Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa
File: c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa (raw, json)
Hash identifier: 5h6h7p6LpVlFrS6kUX7ilQnh4iX7St4fwxBc5XBscfM=
Subject key identifier: E2:22:A7:50:D8:4C:5A:E8:C0:8D:60:20:D7:17:A2:70:F0:E9:EF:70
Certificate issuer: /CN=b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a
Certificate serial: 010D0C9F4328584849456D4EAFF07DFA90919C40
Authority key identifier: 17:C7:42:F1:4F:6E:98:39:C0:8E:99:BB:AB:53:4B:F0:27:8C:9F:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 400295
IP address blocks: 174.136.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:6d:4e:af:f0:7d:fa:90:91:9c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=90316f53-332c-4a40-87a7-8cbfaaa0d0fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:7c:31:66:9d:ce:e9:f2:94:07:57:0a:d3:
98:fb:59:65:c0:ed:29:8a:c7:fc:e6:c8:f1:cb:d3:
9a:09:98:96:e8:e2:d2:b9:d5:9c:95:ef:2e:38:17:
e7:15:1d:44:f8:3c:aa:13:13:02:c7:db:74:f0:c4:
d4:de:3c:86:11:97:23:19:d0:ce:6b:13:0a:59:4e:
2f:54:fb:f2:65:7c:b7:a0:0e:b4:68:c6:16:35:be:
72:37:8d:6e:32:91:24:25:4c:f2:ce:c5:ec:4e:e2:
12:98:a4:11:11:d0:49:a5:93:af:8d:99:15:d8:af:
44:3b:6d:45:fa:a1:e1:18:2a:c1:87:22:b1:a5:22:
be:95:c9:78:34:81:cf:e8:90:1e:1b:92:f3:25:4f:
90:9b:bb:74:e9:9d:79:77:82:d2:a8:db:91:c9:ed:
50:c9:ef:fa:de:df:8d:ac:f6:28:08:7f:09:2f:90:
5d:dd:72:f3:a4:de:50:75:89:9b:13:f3:5b:99:51:
51:83:0e:0a:5a:96:cd:09:9c:e3:fd:8f:56:6a:25:
cb:6d:65:33:28:69:43:87:bf:d2:23:0c:dc:77:98:
b6:d8:54:9b:83:71:3c:2b:ab:37:a3:13:b5:36:6d:
d0:d3:85:ba:c6:9f:72:c8:b2:6a:c9:be:ab:53:71:
5a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:22:A7:50:D8:4C:5A:E8:C0:8D:60:20:D7:17:A2:70:F0:E9:EF:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.crl
X509v3 Authority Key Identifier:
keyid:17:C7:42:F1:4F:6E:98:39:C0:8E:99:BB:AB:53:4B:F0:27:8C:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:ac:20:76:88:11:c7:60:4b:33:c1:ac:35:fd:32:83:e7:16:
c0:6f:0a:f3:6b:bc:a5:92:ee:60:07:8d:ca:d5:1d:cd:95:6b:
d0:b4:74:ab:88:e7:28:f7:18:ff:d2:f1:0c:3e:d9:42:c6:b4:
cc:96:92:19:a5:17:45:2d:2b:01:d6:51:96:c3:d6:e8:13:8d:
93:d7:0f:21:bd:77:bf:4b:94:8c:9b:42:56:7a:1d:5b:f2:5b:
e2:1b:01:de:7d:51:88:ba:6b:15:da:ed:da:56:25:af:cb:14:
75:a4:c0:74:dd:a0:00:22:f9:f1:16:ec:da:71:4b:93:f0:47:
48:43:96:0d:d4:9a:68:be:74:2d:ae:f2:a1:ee:bb:ce:0b:ec:
18:a6:7c:bb:4f:03:87:aa:a3:cd:a9:f1:21:c2:8c:dc:54:d4:
5e:9f:06:a0:77:2a:e4:85:b5:b0:ce:6b:1f:d5:c9:7c:3f:f3:
7c:15:da:f2:db:d2:65:7c:23:bf:27:16:38:3f:4a:02:4b:81:
86:52:df:31:d3:80:79:ac:23:9d:c0:68:1d:f6:cd:62:2f:44:
a2:a7:e6:48:d0:df:8d:bd:8d:ec:a3:97:5d:01:0c:62:4a:12:
fc:6d:74:1f:4f:4b:2a:7d:76:30:52:c0:c7:e0:f0:e7:5d:a0:
6a:e4:11:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:07 2025 by rpki-client