Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/728f9206-eb43-3510-854b-2975ba049fab.roa
File: 728f9206-eb43-3510-854b-2975ba049fab.roa (raw, json)
Hash identifier: n3iiXerksuKucZ7kKYGJDEVuwEAgsbt/F97pi/OME7o=
Subject key identifier: DD:04:1E:B8:4F:8F:D4:0D:2D:19:2F:1D:10:2A:13:50:F5:DF:14:39
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F4328584865304282275EA0D02B6DE000
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/728f9206-eb43-3510-854b-2975ba049fab.roa
Signing time: Wed 01 Jan 2025 02:00:40 +0000
ROA not before: Wed 01 Jan 2025 02:00:40 +0000
ROA not after: Tue 01 Apr 2025 01:00:40 +0000
asID: 7843
IP address blocks: 174.108.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:65:30:42:82:27:5e:a0:d0:2b:6d:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Jan 1 02:00:40 2025 GMT
Not After : Apr 1 01:00:40 2025 GMT
Subject: CN=79763bd0-e95f-4f0a-ae97-190773dd542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:52:d0:f1:41:1e:28:6f:a2:02:6e:1a:11:
58:cf:c1:0a:ef:c5:1d:16:11:19:b2:ec:43:2a:00:
5e:a4:b6:6a:ea:45:fc:d3:3a:0f:b2:d8:f1:32:a1:
09:73:90:9a:c6:f3:92:64:68:4b:31:e1:3a:bc:f7:
28:d1:75:c6:37:15:bf:45:f2:c4:ca:f9:14:a7:df:
29:df:25:50:18:17:4e:60:cd:d9:be:f2:fd:6a:a8:
6b:64:05:6a:9c:ab:ee:93:66:02:3c:a8:b1:cd:60:
c1:ab:78:ba:fc:10:d7:af:10:9d:fb:9f:0a:af:e1:
76:94:c9:f1:5a:47:58:cf:ca:6b:80:bc:b9:a9:a5:
7a:21:af:33:70:36:b2:99:9b:1a:7a:c4:f1:78:ca:
0f:85:c6:bb:81:b9:70:55:1b:27:38:13:37:84:3e:
4f:ec:de:07:8f:70:e9:11:30:44:03:51:85:0a:ae:
6e:fe:b5:d7:52:5a:92:22:1f:c5:56:9c:3e:67:80:
4e:a3:6b:0c:03:89:6f:96:c4:59:1b:f3:67:d7:66:
d2:2c:8b:a3:f9:6b:6c:05:77:b8:1b:76:91:2b:ec:
2b:02:ee:51:ec:a0:10:9d:a1:21:e3:97:0f:dd:0f:
d3:3b:a8:79:78:ee:f4:0a:92:4b:68:34:cb:e4:cd:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:04:1E:B8:4F:8F:D4:0D:2D:19:2F:1D:10:2A:13:50:F5:DF:14:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/728f9206-eb43-3510-854b-2975ba049fab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
174.108.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:30:d2:83:a9:45:33:7a:c5:4f:94:67:be:2a:c9:9b:77:be:
11:c0:5d:44:15:a5:15:18:d2:85:05:db:cc:8e:e6:e8:b8:83:
61:76:80:37:f2:da:b6:0d:68:2d:27:e4:22:7b:28:b4:09:cd:
25:11:74:b6:07:27:86:6f:3d:32:24:89:3a:74:82:4d:1e:e4:
ad:b0:29:34:6c:94:45:a2:c0:06:85:f1:d0:61:57:cd:68:06:
e2:22:e9:eb:81:fc:44:2a:97:88:08:83:b2:fa:34:c4:e6:16:
51:4a:47:30:30:87:34:91:04:5e:48:fb:28:80:bb:af:16:3b:
ea:59:de:9e:ed:bd:5c:88:30:d6:d3:ea:b6:fb:32:b8:e1:14:
d3:ca:0c:7e:27:49:39:b5:66:59:43:08:a7:75:64:1f:00:05:
19:16:a2:89:98:6a:40:23:d9:23:73:79:03:9b:be:fd:c9:f6:
1c:9e:da:e3:f8:be:d5:01:84:4b:bd:22:e2:a6:e4:59:6e:b7:
7f:49:f3:a4:90:05:2c:65:e9:c7:f0:d0:71:47:29:9f:3c:06:
eb:2e:67:56:5b:60:92:ce:ca:c4:f4:21:0e:9a:a9:b0:be:1c:
1d:5d:fc:ba:b1:55:54:56:0f:66:1a:3f:e3:1d:a4:e2:9f:f3:
45:88:b6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:38:25 2025 by rpki-client