Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/4a473e58-ddc0-39ea-a012-7daaa18312b1.roa
File: 4a473e58-ddc0-39ea-a012-7daaa18312b1.roa (raw, json)
Hash identifier: HuOeUgTzbUUG9fEzCw+zdKIeZvZCwtTX8BlqJkGZdMU=
Subject key identifier: CA:3F:91:0B:EE:A5:67:30:18:9B:CD:15:49:D5:0F:76:A9:3A:C0:98
Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial: 010D0C9F43285848C6E62EA6BBB3FBCEAC530160
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/4a473e58-ddc0-39ea-a012-7daaa18312b1.roa
Signing time: Wed 05 Feb 2025 02:00:39 +0000
ROA not before: Wed 05 Feb 2025 02:00:39 +0000
ROA not after: Tue 06 May 2025 01:00:39 +0000
asID: 16433
IP address blocks: 192.190.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c6:e6:2e:a6:bb:b3:fb:ce:ac:53:01:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Validity
Not Before: Feb 5 02:00:39 2025 GMT
Not After : May 6 01:00:39 2025 GMT
Subject: CN=7feaca9c-02ef-4879-b68f-a2124048dcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0f:63:c5:3a:b8:aa:76:1f:eb:51:1e:f9:74:
30:e5:4a:9a:e2:c8:e7:69:67:cb:a0:e6:7c:0a:71:
6f:47:66:2c:16:1c:19:d3:c8:39:56:97:73:17:b8:
63:54:12:6f:83:dc:29:2c:87:23:60:0e:19:ea:f8:
32:90:30:46:59:d9:f0:29:f1:34:12:8e:0c:e7:91:
36:ec:ad:08:96:12:8a:e0:fc:5e:f7:88:bd:38:8f:
8c:c5:4b:d5:67:9e:69:bc:16:42:e4:d5:51:5a:dd:
4f:aa:2f:8d:2f:31:92:9b:16:12:ca:e4:25:c2:a7:
e6:05:68:fb:85:3d:a4:b8:cb:e2:d5:73:58:e2:83:
c9:0d:f4:64:35:94:16:8b:a9:cf:39:42:39:aa:c8:
ae:9a:f9:74:56:02:e2:fd:3e:cf:bd:3a:3b:1d:50:
fc:ed:e1:37:69:ce:02:4f:28:a0:e3:05:32:6b:91:
5a:5c:ce:ad:1a:15:55:03:ea:4c:16:b0:6d:02:de:
36:91:a2:a0:e9:cb:d3:66:9d:db:5a:e6:94:56:62:
b5:d5:ef:20:58:3a:34:21:6d:a2:cb:d5:58:4e:7f:
cb:c8:d5:bb:61:41:67:c4:09:ce:0b:a2:84:6a:3c:
7b:65:43:39:61:dd:fc:88:b9:74:4b:38:16:e0:60:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:91:0B:EE:A5:67:30:18:9B:CD:15:49:D5:0F:76:A9:3A:C0:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/4a473e58-ddc0-39ea-a012-7daaa18312b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
X509v3 Authority Key Identifier:
keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
sbgp-ipAddrBlock: critical
IPv4:
192.190.226.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:8c:9b:29:32:34:b1:17:5a:7c:9b:32:15:be:aa:bd:68:8a:
43:58:25:89:38:be:7b:60:04:b0:e0:bc:78:d2:15:d2:3a:7b:
91:39:65:95:55:cc:57:b3:62:71:6c:0d:a3:f0:ef:34:bf:4f:
97:89:60:3b:26:ad:94:1d:8d:16:ad:ff:5e:70:8c:62:2b:50:
01:5a:f3:af:75:e4:d0:f6:d9:22:f4:76:e0:31:34:e5:60:27:
75:a7:1b:77:6e:90:8f:25:ea:0b:3f:00:ee:35:17:6e:7a:93:
c5:a5:34:fc:a2:c6:cf:cb:ec:6a:26:a7:ce:6d:69:3e:f1:79:
ff:56:fb:f4:ac:5a:0e:80:86:51:6a:7d:85:0e:73:30:29:14:
fa:c1:dd:93:a4:d6:06:a5:67:38:b3:52:81:59:71:79:f1:82:
68:a6:50:99:8f:e4:10:8e:79:75:f3:08:8c:d6:94:4e:1c:65:
7a:fd:a8:5f:2b:f5:4a:2c:56:75:cf:b3:5e:3e:f2:c1:f4:95:
be:fe:63:da:34:0e:f2:ee:6a:d5:18:52:f3:0a:32:a8:c4:c2:
a6:ed:1e:28:bf:1c:11:c8:df:eb:cf:e8:d9:98:06:5f:42:ab:
29:ca:56:ac:15:68:65:f7:d6:a2:e6:82:0c:ff:4b:79:e5:29:
a5:34:f3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:42 2025 by rpki-client