Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1b6348e-3551-3aa1-93a4-e89e9c5ba298.roa
File: e1b6348e-3551-3aa1-93a4-e89e9c5ba298.roa (raw, json)
Hash identifier: XQfHKclfQrsZFJUc9G81OW0Eu8CLQPRox2kuZr4U0NQ=
Subject key identifier: FC:8D:B4:39:BF:2E:11:87:0B:56:A6:D9:9D:38:1D:F3:C4:FD:D9:1D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1329AFE14F9C4A6C299580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1b6348e-3551-3aa1-93a4-e89e9c5ba298.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 174.160.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:29:af:e1:4f:9c:4a:6c:29:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=064920b8-3481-49b7-ae44-25f4523334dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:91:4c:83:8b:55:44:ad:fa:3f:e9:d5:b3:
72:3b:77:f0:ab:ae:49:85:e3:38:38:d0:62:51:52:
50:64:30:41:5e:a0:93:c6:0b:5b:27:ab:d8:d8:02:
89:55:c3:84:c4:6e:c1:4e:c1:bd:5e:ae:1f:03:3d:
f8:bd:0f:9e:be:72:70:a8:30:a6:f9:5e:b8:95:df:
0e:cf:12:f2:e0:dc:97:f9:7b:0a:b0:4d:d8:b3:b6:
fb:1f:0c:56:28:c7:c6:af:19:4b:c2:4d:a6:20:d3:
8a:b0:0c:cc:f2:70:33:c6:1d:89:3c:cf:77:a3:76:
7e:d8:ea:22:f3:9d:a5:e8:dd:d2:27:e6:33:87:2b:
37:45:58:44:4a:63:6b:55:ad:e2:a3:e9:b2:bb:76:
3b:81:72:36:54:74:f2:03:56:1c:0f:85:2e:4d:21:
ba:95:19:ec:e4:f0:af:55:4c:d5:a1:cc:47:67:ec:
cd:5a:d5:fd:e4:8e:0b:c4:77:a4:9d:e0:bb:1c:3f:
11:61:78:ab:a2:84:1a:bf:e9:de:dc:c8:89:7a:5f:
71:cf:d8:af:9c:39:45:b0:f1:13:7f:ec:81:e9:a5:
e1:28:ef:9e:bb:8a:89:f4:c6:82:0d:a5:d5:30:7e:
a8:7a:70:e9:9b:5d:d6:86:82:14:24:36:04:e8:8a:
82:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8D:B4:39:BF:2E:11:87:0B:56:A6:D9:9D:38:1D:F3:C4:FD:D9:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1b6348e-3551-3aa1-93a4-e89e9c5ba298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.160.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:af:ee:a4:32:25:69:10:93:bc:0b:cc:36:92:ba:eb:74:3c:
cd:f4:7c:e9:5a:f8:a6:2a:8d:59:33:2c:1d:cc:60:f8:04:8b:
08:b6:c9:fb:79:4b:b4:cb:1c:42:15:c8:30:ff:55:21:39:60:
a6:36:52:06:93:ef:60:c6:2e:0d:3b:9f:c8:65:77:df:c5:2c:
5d:5b:00:16:fe:6e:65:7b:df:57:b7:b4:53:cf:b7:cc:a6:5d:
26:b5:fd:c0:48:4c:13:c5:56:88:b4:42:d5:32:25:09:3e:a4:
cc:c2:77:3c:bb:57:b5:f8:e1:86:f5:86:e8:62:0c:e3:8e:89:
bd:78:bf:4f:e9:5b:15:84:d7:3e:64:33:19:b1:c6:40:0e:ec:
42:ea:db:30:9e:4a:5d:f0:99:63:29:24:e7:13:3e:0d:bc:ea:
94:76:c2:fb:22:a6:34:4c:37:66:ec:d7:34:dd:04:17:c3:83:
fa:cc:dc:46:20:5e:b0:5b:14:7e:7d:98:0e:29:40:dd:35:a5:
04:29:42:c8:2f:2c:e4:59:83:d9:3a:eb:9f:e1:af:9b:ef:aa:
d0:c0:7f:98:5f:2f:1d:c4:c5:be:e0:54:0c:a4:81:fa:69:73:
f3:9d:07:cb:92:1e:c9:41:85:9f:a9:a6:8f:ea:7a:33:92:b2:
e7:07:ca:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:41 2025 by rpki-client