Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/50e13e91-c133-394c-976b-9cabe9d2d09f.roa
File: 50e13e91-c133-394c-976b-9cabe9d2d09f.roa (raw, json)
Hash identifier: 69HydUBx3ze3fjUoN0f4Uyqxg7OAY7buoUn90NJn/+8=
Subject key identifier: D3:8B:E8:EC:EB:42:BC:C6:FA:6A:25:9A:45:8D:25:44:DF:E2:BA:24
Certificate issuer: /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial: 010D0C9F43285848AF2B80C0CA198D2669F6C380
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/50e13e91-c133-394c-976b-9cabe9d2d09f.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 45
IP address blocks: 192.188.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:80:c0:ca:19:8d:26:69:f6:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=e6c7406f-da11-4a30-a8e2-282c6d8a3514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:7e:3c:40:b6:ff:d9:50:38:61:1f:ef:8c:
03:fe:36:7e:f5:12:c2:6c:32:56:0f:78:30:7d:69:
13:95:df:b9:fe:fd:cf:8e:b8:6d:8d:f7:23:64:bc:
a9:66:f8:d4:0d:57:05:19:bc:65:f9:6a:42:bd:77:
53:bd:ad:08:4f:da:3c:0d:3b:f9:94:31:f2:8e:50:
ab:4d:17:04:47:e8:e6:04:17:38:1c:df:bf:d1:5c:
e0:83:d1:2f:5a:9b:ef:09:f0:04:95:d1:ff:46:1a:
20:a8:1f:fd:e1:3d:5b:ca:f8:c8:61:1a:0f:37:82:
19:66:ee:a4:34:ce:d0:46:4b:ff:38:c9:31:84:41:
6b:d0:63:d0:da:e2:86:90:1e:8d:03:69:e0:9f:3f:
b6:ce:fd:90:69:e5:6c:6e:46:65:81:ab:07:47:5e:
62:44:df:b0:39:37:75:ad:c2:54:41:2a:b8:be:07:
a5:f4:3d:16:9c:f3:fb:44:26:0a:b1:d5:0f:8d:11:
1f:c4:aa:cf:95:7e:30:70:c5:3f:9b:b8:40:ee:f2:
71:d1:86:e1:d4:75:f7:41:f5:75:0b:3c:23:d6:c4:
22:0e:fd:5a:9e:9c:f8:0e:20:d3:10:09:df:72:83:
30:51:c8:bb:60:40:86:81:c6:c1:0f:c9:27:0c:63:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8B:E8:EC:EB:42:BC:C6:FA:6A:25:9A:45:8D:25:44:DF:E2:BA:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/50e13e91-c133-394c-976b-9cabe9d2d09f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
X509v3 Authority Key Identifier:
keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
sbgp-ipAddrBlock: critical
IPv4:
192.188.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:24:19:83:c0:e1:c6:f1:a4:97:01:f4:82:f0:98:d6:05:ff:
cc:ac:68:8b:2e:80:c2:56:3b:cf:39:7c:aa:0f:ed:4d:32:0c:
1d:35:ac:f8:37:9d:d8:32:a0:2c:a9:fb:f8:02:b8:57:f7:2e:
a2:a2:67:2d:cb:1a:ac:0a:e9:15:f5:32:40:c7:38:bb:a1:42:
ac:ea:82:21:51:c3:8c:31:6d:20:bb:6f:ac:2b:c1:02:d3:fa:
a9:28:56:60:db:e3:00:a9:0f:26:b6:d3:e0:6c:19:1d:0e:b0:
d3:ee:6d:33:29:81:b3:03:89:e9:4c:ea:5c:d5:0b:1d:4b:b2:
83:3f:5c:88:6a:d2:9f:c3:43:2b:a1:8d:ec:3e:13:94:a4:62:
ce:15:e1:91:1e:07:49:20:9c:a6:a2:10:59:fe:21:62:89:89:
9c:e6:42:db:24:ed:da:e0:af:81:bd:3e:d6:5c:65:47:33:40:
14:8c:ac:5a:9a:86:5f:8f:ac:2d:69:8e:14:9d:0f:b5:9b:24:
65:d6:77:b4:a8:b4:ba:a9:a2:10:21:ee:0f:68:ef:80:a4:8f:
d6:0c:45:03:bc:d7:c0:9d:3a:b4:50:52:af:e2:2a:36:6a:7d:
8b:42:78:bf:52:88:9a:a1:12:1f:67:e6:cf:b7:44:e8:c8:3b:
e2:7d:94:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:15:35 2025 by rpki-client