Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/4420984a-f7eb-38c1-89b7-981cd4631dc3.roa
File: 4420984a-f7eb-38c1-89b7-981cd4631dc3.roa (raw, json)
Hash identifier: 24LG3JkMYO3sLrjstputNja1NfYk68592HKeb1T2t2k=
Subject key identifier: 22:77:BF:FD:0A:21:39:87:B9:6C:B7:98:FF:0C:0C:28:7F:71:10:A4
Certificate issuer: /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial: 010D0C9F4328584839EAD05D7B084AA7A6AB5D00
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/4420984a-f7eb-38c1-89b7-981cd4631dc3.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 22135
IP address blocks: 173.242.10.0/24 maxlen: 24
173.242.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:d0:5d:7b:08:4a:a7:a6:ab:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=9b0c4cf7-fd98-4d3f-8b5c-01622450b088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:af:56:4d:15:cb:21:d3:f5:00:bd:91:5a:
aa:aa:82:88:e5:77:92:35:48:57:eb:f2:d0:d6:09:
bd:f3:60:5e:86:76:f5:76:49:aa:56:44:60:e7:e2:
6e:d0:cb:63:58:23:48:1b:97:41:5a:03:a7:7c:61:
f0:9b:ad:4b:b1:f7:8d:60:60:43:24:1c:2a:61:fc:
7c:c8:d4:bd:15:2f:c5:d1:1b:b9:76:f6:fa:b7:e8:
91:bc:97:a8:47:34:90:2f:44:bf:c6:a2:c4:e7:1a:
f8:6f:e9:e6:a4:7f:4b:cc:5d:8f:1b:d0:25:8b:3f:
0e:54:59:6e:4a:68:6f:09:47:ef:00:8f:62:01:fe:
15:35:24:bf:c4:74:36:de:52:7e:d7:ac:90:ea:59:
0d:78:22:da:d9:ad:da:40:b5:bc:c0:38:58:15:3b:
c5:c1:c3:a5:37:05:07:77:86:4b:26:51:44:11:32:
e5:27:21:46:6c:e9:48:6d:9d:b1:7a:bc:bd:73:ca:
01:8b:a7:73:9c:b2:82:77:a2:a2:c7:d7:02:23:70:
d5:58:c5:2c:f3:da:d5:cf:77:33:1d:b5:a5:21:01:
18:2f:f3:e3:60:63:38:40:fb:7b:8d:3e:19:19:a4:
ed:12:fa:9e:ad:22:21:1e:6d:56:6d:c1:a2:ab:a8:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:77:BF:FD:0A:21:39:87:B9:6C:B7:98:FF:0C:0C:28:7F:71:10:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/4420984a-f7eb-38c1-89b7-981cd4631dc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
X509v3 Authority Key Identifier:
keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
sbgp-ipAddrBlock: critical
IPv4:
173.242.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:7a:d6:3e:aa:1b:3e:67:59:51:59:18:8c:60:07:31:a9:1e:
5c:99:11:df:2f:73:fd:36:ab:ee:07:27:a6:98:32:b8:88:b4:
81:ca:64:3e:42:2a:e3:21:db:f5:3a:72:01:21:4e:9b:8c:8e:
a9:c3:3a:2b:96:91:e9:1f:4e:89:9f:1d:fe:23:69:f9:6f:87:
0a:33:31:ca:44:44:ed:62:3b:95:fa:f0:24:d3:3d:66:c3:72:
a2:39:b3:fe:c1:f5:29:4c:dd:bc:6a:ca:a9:35:87:7c:71:08:
e2:bb:18:fc:3a:16:de:5c:a0:47:2f:c8:26:bc:ad:22:87:a4:
ee:aa:19:8c:8c:ab:cc:35:40:35:3a:14:5a:56:71:ad:94:db:
83:0a:1f:62:b2:28:02:b4:ae:4c:77:b1:27:3b:b0:b1:20:bb:
f3:a5:c0:77:4d:8c:0c:6b:b1:01:02:bd:b3:ea:50:42:eb:54:
32:8d:c0:e8:b7:3e:10:29:db:9d:de:6f:ea:ea:69:a8:9f:33:
24:d5:98:99:4a:48:7f:44:9c:3b:6f:96:03:5f:50:39:05:bd:
db:15:72:63:51:53:63:28:19:03:14:92:fc:1b:1b:90:9a:42:
0b:28:fe:a2:af:b8:13:a3:42:9c:b1:c7:68:bf:17:64:20:c1:
25:2e:d6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:19:21 2025 by rpki-client