Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c2b1b27e-8ac1-348d-977a-4f0765a7579d.roa
File: c2b1b27e-8ac1-348d-977a-4f0765a7579d.roa (raw, json)
Hash identifier: CNMAntJdjKdYtFylbDpzYdtiDB08tTP4n/JZfar1Ikk=
Subject key identifier: 42:5B:12:BB:BA:8F:19:F7:2A:07:C8:81:05:D7:75:20:4F:5C:F3:48
Certificate issuer: /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial: 010D0C9F43285848F926A4BBB940ED7F25A69B30
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c2b1b27e-8ac1-348d-977a-4f0765a7579d.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 5050
IP address blocks: 192.88.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:a4:bb:b9:40:ed:7f:25:a6:9b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=4ad1018e-4df1-46b7-ab02-876ad11955b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:38:a9:76:2b:16:8d:9d:b0:ba:ae:88:da:c3:
15:04:18:8a:48:0b:65:bc:5e:73:44:f8:07:28:bf:
ea:7b:9e:b8:83:34:8c:f6:9a:64:6d:71:6b:43:60:
57:ef:10:88:6b:53:f8:14:aa:25:05:8a:5b:35:6f:
82:1a:2a:c6:57:e5:0a:72:40:d7:b1:e0:8e:f5:d5:
ce:38:b2:6a:ed:2b:15:1a:ba:7e:15:99:2b:92:87:
08:03:08:c4:a4:c6:0b:4b:ee:4f:46:94:33:a9:0f:
00:c8:56:28:44:8d:f2:6d:e8:c1:16:d3:ff:a5:c8:
77:62:83:ce:0d:a9:db:01:c2:d4:19:b2:44:7b:35:
64:59:c7:d8:89:64:f7:ca:2f:c9:b4:b7:1c:b2:1d:
cf:db:e7:4c:f3:4e:39:a7:96:b2:c2:8b:0d:bc:bb:
b1:3b:e0:40:4c:bf:d1:12:c8:6a:88:a3:dc:bc:eb:
58:d2:59:28:51:7a:ba:45:ef:22:7b:fd:99:09:6d:
5b:ba:ef:71:7e:26:d4:14:47:75:a2:1b:da:5d:69:
1a:fe:e4:5f:0d:4d:0c:e6:e0:c5:e1:09:04:5b:df:
89:fe:2c:94:3f:af:65:96:74:37:ed:02:0c:29:6f:
db:25:b1:6a:56:5f:7c:ad:87:a9:56:89:ec:86:58:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5B:12:BB:BA:8F:19:F7:2A:07:C8:81:05:D7:75:20:4F:5C:F3:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c2b1b27e-8ac1-348d-977a-4f0765a7579d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
X509v3 Authority Key Identifier:
keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.88.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:53:97:4c:72:e8:56:d7:d4:be:27:91:6b:c9:a1:47:09:08:
72:81:a5:01:32:fd:a8:05:ff:15:a0:f3:1b:12:a3:10:c5:7e:
b9:8c:fe:a9:e2:93:f6:c8:3d:c5:b8:7e:27:41:85:b8:0a:48:
8b:18:40:ba:11:25:a7:75:4d:c7:08:f0:63:ae:10:a9:8e:40:
7b:a8:0b:3b:c0:e6:0e:85:67:f0:b5:20:82:ae:a6:bf:62:21:
3e:15:be:a7:9e:20:69:2d:00:a2:42:af:c5:b6:23:a0:b4:0c:
d9:d2:6b:f8:fa:d3:83:db:41:89:2e:08:e6:8a:9f:ea:be:34:
b0:00:76:77:66:14:b8:83:ff:0f:22:39:89:9d:2c:40:3a:20:
f2:8c:68:ff:1e:24:c8:b0:93:ec:c2:83:1c:68:0f:be:4d:d9:
52:b8:70:3a:88:08:d6:14:e9:7d:3d:16:dc:fb:86:de:0e:8a:
b1:d9:68:ca:0e:31:a0:e2:7b:9a:9d:1f:e6:5d:a1:e9:1d:be:
33:fb:df:4e:67:eb:5d:63:86:a0:ea:d4:2e:6e:fb:68:5e:f6:
96:13:fa:c8:8d:28:71:43:3c:6e:8d:2a:ac:eb:f3:e4:3b:81:
36:c3:99:a6:fd:db:aa:76:43:3b:47:78:75:7b:a2:67:62:4a:
c5:6e:c3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:30 2025 by rpki-client