Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa
File: 19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa (raw, json)
Hash identifier: evdmYLNRHwsNt6b3y1of5q81CDqQ/0VQ+b8tXnblwWc=
Subject key identifier: C9:0D:FE:83:4B:82:35:F9:33:D2:72:B5:28:18:8D:B4:D4:B8:AE:47
Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial: 010D0C9F43285848DA70FF41250592ECBC0B6F80
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 5645
IP address blocks: 192.252.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:ff:41:25:05:92:ec:bc:0b:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=86ec9e05-0562-4263-89bf-3655d7e37022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:3a:b9:ab:df:44:be:72:07:31:00:e8:b6:
ed:36:c0:9c:0a:b1:29:d9:26:7e:a0:7d:8e:19:fc:
3f:5d:45:60:3d:d1:a6:2b:41:35:0b:48:0f:de:f5:
1a:bc:8e:e6:e3:49:37:e5:8e:31:ff:d1:62:7b:73:
d7:ec:29:b5:9b:2f:1a:0c:65:32:82:19:6b:70:5d:
aa:75:0d:47:4f:51:57:56:e5:6c:20:28:46:fd:73:
64:0c:30:8a:c4:14:cf:9c:dd:f7:a2:3e:23:3a:ee:
4b:99:9c:4d:3e:7a:80:f3:10:ce:af:40:59:c9:a3:
8b:25:dd:7e:3e:ea:ab:ae:cb:66:7b:be:8e:79:42:
d5:2d:28:9c:4c:b4:97:b1:14:88:73:fb:67:be:9f:
42:44:fa:81:93:fb:36:01:2b:5e:86:92:03:90:8d:
06:6f:66:7b:af:f9:75:cd:0b:f5:16:ed:af:68:6b:
05:94:43:60:b7:52:23:97:dc:44:0b:b9:28:21:4f:
17:32:40:84:b6:72:bc:c0:3d:64:09:00:6f:09:85:
4e:c0:2c:05:e4:31:95:bb:04:c7:31:c9:63:10:11:
e2:cc:9d:d4:65:81:c5:e4:a1:f9:a0:ad:1d:0c:cd:
4f:11:30:ff:16:d3:34:9f:70:c9:09:5d:20:3a:17:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0D:FE:83:4B:82:35:F9:33:D2:72:B5:28:18:8D:B4:D4:B8:AE:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/19c5fa0a-4c94-3cfe-a910-8deffbabdc7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
X509v3 Authority Key Identifier:
keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
sbgp-ipAddrBlock: critical
IPv4:
192.252.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:c4:4f:4e:af:e3:98:60:81:03:37:8b:2d:a2:f9:ca:f6:46:
1c:93:67:0e:8d:46:78:93:c4:8c:21:e0:df:66:f3:dc:f4:06:
9a:bb:0b:32:01:08:13:34:f7:e3:19:15:f4:15:24:ae:0b:3b:
fa:44:21:fb:7d:c3:80:84:3c:a4:88:da:f9:a6:a5:30:b2:dc:
3c:41:4d:ca:00:28:73:ca:51:78:05:e5:32:2d:2f:49:c9:cc:
09:ea:6e:b1:e9:f5:ce:fb:cf:74:4e:8c:6c:7c:a5:76:1c:d1:
50:62:9c:04:a9:f1:3a:79:82:2b:2a:3f:cd:7f:a6:b3:47:c2:
9b:c3:ff:99:d2:2d:78:2e:57:d5:c9:66:3b:7c:b8:88:a6:87:
1e:58:4a:2e:e5:05:85:f6:4e:24:78:59:93:c3:74:3c:c8:60:
62:9b:ba:c8:ca:62:a6:bb:5c:0c:87:a3:91:72:1f:8f:4b:c7:
9f:75:62:db:88:d2:ee:c2:52:24:a2:ce:c4:47:7b:56:cc:79:
95:81:ac:54:62:52:21:1d:bb:5f:ad:a2:21:af:28:68:95:4c:
c4:af:aa:df:21:88:0b:45:bc:06:86:91:c8:8d:68:44:a4:f9:
d8:f5:ae:1a:f7:c5:2f:63:76:d9:2e:7f:94:0c:e3:92:73:ae:
3f:d6:45:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:37:15 2025 by rpki-client