Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa
File: 52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa (raw, json)
Hash identifier: L1W6o0PWCl0r0whhXTD/rvh/q+j0kyleoP8ZDKYHxbI=
Subject key identifier: 7F:51:51:E9:DE:C6:43:2A:FF:CB:32:FA:BD:6A:3E:69:F9:61:86:13
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F432858487CEB3A2E5D73640B65301900
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 393249
IP address blocks: 128.189.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3a:2e:5d:73:64:0b:65:30:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=c6e54373-fce1-4b13-9905-850122d65764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:e6:83:2a:17:a8:67:66:ac:f6:44:c7:7d:
7e:da:76:b5:36:1b:9c:f2:ab:60:95:61:46:5e:22:
67:49:4a:35:97:61:80:9f:b5:a8:f3:0a:d6:9e:eb:
bf:0a:17:5e:9d:d1:4c:09:f0:13:21:94:30:53:ff:
11:a3:bb:15:2b:ca:23:07:e1:64:8d:9e:cf:cb:a9:
d4:9e:b6:93:45:61:ad:db:03:1a:ad:cd:bd:50:04:
b1:87:a4:e1:a7:ce:03:0f:2a:21:61:55:cb:ec:c4:
f0:fe:02:d6:ac:fe:5e:f6:80:dd:b1:68:f0:a6:bd:
e7:40:ee:e8:f6:55:50:87:10:c5:49:8d:ac:a1:4d:
69:75:05:c7:66:18:9e:a9:63:0d:4f:77:ce:dd:85:
85:23:22:46:d7:6f:d6:d9:64:ea:72:c9:a8:6a:de:
a2:3d:b4:a5:22:52:47:3d:e5:f9:f6:6a:1d:d3:ad:
41:1e:9d:84:50:70:35:8d:81:df:9a:e2:16:7e:86:
29:8b:4f:42:19:d9:2e:81:fe:b9:3d:67:0e:19:bc:
9d:16:c9:ee:60:5d:6c:54:99:1d:47:33:d7:93:5e:
44:9c:a7:05:ab:57:50:91:47:3a:e3:80:14:2c:51:
52:77:42:3b:0c:eb:d1:ac:0e:3d:dd:04:87:de:19:
e8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:51:E9:DE:C6:43:2A:FF:CB:32:FA:BD:6A:3E:69:F9:61:86:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/52f4b4e0-3122-3fe0-8f17-4efb2d2acdc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
128.189.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:0b:af:55:65:d9:37:f0:e8:c8:58:b4:41:76:db:9b:3f:d8:
fb:88:81:bc:1d:4d:ea:fc:36:97:bf:19:a0:8b:e2:90:2a:61:
2f:93:57:cc:bf:94:8d:24:1d:f8:c2:9a:53:3f:05:64:92:47:
5c:be:9e:fa:b4:bd:64:e6:ad:ed:31:c2:e1:bf:68:83:06:85:
5b:33:46:9c:dd:78:c8:89:aa:e3:8f:27:88:e6:c3:b9:34:30:
a6:08:62:af:64:88:5e:b7:11:75:3d:7f:2f:d0:79:e2:03:63:
de:6e:87:09:d1:78:b2:22:b4:07:3d:2b:f9:56:15:0c:9f:38:
25:48:6d:a0:19:fb:ae:ba:91:13:c8:7c:70:09:bb:20:11:fb:
a8:16:7c:c3:1e:63:e9:dc:73:9d:d9:ba:e0:5e:8e:68:9d:47:
c1:a7:27:5e:7b:d9:9a:71:13:75:8d:bc:70:af:a0:89:15:e0:
5a:85:68:02:26:ef:36:89:0c:9c:9b:a6:4e:44:6d:3b:fb:e4:
56:cf:1e:ea:8d:14:48:e6:38:c4:d0:97:5b:5f:b6:cf:8f:70:
a8:4f:cb:18:e2:bb:41:9f:e8:67:fc:cb:d1:d3:b6:3a:74:73:
41:4a:5f:38:84:8b:09:cc:25:e9:a3:af:a9:c2:c9:b0:67:77:
8e:48:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:31:53 2025 by rpki-client