Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa
File: 8504dbf1-b1c3-3afa-96dc-c510762f1210.roa (raw, json)
Hash identifier: FYheUeRqsgQm6IY0xn4TeSmaabzL8W/3z0EN4cigZFY=
Subject key identifier: 06:D5:5D:E4:60:EB:4C:F8:47:7A:16:62:34:1A:BE:F6:6E:D1:11:A9
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858486C2B17B309DDC15AF9419C00
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa
Signing time: Fri 03 Jan 2025 14:00:51 +0000
ROA not before: Fri 03 Jan 2025 14:00:51 +0000
ROA not after: Thu 03 Apr 2025 13:00:51 +0000
asID: 394285
IP address blocks: 174.137.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6c:2b:17:b3:09:dd:c1:5a:f9:41:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Jan 3 14:00:51 2025 GMT
Not After : Apr 3 13:00:51 2025 GMT
Subject: CN=2a076cd5-cca6-43e2-83cf-dd17e035b21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:76:a1:95:17:93:93:89:46:8c:f2:c7:0e:
18:a4:d8:a1:7b:60:4f:14:28:71:d8:3e:24:4c:b5:
10:43:e0:10:75:23:43:b4:4a:52:33:d1:d1:d9:13:
7e:56:a0:8b:64:c0:84:92:d4:09:ed:46:6d:54:6b:
cf:0a:c4:f2:65:8b:3d:35:01:5b:35:80:e7:30:06:
3f:27:d5:5b:82:df:92:ed:63:17:71:0d:a2:f9:37:
67:4a:65:ab:fa:ac:dc:9a:cd:dd:67:4a:a8:a4:23:
d3:d7:7c:93:7a:ae:4f:fd:a2:fc:f4:b5:21:34:8d:
bd:3a:07:1f:2f:85:ae:00:42:e3:e5:51:e7:53:3b:
36:fc:19:8a:f0:98:3d:70:13:23:89:ff:e5:80:37:
59:d7:e7:9f:28:da:21:9f:0e:f4:6a:79:20:0f:57:
3e:e0:4a:10:2c:73:f8:9f:32:98:7e:1b:93:68:f8:
66:e4:74:bb:d6:33:d2:7b:3c:10:61:ad:69:91:2d:
05:a8:40:97:c3:bd:6e:52:62:80:bd:78:ba:62:ec:
a0:8e:26:dc:09:c0:9b:1d:cf:18:c9:58:03:7e:fd:
65:f4:5f:6c:9c:7e:bd:ae:6e:94:16:1e:6a:c6:3d:
31:ff:06:24:17:9c:20:f0:fa:c2:ba:b3:2c:0c:d8:
57:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D5:5D:E4:60:EB:4C:F8:47:7A:16:62:34:1A:BE:F6:6E:D1:11:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8504dbf1-b1c3-3afa-96dc-c510762f1210.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:69:08:76:7e:51:b7:ee:4f:d3:94:ae:e4:66:8d:f8:f2:c7:
29:db:bd:e4:3a:34:0a:52:3d:20:b9:56:d8:69:37:96:f0:19:
bd:a8:38:9b:6f:4a:f3:79:05:8b:25:b3:df:a2:d3:3d:4c:26:
11:7c:31:04:b1:35:14:de:2f:fd:e4:90:ad:b1:86:a9:d0:f8:
cc:66:e4:56:e5:f6:6b:8e:47:81:73:bc:c3:d7:af:95:e5:86:
6e:4b:08:f1:46:40:88:a8:02:05:ce:96:6e:0e:02:7d:4e:3e:
38:0b:73:1a:7a:e8:f1:ac:9b:69:77:c9:dd:bd:7e:70:22:10:
9a:77:6f:35:ed:e8:af:34:6e:28:d3:cb:34:f3:5b:09:cf:5a:
c6:1a:4a:83:70:a8:7c:7d:08:f7:2e:26:be:61:1d:98:b3:cc:
32:57:8f:7c:0f:5e:a8:06:18:5a:73:16:82:4b:bd:68:8d:14:
1c:0c:a3:e6:b9:f7:16:d7:6b:21:06:9e:a3:52:75:2d:fd:96:
48:e5:82:da:8f:b0:81:5d:49:f9:4c:fa:43:5b:28:32:f6:74:
71:aa:d1:1b:16:3e:b0:a6:54:7d:9c:93:b4:17:94:d2:1b:0c:
f5:79:48:3e:e4:79:7e:21:05:82:d7:10:d8:0d:ab:dd:5d:9e:
39:57:9b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:33:49 2025 by rpki-client