Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/626841d8-cdf3-34f2-922e-3fb64dca4b15.roa
File: 626841d8-cdf3-34f2-922e-3fb64dca4b15.roa (raw, json)
Hash identifier: opi98dEXyVqffLttAWU8th51b3FU91YQ0SKV6jIjrHY=
Subject key identifier: 45:0F:95:0A:2E:08:A5:D2:9D:07:01:A3:F6:AF:05:6F:00:71:D4:8E
Certificate issuer: /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial: 010D0C9F4328584871C074AF74AC6BBB04C9BC00
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/626841d8-cdf3-34f2-922e-3fb64dca4b15.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 7018
IP address blocks: 170.205.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:74:af:74:ac:6b:bb:04:c9:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=a8e60cfb-543d-4584-89e1-f39fa7d3f901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:40:9e:02:80:16:35:4b:d8:c9:00:05:a2:
99:e7:55:99:72:e0:d3:31:60:3c:40:69:ee:4e:bd:
f0:25:78:83:6b:96:62:15:3f:4b:83:f1:0d:fc:69:
d3:b4:ee:6e:b7:91:8f:09:82:4b:0c:7b:6d:23:44:
13:2d:b6:a1:17:99:3c:d4:16:39:96:59:5d:df:7b:
ab:78:2d:c9:22:22:63:ee:39:53:50:d8:06:fa:e4:
e6:3e:48:50:aa:30:c1:dc:d9:72:ed:8f:b7:83:ae:
2b:37:d4:37:b8:fc:75:9c:c1:a0:b9:4f:6a:bd:21:
9a:70:09:2a:75:eb:b8:d0:e9:da:22:e1:18:8f:86:
8e:37:1d:01:01:70:86:87:65:70:e4:5a:1a:35:cb:
7c:68:44:fa:d6:87:17:34:29:6f:77:85:fc:4b:1b:
3f:8a:27:ee:e4:f0:c9:3f:c7:87:a5:20:ef:f2:f7:
e8:4e:59:bf:19:62:bd:c4:a3:60:3c:d4:bd:07:f9:
2d:dd:9b:22:b5:70:6b:51:c2:b8:7f:bd:b3:ba:be:
bd:be:e8:b6:72:a0:2c:7b:51:47:45:27:0c:fd:b3:
76:12:69:83:6b:9b:0f:18:ae:1c:a1:78:85:a7:1c:
d2:00:5e:d7:37:d1:80:e2:99:4d:4b:4d:f9:3e:1f:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0F:95:0A:2E:08:A5:D2:9D:07:01:A3:F6:AF:05:6F:00:71:D4:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/626841d8-cdf3-34f2-922e-3fb64dca4b15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
X509v3 Authority Key Identifier:
keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:25:2d:ab:55:43:d1:34:61:23:19:53:75:2a:6e:f2:69:ac:
0d:85:5a:f5:fe:5e:90:8e:ab:ad:88:68:26:7e:6b:b7:2a:cc:
e1:6d:b9:d8:18:19:aa:a3:46:16:59:d9:78:f6:ec:de:b9:df:
51:c6:a8:4d:ec:3e:15:16:04:9c:03:ca:39:62:0e:e1:72:cc:
ff:47:a3:98:47:e4:ea:6d:ee:04:56:57:90:40:62:b1:e4:be:
c2:c5:97:3d:4d:4d:56:8a:b4:72:ad:ae:a3:0a:74:1c:1c:7e:
7a:23:94:06:74:08:cc:05:1c:71:73:b5:f3:9a:cc:8c:ff:02:
b1:8c:77:f9:b4:e6:c3:a3:66:e5:85:2c:72:c5:0c:0c:c7:80:
88:05:de:c4:e9:da:ee:f9:44:7f:85:fa:ed:02:95:39:76:81:
88:4d:d4:e1:6e:4f:61:9e:10:67:98:60:7e:e5:51:02:57:63:
70:f3:8c:88:3a:d4:d0:eb:41:d8:29:d2:8e:45:8a:5b:04:d2:
b1:21:ba:61:cf:26:73:73:5e:92:81:97:5d:cf:05:d4:f5:7a:
7f:25:97:73:7d:49:94:7c:1e:cb:15:46:d5:34:97:ad:29:ab:
c1:61:b5:65:2d:1f:5f:8d:8d:5b:98:51:00:f8:64:4a:90:29:
d6:ad:74:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:05:39 2025 by rpki-client