Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/f7b3e1e4-f7e6-365d-b936-0927d756844d.roa
File: f7b3e1e4-f7e6-365d-b936-0927d756844d.roa (raw, json)
Hash identifier: /z3HD6069QthImYnAWh4hURXiUL+QtwvdlpB8cK+CII=
Subject key identifier: B7:5E:36:90:BA:3C:F8:76:59:89:AA:E7:AB:1E:E5:0F:7C:53:7C:F3
Certificate issuer: /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial: 010D0C9F43285848ADC60364CD31B1D0315B33C0
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/f7b3e1e4-f7e6-365d-b936-0927d756844d.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 13768
IP address blocks: 192.154.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:03:64:cd:31:b1:d0:31:5b:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=b0fb01ff-c126-4998-b0c6-72ffdaf2a455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:86:00:21:c9:32:fa:58:8f:8b:89:35:18:
5f:23:9a:01:51:fe:30:01:f2:95:b5:00:93:bc:9e:
50:8e:6a:e3:55:ec:dd:6b:c8:36:c7:d4:dc:e4:f0:
d7:a8:ec:48:81:dc:71:3f:2c:ce:bc:46:6b:3e:aa:
27:d6:3d:97:e2:1e:30:cc:0a:55:ac:1a:8a:70:15:
ac:1d:b1:ed:ab:7e:a0:89:4c:ed:99:8b:b7:a2:e5:
3c:57:75:aa:96:c4:d2:88:4b:f7:bf:3b:ab:b1:1a:
2b:fc:1c:99:36:8c:92:fa:63:ec:85:3d:3d:6f:2d:
82:7f:5b:a9:29:9e:1f:bf:a1:59:0b:d7:f1:2f:be:
1c:63:32:18:ff:7c:2a:65:61:8e:a8:c0:3a:5e:eb:
df:aa:b4:3f:ac:09:fb:ab:3a:07:17:00:84:57:c6:
b0:92:21:4c:7b:27:37:04:55:85:3a:4f:55:0f:c2:
1e:43:4e:4b:a5:a6:80:e1:83:1b:42:2f:47:5c:32:
88:dc:a4:55:9c:1c:d0:38:c5:d2:80:71:5b:20:e5:
d8:6f:4c:08:8d:c8:fa:a1:7a:1c:bd:f8:2c:66:18:
f7:8a:ea:55:43:41:71:1f:62:8f:f4:10:9d:47:24:
21:05:7e:ed:27:98:f5:2e:00:b5:22:0f:eb:8b:36:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5E:36:90:BA:3C:F8:76:59:89:AA:E7:AB:1E:E5:0F:7C:53:7C:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/f7b3e1e4-f7e6-365d-b936-0927d756844d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
X509v3 Authority Key Identifier:
keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
sbgp-ipAddrBlock: critical
IPv4:
192.154.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:a2:89:60:50:cf:0c:6f:50:98:3d:08:4f:99:82:07:37:d2:
58:e3:1f:82:c3:d3:41:7a:d9:aa:f3:4a:e8:2b:24:20:09:e4:
ea:4a:07:f5:58:45:d9:65:61:f8:02:40:66:39:87:8e:69:e3:
e0:40:cb:93:3e:51:d3:e2:47:10:8c:ba:46:96:be:d1:55:33:
b1:de:23:56:77:ec:f9:18:c7:08:ad:9f:83:cf:43:6c:f6:5a:
4b:0d:28:a1:b1:f2:25:91:33:f1:18:e5:ea:2f:92:9a:97:6d:
e3:d6:6b:98:d1:a2:28:e2:1a:61:e6:54:39:4d:a8:f5:af:9b:
95:5d:fd:8c:59:b5:4b:36:69:35:4e:ba:d4:4a:90:e4:56:5c:
fa:cb:38:70:58:2a:f8:00:b8:c5:fd:f2:d2:95:e6:c1:1c:88:
fd:86:74:31:6d:ef:ca:4a:e9:27:3a:bb:f3:ee:e6:3b:0f:09:
e5:2c:60:d5:ff:cd:72:1b:30:4d:65:e3:f2:6e:c9:ed:43:cb:
43:bc:b0:75:ee:ed:45:1f:5d:78:b0:10:56:f8:e5:e7:90:e0:
bc:18:33:d6:ef:21:70:d6:c0:bb:9d:e1:80:fc:b5:a9:dd:74:
5b:6b:f9:bf:ae:a7:97:b0:cc:07:5c:5c:e3:b6:7f:00:6f:11:
b9:71:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:19 2025 by rpki-client