Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e12e2431-417f-3d44-b89c-e080667218a6.roa
File: e12e2431-417f-3d44-b89c-e080667218a6.roa (raw, json)
Hash identifier: +fM4e2kOz1WXENtWnNLAhxwcHlxXDMuuDQj2hG6cJt8=
Subject key identifier: 35:D5:58:C8:CB:45:CC:4B:30:F0:C4:E8:FC:CB:57:CC:68:F8:D5:F4
Certificate issuer: /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial: 010D0C9F43285848159FF75D5F57B05275A04500
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e12e2431-417f-3d44-b89c-e080667218a6.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 394080
IP address blocks: 172.110.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f7:5d:5f:57:b0:52:75:a0:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=2cdc3c91-ac5c-4f40-9605-7b915f14f4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:23:71:1a:5b:98:72:cb:9c:b3:59:f6:0f:1b:
6d:61:65:e7:53:24:75:f3:e2:e1:79:04:a2:71:5c:
78:04:bd:ae:80:7a:93:49:91:cd:a2:d0:7a:41:ef:
42:6a:f6:e4:59:bc:26:2b:ba:42:18:f1:5c:0d:59:
9c:43:ac:a8:cf:04:63:71:a1:d4:cd:90:21:ef:f1:
b8:fa:12:1a:d0:71:6b:14:53:8f:b0:84:86:b0:05:
05:46:4c:4c:3e:d2:f8:83:b6:aa:2e:79:bf:51:06:
84:67:9b:44:a5:3c:a1:6c:e4:00:35:46:7f:27:e9:
1e:ca:0c:af:25:8d:b2:36:44:3e:20:93:ed:ec:04:
f9:c3:cf:ee:5e:65:56:28:df:0b:58:9e:c2:a0:78:
16:8f:7e:d9:3a:a9:eb:bf:21:78:d6:4b:51:86:93:
7a:09:66:af:22:ee:ff:3b:8d:49:10:3f:ba:0c:8d:
99:b1:74:4e:f4:22:42:0c:27:3d:85:70:a5:f6:1b:
54:94:ad:58:1d:5b:0c:36:74:72:21:d3:6f:44:c8:
98:10:f8:44:93:8d:fa:f8:b0:c5:75:31:2b:6c:6c:
65:12:52:1c:21:c4:70:41:40:b0:64:e6:f8:78:d8:
8b:57:69:31:f9:a3:bb:30:2f:db:37:8b:7b:b4:12:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D5:58:C8:CB:45:CC:4B:30:F0:C4:E8:FC:CB:57:CC:68:F8:D5:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/e12e2431-417f-3d44-b89c-e080667218a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
X509v3 Authority Key Identifier:
keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
sbgp-ipAddrBlock: critical
IPv4:
172.110.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:f2:83:1b:ac:9c:ca:c5:e9:0a:a9:6c:52:db:b6:67:64:ec:
bd:dc:d8:fb:d9:1c:10:d9:3a:9b:3d:db:6b:45:d5:54:23:a6:
22:6b:43:ca:c7:86:a4:ef:60:ff:00:f5:67:58:a3:e9:99:d9:
b1:0c:1f:f8:7c:04:49:c5:7d:e9:90:b6:2d:22:27:d5:7e:46:
e8:0b:48:86:bf:78:54:a8:b0:50:4b:41:60:eb:7a:f8:b7:75:
d2:76:28:ec:be:07:83:e9:2d:da:52:58:04:ca:b7:49:91:a7:
55:37:a8:1b:5c:42:c8:e8:f2:87:64:8b:d2:65:87:eb:fd:c1:
51:06:bc:e0:fc:59:f6:c7:1d:1e:ac:38:c0:5a:1b:3d:22:8f:
84:bb:e9:8a:5d:f0:37:8a:62:74:7a:c0:fc:1c:57:50:44:c2:
dc:a4:60:d1:4e:de:24:49:29:e9:e1:c3:e7:e8:42:a2:b1:78:
d4:2f:35:25:ef:cd:61:97:4a:82:5d:86:eb:3f:4e:02:a9:6b:
bb:50:29:78:be:d5:6a:5f:89:9b:dc:25:f9:45:ae:35:de:f5:
b1:b7:82:6b:b2:1e:17:56:83:23:69:d5:cf:2b:8b:0f:2e:58:
d5:40:cb:65:fb:22:ea:c7:f6:23:b9:ad:dc:3d:b6:93:6a:18:
b8:ec:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:12:08 2025 by rpki-client