Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2dce6000-c112-3dbd-a403-c351462057df.roa
File: 2dce6000-c112-3dbd-a403-c351462057df.roa (raw, json)
Hash identifier: wBwV+b4iBRMNHeQ9aVGMbDAb+GRykK0ggCfo9kl70qA=
Subject key identifier: 35:A2:49:C8:43:B2:E0:9A:74:A9:64:85:49:2C:D5:43:9F:42:F8:AE
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F43285847F584F6840F2175DC009EAB80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2dce6000-c112-3dbd-a403-c351462057df.roa
Signing time: Fri 22 Nov 2024 02:00:40 +0000
ROA not before: Fri 22 Nov 2024 02:00:40 +0000
ROA not after: Thu 20 Feb 2025 02:00:40 +0000
asID: 14618
IP address blocks: 170.85.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f5:84:f6:84:0f:21:75:dc:00:9e:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Nov 22 02:00:40 2024 GMT
Not After : Feb 20 02:00:40 2025 GMT
Subject: CN=5fe0478d-4ae1-4a18-bc16-2d9bc48dee72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c4:1d:59:47:77:cd:07:fd:d2:43:1e:6b:c2:
65:91:d2:49:82:53:e9:7d:65:a7:42:ec:16:e7:e7:
a4:fa:78:a9:30:e1:1a:a0:f6:4f:45:ce:e6:ac:0d:
70:53:10:2f:bf:ac:0a:c0:bb:7b:b1:a1:5e:56:7c:
0d:b0:2c:1a:1a:65:57:f2:d0:14:71:4c:de:eb:73:
d3:05:1e:1e:6f:e4:5a:e0:88:30:62:66:a0:ee:ae:
db:f1:91:6e:49:2a:d9:85:aa:2d:26:dc:11:9f:e1:
00:03:34:b4:e3:8d:bb:bc:bb:22:72:a5:03:64:1f:
12:c1:31:55:a5:bc:0d:55:a3:8d:d9:51:e4:66:b6:
19:a2:5b:8e:05:c5:eb:30:bf:ef:c5:4f:c7:0b:66:
20:3e:31:58:4b:1a:f8:2b:eb:c8:85:3b:f7:80:9f:
f8:a8:18:87:de:3d:87:d6:bb:c1:0f:c2:eb:55:d4:
43:a6:41:ca:b5:75:3e:d6:84:dc:6b:ff:e9:e1:f5:
53:01:33:76:5f:d3:af:fa:f6:78:a2:37:4c:e4:aa:
76:c3:b1:16:a8:d6:2e:33:8c:1e:68:b1:14:b7:40:
37:0c:25:dd:2b:b0:6d:d8:c9:8d:e5:af:af:dc:e5:
a2:47:a3:c7:b5:a7:77:0f:d3:71:72:6c:92:12:c0:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A2:49:C8:43:B2:E0:9A:74:A9:64:85:49:2C:D5:43:9F:42:F8:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/2dce6000-c112-3dbd-a403-c351462057df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:58:09:a8:63:93:30:25:e0:d6:bd:21:2c:b4:a6:d6:2d:78:
e9:50:61:20:2c:ed:f6:3a:91:d8:fc:8c:98:a6:27:c0:49:98:
57:b5:28:4a:ba:2a:bc:d4:31:93:2c:3d:d1:37:1f:2e:6b:59:
45:6c:5c:98:ff:c5:a7:a0:54:ab:14:c5:5d:47:77:2d:2c:74:
4a:99:26:d8:24:52:ad:e3:d7:48:23:38:c2:2f:42:7e:91:b7:
60:78:56:88:00:b6:c6:a2:82:87:d8:12:41:55:a0:0d:eb:5a:
e0:f7:85:b2:6e:e0:07:40:52:12:72:c9:29:ae:55:97:bf:54:
cc:53:3c:5b:48:1a:d0:a8:68:ee:db:01:f4:c4:af:e3:9e:db:
ed:9e:05:2f:a0:3f:71:aa:43:78:42:8d:d3:9d:ad:ba:7f:9a:
a3:cc:4b:fc:0d:49:cc:be:d3:5a:ea:56:eb:7a:f7:92:d2:d5:
77:3e:73:29:df:98:df:78:17:03:4b:4d:48:60:e6:a6:d2:a2:
66:67:35:c7:e0:09:c5:b8:e3:e9:3c:a7:c8:8c:83:39:5b:9c:
4e:a2:a8:c8:ab:7f:af:67:a2:c6:4e:c3:32:26:ae:78:cb:8b:
c9:a4:f0:7f:06:02:97:1b:e3:9c:81:33:cf:c2:c0:bf:78:89:
e7:1b:f9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:47 2025 by rpki-client