Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa
File: 4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa (raw, json)
Hash identifier: 1RNKZH1exVrhapR6t9PzWMQCk3gz12kD/JQKcsfP24I=
Subject key identifier: 61:84:DA:EB:4B:DE:C3:E5:4B:DF:81:C1:11:82:A5:84:86:BB:C9:97
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858486695C6070E6DE6C6B0F9B740
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 394285
IP address blocks: 174.137.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:c6:07:0e:6d:e6:c6:b0:f9:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=8fac0867-036b-4b40-9b4a-5105e4d87966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:4b:4b:8f:aa:69:a7:c8:30:6e:2b:b6:84:
00:4f:a0:43:cd:f8:44:ff:17:c8:84:f2:df:a9:40:
1a:9b:f8:87:bf:4e:d3:03:0e:a3:b2:2e:49:ce:91:
79:6d:c1:4c:9b:18:8c:42:f3:9b:f7:1a:ec:90:9b:
ab:2a:e7:44:03:f0:f5:9e:bd:3f:7e:82:ca:3f:61:
00:18:7f:d8:4d:21:cc:ee:14:6c:a3:3f:08:d5:a1:
da:8c:e6:59:e7:65:41:8e:e3:66:c5:ff:0c:51:0d:
2d:d1:3d:c3:5c:b5:22:74:80:63:f6:a2:f2:17:cd:
08:22:c4:9b:77:1e:1f:c1:8d:78:56:a3:8b:65:91:
0d:7c:92:d9:ca:30:da:14:85:81:e9:f3:a8:fd:8a:
b0:1b:e2:53:89:79:9a:09:1b:be:a7:3b:72:64:95:
32:ad:63:6e:03:3d:8d:f1:95:4f:1e:bb:a2:88:b7:
32:f8:5f:68:2d:f3:0e:c4:0d:e9:b7:ce:44:3a:a6:
ac:7c:09:31:f8:fd:4b:f8:4b:8b:c6:71:56:68:b4:
3c:c8:1d:e1:3f:45:7b:74:70:2d:cd:c4:69:7c:a7:
5c:86:01:ab:56:fe:45:f0:9f:02:33:3c:6f:f0:f6:
df:59:83:18:38:d5:03:ab:65:82:66:e1:07:58:aa:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:84:DA:EB:4B:DE:C3:E5:4B:DF:81:C1:11:82:A5:84:86:BB:C9:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/4ea8bc25-d59d-3ee6-a6aa-2d0745ca07b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:9c:5d:0c:06:95:04:62:ac:1e:f1:f9:70:86:03:8c:7d:d3:
3d:ed:ce:bf:4f:83:d3:3e:a3:a9:24:fb:98:a6:f1:8d:4d:8a:
35:60:d1:d0:ff:56:14:f8:a6:63:aa:ce:14:0a:7f:ae:30:82:
fc:fb:12:73:0e:a9:cc:cd:f2:c9:56:e4:d6:00:75:75:68:2a:
e3:b1:9a:b1:31:cc:4e:9b:44:c5:8e:7e:4c:89:07:1f:f6:d7:
a3:fa:2c:ef:03:1d:b6:03:5c:ea:11:3a:19:ae:18:31:56:78:
fa:6f:46:99:e3:85:65:44:bd:01:8b:ac:6b:8e:cf:ee:80:51:
b9:cf:79:f3:43:b5:41:dd:d1:d6:40:88:db:c0:c5:66:55:37:
05:93:c8:de:00:8e:7b:e3:c8:7b:0b:61:24:ae:f8:13:90:cc:
6c:fc:3c:16:d8:9f:52:20:39:56:18:a6:02:36:7e:40:83:f8:
de:0f:64:d8:27:bc:0f:c3:54:4b:8c:ad:2c:20:6f:3c:8c:07:
53:b0:d1:ba:74:65:4b:18:f3:e0:4c:49:92:38:ad:f9:a3:96:
bc:2c:87:20:7d:d8:12:64:e8:41:52:4a:c9:ab:9e:77:f1:79:
1b:1e:2c:ab:af:78:f9:b3:e6:c1:78:ea:a0:04:1b:cc:9f:c0:
19:44:87:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:04:46 2025 by rpki-client