Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8acfed6d-beee-3f45-80f9-1ff99039f91c.roa
File: 8acfed6d-beee-3f45-80f9-1ff99039f91c.roa (raw, json)
Hash identifier: 1cjiWEPgRFIdMMgoqFgvqUPCe4DeQ6TcxoTlh/9EIoU=
Subject key identifier: DE:89:75:30:0B:32:5F:01:0E:58:49:45:F3:2D:17:F8:8E:14:DB:CA
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584878BB0A26EBCCBE6B5FAA9580
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8acfed6d-beee-3f45-80f9-1ff99039f91c.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 172.103.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:0a:26:eb:cc:be:6b:5f:aa:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=fa8cf67a-1721-4883-b426-205305b1d56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:87:54:68:67:ea:fb:d6:1a:03:b7:3d:33:00:
a3:cc:26:d2:07:ec:76:59:e7:af:2d:00:9a:a9:d4:
75:34:9f:81:39:fe:c6:45:8e:fb:f0:38:e5:88:46:
65:b3:db:8c:ef:7b:03:22:15:ff:ee:30:19:cf:58:
f4:a2:10:1b:58:bc:05:71:d4:ff:4d:68:c7:59:c8:
2f:16:b4:4b:7d:b4:c2:5a:6e:85:08:6d:00:57:e0:
d9:50:28:7b:7c:c4:6d:9c:ad:11:ce:e2:ed:60:e2:
e0:54:26:70:a4:cb:32:6a:32:e0:66:de:8a:ac:33:
8b:f3:69:39:67:8e:6d:2d:83:fd:f1:6b:43:67:65:
01:c7:c5:12:0e:5f:66:66:c7:b6:ab:6f:f7:76:89:
1a:a8:a2:ff:7e:ce:97:e4:c1:e1:ef:81:3d:62:0d:
dd:d5:80:72:1b:7c:3c:0e:76:4a:f1:6d:36:3f:f0:
92:44:e0:3e:9e:72:6d:bc:7f:a9:25:84:9c:e0:a7:
70:3f:7f:ab:31:ff:7d:b2:d1:3d:53:b4:21:1b:64:
29:85:25:4f:ed:85:63:e7:1d:66:d7:d4:0d:e2:2e:
93:01:23:cf:3f:80:4d:02:8f:ab:07:04:c3:63:fe:
1d:7f:f9:1c:1d:10:be:6c:58:6d:ad:e8:60:b2:fa:
0c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:89:75:30:0B:32:5F:01:0E:58:49:45:F3:2D:17:F8:8E:14:DB:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/8acfed6d-beee-3f45-80f9-1ff99039f91c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
172.103.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:12:fa:03:71:36:08:e5:ca:9b:60:e4:f4:29:8a:01:72:14:
f5:56:58:4d:c7:84:9f:7e:6b:01:39:50:e0:0e:b0:48:67:18:
6b:c0:2b:d9:a6:2b:77:8c:34:2b:ba:cf:9e:93:e0:7b:60:b8:
e8:a6:9d:a5:10:13:81:5b:53:5d:a4:04:15:25:af:fa:0f:ca:
f2:31:bd:10:ab:71:f2:da:90:53:3e:d3:89:51:1b:fc:4f:9b:
e2:49:55:63:c3:b4:8d:17:a6:68:a0:7b:ee:e0:65:b4:97:a7:
73:c0:58:61:b2:ad:e7:9e:ab:04:04:38:90:8d:86:26:df:71:
8f:da:c7:36:ce:e7:56:f3:0e:76:76:45:96:7e:a7:3e:51:48:
cc:2d:d3:9d:81:b5:dc:a2:6a:32:e5:08:9e:c2:39:56:59:f8:
39:7b:b2:e1:25:f4:01:28:e2:d6:14:38:5b:91:54:50:0c:95:
8c:4e:f9:f5:3b:58:d7:8e:c9:8f:e4:bf:d4:0e:ed:bf:41:66:
d9:3e:6f:f7:e7:fc:79:bd:db:69:23:33:45:fd:34:00:c2:bf:
d8:34:fc:15:8d:bf:01:46:c1:dc:f9:3b:0a:96:2e:4a:0f:ab:
54:81:07:f5:e4:20:0f:4e:6e:0c:05:60:c9:d3:35:62:a1:44:
d0:67:1c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:07:57 2025 by rpki-client