e:22:a3:1f:79:0c:39:85:d6:c0:46:41:5f:2b:b1:63:ec:a9:
33:0b:00:8a:39:3d:27:d9:e3:dc:b5:5c:e7:4a:f7:4e:c0:f1:
97:b2:da:92:e1:04:29:00:0c:54:b3:12:71:b1:36:c0:99:d3:
c4:98:fa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:52 2025 by rpki-client