Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/f7f91e4f-3b21-37dd-bfa7-81e93e325a56.roa
File: f7f91e4f-3b21-37dd-bfa7-81e93e325a56.roa (raw, json)
Hash identifier: QrEt741Bwp2Vy2fqrRSK4y6Sak0dCbCdjFUcrE4AvBs=
Subject key identifier: BE:46:0F:96:66:38:4D:28:2A:4D:AC:23:8A:92:56:5E:59:50:77:2E
Certificate issuer: /CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Certificate serial: 010D0C9F43285848530AED2B0CFE2C502F343E80
Authority key identifier: FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/f7f91e4f-3b21-37dd-bfa7-81e93e325a56.roa
Signing time: Wed 25 Dec 2024 14:00:52 +0000
ROA not before: Wed 25 Dec 2024 14:00:52 +0000
ROA not after: Tue 25 Mar 2025 13:00:52 +0000
asID: 399240
IP address blocks: 12.42.147.0/24 maxlen: 24
12.188.33.0/24 maxlen: 24
12.215.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:53:0a:ed:2b:0c:fe:2c:50:2f:34:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162
Validity
Not Before: Dec 25 14:00:52 2024 GMT
Not After : Mar 25 13:00:52 2025 GMT
Subject: CN=1da15aa9-b3f1-4c6f-a366-8edd022c9106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fd:66:0b:14:66:b0:99:10:08:51:3f:8b:77:
8d:54:20:15:e3:08:fb:09:11:fe:a2:32:9c:51:c4:
e1:4e:f8:b6:0d:d6:4a:c6:c9:5c:be:46:15:6f:c1:
cb:b7:5f:00:45:41:1d:fd:88:d9:b3:de:76:4f:98:
4d:28:53:10:34:28:0d:4c:0e:68:8f:5f:12:c1:73:
b2:44:36:6f:ac:1d:d0:40:e4:9d:18:18:07:0d:ee:
74:80:9b:4b:dd:56:5b:a4:34:77:76:f1:ed:dc:a4:
e4:bc:78:02:ae:8e:58:0c:d5:b1:7a:a6:02:28:29:
10:77:c1:15:8e:41:e8:80:6f:30:70:32:30:39:08:
b5:68:a3:c0:b2:6b:f1:aa:53:da:3d:04:1d:0e:67:
47:2e:cc:30:b1:74:7e:1e:60:40:5b:31:fc:60:53:
55:91:5d:a0:fc:4e:13:f7:17:71:0a:6e:0b:f7:81:
6b:c4:65:0b:be:75:b0:49:cb:36:59:71:3b:5f:c5:
fe:62:1c:40:64:56:e6:08:59:ac:b3:1c:80:ae:5f:
b9:47:4d:d5:a4:2a:d6:cf:c4:9a:f7:46:fa:12:7a:
db:2a:b7:df:11:99:74:0b:b0:e3:be:e2:64:64:0a:
99:50:97:2c:dd:67:bd:c9:8e:86:20:05:3a:50:f3:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:46:0F:96:66:38:4D:28:2A:4D:AC:23:8A:92:56:5E:59:50:77:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/f7f91e4f-3b21-37dd-bfa7-81e93e325a56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.crl
X509v3 Authority Key Identifier:
keyid:FE:65:31:2D:12:1F:A3:BA:82:81:F5:C7:B0:AC:CF:1D:CB:F0:07:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1bdaab5d-8cc4-4ad8-a7c4-a36c6488d162.cer
sbgp-ipAddrBlock: critical
IPv4:
12.42.147.0/24
12.188.33.0/24
12.215.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:4c:7a:e1:0e:39:a7:f9:1e:71:3a:3b:05:d0:e5:0f:d5:f7:
a7:18:6b:bc:19:72:3e:c4:6c:23:9a:57:49:fb:0e:52:66:b2:
69:31:b2:f1:c2:8a:2c:59:86:53:07:3b:83:32:62:ee:4c:c0:
b5:4a:6e:c4:6b:65:69:aa:10:bd:1f:91:e5:63:9d:af:ff:96:
b1:1b:6c:52:1d:0b:a3:1b:da:78:7a:c0:3c:ff:3d:54:89:f4:
c4:85:a5:2a:1c:b6:6c:ac:ce:c3:15:f2:46:41:74:a0:b5:05:
01:17:65:5c:cf:c2:0a:00:e8:b2:5b:f9:40:80:31:2f:c5:ab:
c5:5c:b2:a7:89:f1:c6:2b:51:13:2c:3b:91:b2:ec:ad:d0:0b:
f5:ad:36:27:4b:3e:07:c9:90:5a:9d:40:71:3a:31:f7:04:e8:
87:19:49:bd:9b:1a:e7:96:d4:43:e4:94:59:7a:7c:0f:01:6c:
07:1f:9b:42:5d:a5:98:60:3e:8c:5b:be:fc:30:c0:7d:9d:51:
28:86:b7:51:8e:69:c4:90:78:2c:d9:57:93:8b:a3:96:c6:0a:
c1:46:2a:4a:34:d3:b8:ae:72:a4:11:6c:b2:d3:f6:47:b8:7f:
05:ef:6e:0a:d7:31:79:2d:68:18:27:06:1b:9b:a6:3e:06:a2:
0c:fb:cb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 03:37:13 2025 by rpki-client on console.sobornost.net