Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/6e7a68c3-0547-3263-8434-d888d57e10cc.roa
File: 6e7a68c3-0547-3263-8434-d888d57e10cc.roa (raw, json)
Hash identifier: 7PEnC9NAeXj6M26w8Am2izJlr6+/PYI6Z0ncL1SmFpw=
Subject key identifier: E0:55:57:CD:87:0D:3B:38:76:C3:99:1C:B1:07:3B:E5:FD:18:23:F2
Certificate issuer: /CN=970d9bca-40c5-40bc-9803-1ef81a602415
Certificate serial: 010D0C9F4328584863CB0FB5850567EA43EF5750
Authority key identifier: 0D:2F:9B:99:1D:D7:B7:CA:98:0F:30:C4:8F:14:B2:C3:85:23:DD:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/6e7a68c3-0547-3263-8434-d888d57e10cc.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 21859
IP address blocks: 172.247.32.0/24 maxlen: 24
172.247.34.0/24 maxlen: 24
172.247.35.0/24 maxlen: 24
172.247.38.0/24 maxlen: 24
172.247.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:0f:b5:85:05:67:ea:43:ef:57:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=970d9bca-40c5-40bc-9803-1ef81a602415
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=66dc035b-5f3b-4a3e-acee-d303920df4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fa:72:f6:05:bc:88:35:28:a7:ef:4e:ba:4b:
5c:b5:7d:16:4b:f5:93:cd:59:79:21:83:68:ca:ef:
b6:c1:76:0b:33:12:da:dc:56:d9:7c:3b:d7:ce:10:
c5:51:df:ec:38:f6:50:54:44:d2:f5:cd:1b:f0:30:
c8:2c:87:49:e4:b8:28:eb:76:13:18:13:9e:a5:2a:
a9:94:d3:40:61:42:87:9c:77:c9:af:0e:8c:84:d3:
4e:c7:8f:8b:3b:ec:c1:45:4d:f3:0c:02:84:de:55:
2c:d8:ca:ce:5a:46:57:2d:49:c8:93:6b:d6:6e:1c:
04:d8:4a:3a:5a:66:37:8b:8f:f2:fe:c4:a6:e2:89:
ef:7e:d1:c3:a4:ff:cf:d2:7a:bd:cf:17:7a:72:f1:
89:d9:06:2d:45:f1:62:82:99:03:b5:fb:27:b0:91:
42:e5:2a:3c:9c:b8:4b:4b:4a:6d:86:54:84:31:be:
f8:6d:84:38:d1:76:c8:97:b6:6a:2f:24:76:c1:6b:
96:4d:22:75:35:16:7b:c2:e5:62:17:44:88:91:c1:
e0:ad:cf:5d:68:20:fb:0e:3a:12:6c:b8:8c:43:77:
98:f5:fa:82:52:a7:2b:67:48:76:f4:29:c8:0b:fe:
63:c9:96:43:8d:22:a9:bd:e1:4b:30:86:6e:37:e8:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:55:57:CD:87:0D:3B:38:76:C3:99:1C:B1:07:3B:E5:FD:18:23:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/6e7a68c3-0547-3263-8434-d888d57e10cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.crl
X509v3 Authority Key Identifier:
keyid:0D:2F:9B:99:1D:D7:B7:CA:98:0F:30:C4:8F:14:B2:C3:85:23:DD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer
sbgp-ipAddrBlock: critical
IPv4:
172.247.32.0/24
172.247.34.0/23
172.247.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:0b:21:52:93:86:0d:27:9a:62:cc:ee:bf:d3:e8:de:ec:98:
f4:ac:09:e9:12:ce:aa:96:26:6f:aa:3c:47:3f:b0:5a:34:43:
a1:9f:36:c1:1f:92:d0:c9:53:13:82:76:01:7a:31:7c:eb:42:
e0:b7:37:47:50:74:dd:d0:be:f6:7e:bd:d6:3f:16:2b:84:d5:
88:59:67:43:6a:21:93:2c:3f:18:dd:b9:e0:5f:b3:22:4e:05:
f0:36:02:52:fd:16:35:99:b7:ea:07:7e:d2:95:dc:14:7c:d7:
1f:c1:d6:d9:01:d7:6c:9d:75:82:a0:6f:c8:f5:43:bc:e1:36:
79:22:83:d6:31:61:1f:27:61:02:f1:3f:4b:43:a1:42:2f:a3:
0b:e6:26:56:d4:5a:70:95:3a:cc:5c:04:11:3a:32:59:8c:1f:
20:d0:94:dc:8c:23:dc:48:85:1b:39:94:a0:da:d0:3d:27:a2:
b5:c6:4b:f1:63:aa:c1:b9:cd:ba:5a:df:9e:4e:c9:4a:f9:7e:
97:d5:5d:96:a1:e4:90:0c:64:d3:eb:77:c1:98:82:b9:ab:d7:
ef:1d:87:83:ee:fb:35:81:5c:b8:a5:66:4e:7b:fe:56:4d:9e:
b9:13:9f:8e:90:b9:58:1a:1e:f9:2c:ec:03:e1:da:28:8c:fc:
3c:3b:6a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:23:55 2025 by rpki-client