Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/b6a532df-da9c-3734-8cc8-975860ee4905.roa
File: b6a532df-da9c-3734-8cc8-975860ee4905.roa (raw, json)
Hash identifier: QE8wYe+Gjnwp3ruRiX4sFAx791xhOo22mXX9RFMd4LM=
Subject key identifier: FB:82:FF:D8:66:35:0B:29:A5:29:D6:89:1A:96:26:EF:E5:F0:80:1D
Certificate issuer: /CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c
Certificate serial: 010D0C9F432858487DC52D45CF30AEB77125CA80
Authority key identifier: 8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/b6a532df-da9c-3734-8cc8-975860ee4905.roa
Signing time: Thu 09 Jan 2025 21:20:13 +0000
ROA not before: Thu 09 Jan 2025 21:20:13 +0000
ROA not after: Wed 09 Apr 2025 20:20:13 +0000
asID: 203020
IP address blocks: 142.202.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7d:c5:2d:45:cf:30:ae:b7:71:25:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c
Validity
Not Before: Jan 9 21:20:13 2025 GMT
Not After : Apr 9 20:20:13 2025 GMT
Subject: CN=af6678d1-389a-487b-a914-d24d4bfe4751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:48:a5:16:d4:2e:62:fd:4b:3c:13:55:09:6b:
9b:d8:06:aa:32:c8:0a:16:2a:3f:7f:fe:cf:b5:96:
a5:43:0e:97:20:dc:84:1e:03:74:70:bb:93:8d:59:
c1:5d:87:3e:97:ca:cf:f2:91:db:f2:65:32:df:3f:
a8:67:64:97:5a:4b:86:5d:5e:f6:75:a2:67:6b:02:
ce:15:cd:b9:b3:60:ed:d2:3c:e1:09:94:43:04:7d:
5a:47:f3:cb:ed:d3:8d:05:37:53:d4:a9:6d:41:c0:
47:19:76:c1:43:2f:44:d6:e1:f3:db:0c:b1:e7:8a:
e9:12:a4:e7:a5:07:81:07:19:7c:d3:e6:d4:3a:63:
75:ca:77:68:7b:34:96:8c:da:6d:0d:6b:96:1c:c3:
55:18:9c:83:82:34:99:5a:c6:bf:65:aa:4f:04:86:
90:98:e9:b9:9e:8b:7f:e2:b5:e8:be:36:aa:ac:b7:
6f:da:ba:ce:15:65:92:32:fd:71:7d:4a:31:fc:b1:
b7:d8:d1:8b:8c:3f:54:3e:b2:ad:9c:3d:36:d2:d0:
66:51:c0:88:b2:b5:e7:9b:d2:76:f6:fa:cf:29:f8:
39:cd:e4:8c:a5:02:d8:53:13:bc:c7:6e:da:bd:8c:
87:cf:9e:d0:d1:42:8f:57:fb:f4:09:44:4c:7f:a7:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:82:FF:D8:66:35:0B:29:A5:29:D6:89:1A:96:26:EF:E5:F0:80:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/b6a532df-da9c-3734-8cc8-975860ee4905.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl
X509v3 Authority Key Identifier:
keyid:8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:7f:1f:79:44:cb:c8:5c:7e:c3:ec:27:9d:c9:87:3d:b2:76:
2d:b1:f8:28:3b:76:c6:84:ff:79:07:0e:ba:f9:0e:94:54:10:
72:49:af:85:e8:e7:14:d6:9e:52:73:36:33:dd:95:27:b0:60:
2d:0b:7b:ae:49:23:4d:d1:ec:ba:1b:f7:93:fc:fd:4f:fc:77:
2f:67:b2:71:67:a3:5b:55:a3:3d:81:cc:84:4f:f6:d3:cd:6e:
03:e0:90:90:8f:43:67:29:59:7d:e2:73:da:f0:3c:ee:67:a8:
d9:9b:56:5d:b5:17:c9:af:92:62:b5:e6:19:c5:f0:80:90:b4:
ee:b9:38:ea:a4:05:e0:da:aa:94:27:cd:99:65:85:d5:0b:1f:
ca:78:69:fa:14:36:e7:d1:e2:7b:ef:7e:c1:72:85:79:e0:b2:
56:5d:5d:b8:51:21:29:9f:8b:c3:a1:12:f8:88:80:de:6a:0a:
00:e1:96:d4:c9:1f:11:b8:0c:4d:de:f3:94:0b:71:c9:67:f7:
ca:63:dd:0d:2d:08:ce:44:96:11:59:c8:91:74:ff:62:d8:80:
ec:76:78:a7:9b:84:bc:3e:3e:fd:76:09:47:db:bf:34:2e:6d:
25:b8:b0:b4:0e:b0:43:d0:b2:57:77:ec:6b:1c:b3:0e:b5:07:
3c:ec:78:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:55 2025 by rpki-client