Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e25db1f-dc93-39a7-92ee-f49b241dbd3e.roa
File: 8e25db1f-dc93-39a7-92ee-f49b241dbd3e.roa (raw, json)
Hash identifier: 2rC6mJ0I9+0yasD4gSNIcwOJVdZDT1b4k2zzZfq6xck=
Subject key identifier: 7A:B1:85:1E:AF:F0:B2:1A:61:C7:EE:0D:95:CA:E0:56:85:B6:2C:0D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143FB02CED1335B1392FE500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e25db1f-dc93-39a7-92ee-f49b241dbd3e.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 174.170.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:b0:2c:ed:13:35:b1:39:2f:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=396c0534-ea50-4629-8767-0862ef0f88d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:db:f3:55:42:c4:50:f0:f7:00:b4:73:b3:f9:
0a:ad:67:69:28:17:7d:fc:a0:4c:23:89:15:37:b8:
af:5d:a1:51:19:10:a6:91:2c:cf:e8:3f:ac:5e:2a:
6b:36:a2:0b:12:d1:d9:02:ac:0e:1f:b1:dd:86:c1:
e3:45:f9:ff:c2:30:e9:2d:de:3e:90:ef:12:20:d1:
65:14:d3:3a:58:2b:e8:6a:a6:f0:31:8a:85:bc:53:
56:6f:c5:3f:2b:0e:8c:ea:e6:31:b1:86:7b:b7:99:
0f:98:80:8d:1c:27:f1:a8:19:f4:5f:ad:f0:d0:a7:
ef:bb:c7:28:a0:1f:4a:4f:5a:57:5b:e1:b0:9d:8d:
c3:1f:c9:98:ad:fa:e2:3e:94:de:d9:5e:e1:b6:6a:
76:ed:ec:d0:47:4b:d2:a0:55:47:47:c3:b0:e7:50:
de:61:73:21:9a:5e:82:ce:73:b9:e0:76:6b:22:d4:
9f:dd:c6:42:19:34:d7:55:21:da:c4:f2:dd:ad:f6:
ab:6a:1a:bb:01:f6:fd:0c:4a:16:b2:a6:59:27:20:
6c:95:7c:ad:b4:f9:48:5a:f6:12:c9:ab:5b:8c:67:
70:c2:88:cb:4b:b7:58:93:dd:1f:1f:bf:5b:a3:17:
5f:ca:9d:95:3c:e0:b9:3c:83:bf:3c:53:42:f0:51:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B1:85:1E:AF:F0:B2:1A:61:C7:EE:0D:95:CA:E0:56:85:B6:2C:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e25db1f-dc93-39a7-92ee-f49b241dbd3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.170.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:27:ec:02:a4:f3:78:63:b1:97:09:fd:fa:a8:3c:37:20:49:
51:ec:73:20:a8:94:b4:61:ab:8a:b2:e4:94:36:ca:ac:af:2d:
b8:08:0a:16:0b:ed:5b:89:05:87:b4:a5:13:74:b0:04:f4:6d:
2d:0c:8f:3f:74:ec:2d:f4:66:57:a7:9c:72:51:4e:e8:8c:a0:
4f:55:30:e1:80:c4:aa:81:a8:c1:d4:c3:2a:e1:37:6f:b0:e0:
81:73:77:34:36:5e:d0:48:74:6d:d1:8a:8b:01:b8:3d:5a:dd:
8f:93:7c:d1:17:5f:78:55:12:52:95:81:a4:bf:f1:e8:cb:97:
73:bf:b3:e8:de:67:6d:47:68:12:83:83:1b:0a:b2:df:ee:5e:
df:d1:1a:b4:0e:45:e2:52:05:e0:1b:8e:e9:6b:6d:60:90:73:
bd:34:ae:fd:7f:ab:d5:9f:a6:44:6a:32:04:ca:0f:19:0a:21:
d4:ea:41:64:46:a3:b5:d5:b2:72:3b:82:29:d2:68:14:ca:7c:
cb:92:e1:83:25:e7:49:9c:f5:76:4e:d9:75:96:fe:df:68:94:
f7:9e:5b:f2:28:18:84:89:a0:21:8c:3d:92:7f:1d:e2:87:19:
11:97:e1:cc:3b:51:e4:da:19:d8:e7:b7:40:7f:da:8d:25:ce:
a4:65:de:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:51:47 2025 by rpki-client