Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa
File: 17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa (raw, json)
Hash identifier: mBZ1v9I0QnebV+qipAuWdvubZplz0YocW4RyNTHndPs=
Subject key identifier: 34:27:0D:63:E0:34:58:39:B3:09:31:DE:87:EB:5B:BD:6D:04:65:B3
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858486C2B17753A4A094FD99497E0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 394285
IP address blocks: 174.137.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:17:75:3a:4a:09:4f:d9:94:97:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=054a7f4a-6149-49e0-a4d7-2da858d65e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1e:9a:13:7a:73:57:af:0b:ff:08:67:77:f9:
0e:b9:74:05:8a:8a:5c:f7:11:ab:5a:3b:0a:e1:ee:
c3:da:07:c9:a5:0a:2e:63:59:d6:d6:7f:b3:10:e2:
7a:ba:20:fc:8f:18:db:22:60:15:0a:8e:7c:0f:89:
62:a2:b8:c0:81:b7:63:ea:5b:03:5b:ce:f4:0c:74:
af:5f:70:ea:13:d7:f6:e8:df:b6:ac:da:41:b4:57:
c6:c8:ce:64:8e:13:5f:76:59:c3:b8:de:6c:b5:a5:
93:ae:13:af:ff:01:46:03:c9:62:ad:7e:cb:1b:c8:
07:0b:25:53:f8:ad:17:0b:e7:0d:67:98:40:07:27:
22:41:14:16:9f:2b:da:71:e1:7d:57:24:eb:81:dd:
76:08:da:be:8e:bd:1c:89:b6:99:e4:d2:fb:49:38:
a2:4d:5f:d8:b1:98:19:60:cd:56:1e:05:77:6e:7f:
1c:0f:1b:c1:75:f4:ab:2d:ad:06:c8:15:6b:98:ad:
d6:0b:63:e3:e9:8a:15:43:9c:b1:a0:ef:14:e1:ca:
bd:5e:97:bc:0e:57:eb:85:54:d7:86:87:73:9e:9e:
31:75:84:5d:e0:dd:a3:04:2f:6f:5f:fb:f9:bd:e8:
46:be:56:d7:86:14:b2:f0:5f:81:2e:8e:28:c5:bf:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:27:0D:63:E0:34:58:39:B3:09:31:DE:87:EB:5B:BD:6D:04:65:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:0b:70:aa:38:30:8e:f2:6d:f5:05:eb:57:4d:44:f0:f1:16:
6d:e8:95:c7:f8:3e:3c:14:80:e2:ee:26:ba:e5:6b:af:23:e9:
bf:18:c8:e9:53:fd:5b:d6:f2:a7:9f:84:29:97:dd:af:45:4b:
47:99:e9:8e:8f:06:79:4d:07:8b:f4:84:1e:8d:9e:75:e4:87:
ad:91:77:61:bd:f9:cf:79:49:92:02:cd:22:7a:f4:03:4b:b4:
b5:3f:39:9a:70:12:47:6a:27:bb:e1:16:84:c1:dc:7d:49:b6:
0f:b8:d9:fd:b4:3d:83:03:fb:e0:d0:57:16:5c:c9:9a:cb:db:
00:94:ea:4a:21:e7:02:3e:38:6e:cf:d0:2d:34:9e:4a:5d:e9:
8a:da:fa:29:a6:01:f6:33:d8:4c:f0:d0:f5:1d:f5:be:70:aa:
e0:73:a6:a6:73:17:9d:bf:c7:94:bd:c6:a7:90:0f:42:25:be:
32:9d:d5:ef:39:21:e0:64:e9:89:a9:99:b8:fe:db:4b:9c:78:
4a:a4:f5:72:41:92:f8:b7:0f:6e:80:b4:57:17:94:79:e5:39:
9f:b7:da:4d:d9:87:c5:1f:68:2e:58:fb:30:2a:70:f5:45:4e:
1e:60:3c:58:42:f7:dc:ee:df:e5:e0:f7:c2:c6:e6:93:f2:15:
4c:48:b7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:09:07 2025 by rpki-client