Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa
File: 86604c1e-e526-334e-ab61-1fb3393fb181.roa (raw, json)
Hash identifier: pKo/1ys+41EWlE9BLldhNigo/IJZCcjr6zfcm0QqDTg=
Subject key identifier: 85:D7:D8:8A:61:86:DC:0F:D7:BC:42:8E:61:DB:2E:F2:6D:85:7E:7A
Certificate issuer: /CN=7894adcb-3be5-42b8-a76f-913809582611
Certificate serial: 010D0C9F4328584827C5466AF5E1D6C3EC20C600
Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 12980
IP address blocks: 129.35.160.0/20 maxlen: 20
170.225.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:46:6a:f5:e1:d6:c3:ec:20:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=7c2c1805-9817-425a-8338-0927171b6e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:08:13:9c:8a:a7:83:a6:00:0b:db:90:c7:
1d:94:84:86:ef:27:17:15:57:42:ea:19:1d:dd:23:
70:f8:63:d5:b7:ca:52:9b:91:d0:49:72:86:a1:f1:
d7:9c:f4:33:af:3e:ac:5e:ac:ce:02:34:70:f2:57:
b9:64:10:18:03:c2:08:2b:86:f6:dc:c1:03:3a:36:
ba:18:bc:2b:93:40:b6:c2:17:11:2b:5c:b1:f4:42:
ac:45:bb:73:84:b7:ff:02:06:2b:0a:86:6d:cc:62:
7b:c8:1f:ac:5a:3a:2c:8f:63:ae:62:09:9e:24:20:
d8:17:6f:d2:84:d5:63:b2:a8:75:94:97:fd:2f:53:
34:e7:22:12:92:9c:ec:ab:12:fe:87:99:ef:2e:0a:
13:4e:3b:53:d9:40:55:9e:42:bd:0d:50:67:10:d7:
1b:8c:ae:d0:fe:b7:74:ec:d2:c4:c2:be:fe:a0:78:
6e:ee:0d:32:9b:69:06:64:95:85:66:79:e6:ac:1d:
01:90:35:20:58:03:32:f4:a5:13:fa:c7:22:e7:14:
9a:e6:d9:6a:7d:d0:db:dd:f7:ef:e0:10:60:2a:60:
db:0d:01:22:b1:e7:ce:62:1a:80:3a:ba:0f:2b:69:
70:30:c7:7f:dc:bc:fc:ab:19:f3:74:45:e0:3c:45:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D7:D8:8A:61:86:DC:0F:D7:BC:42:8E:61:DB:2E:F2:6D:85:7E:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/86604c1e-e526-334e-ab61-1fb3393fb181.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl
X509v3 Authority Key Identifier:
keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer
sbgp-ipAddrBlock: critical
IPv4:
129.35.160.0/20
170.225.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:33:23:ae:13:2b:e3:b8:cd:ea:7d:7d:1a:84:16:4a:71:5e:
3f:da:fa:40:af:bf:a3:29:fc:aa:a2:e0:5f:67:e7:69:ec:5e:
c2:df:64:66:ed:ac:0d:25:58:7f:4b:55:dd:2b:25:17:cc:a3:
b5:a4:6c:04:71:00:fd:6c:a9:5b:2f:63:a3:7d:47:60:e1:41:
a8:f8:e8:66:ad:4b:e0:8d:13:aa:77:38:4e:1a:fd:2c:85:f3:
1e:c7:e7:d9:bf:9e:03:ce:1b:65:95:fb:89:61:1f:04:3b:a4:
8b:41:56:b0:93:2c:46:3b:d3:f4:4c:ea:29:33:ab:b8:98:95:
df:c7:d0:ca:e6:d3:b8:ee:1f:d7:a7:9b:91:62:e8:f2:74:f7:
e4:b4:89:b6:76:25:9f:c3:96:e0:d8:74:6c:06:32:b1:96:ca:
55:63:d0:8f:e2:d9:26:8b:c7:8d:96:8a:b2:9b:89:2b:d1:1e:
04:9d:3a:a5:8d:77:ec:63:83:de:8d:56:67:87:49:c1:ca:33:
79:24:81:52:88:6c:c4:75:24:0a:ef:92:9e:d7:fd:19:14:d1:
c4:f5:76:c9:50:0f:6a:7e:d7:06:15:eb:58:f8:65:1d:c5:db:
53:4c:10:25:00:7f:1a:87:81:40:00:cf:67:6c:c9:46:45:67:
09:fc:db:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 14:43:08 2025 by rpki-client