Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
File: a6e045d3-3586-3be0-8f1c-ee95cb321013.roa (raw, json)
Hash identifier: X4yPIxkF6GttudIeAIALyiGJ2sPNARBfliojdBu+n50=
Subject key identifier: 32:8A:91:2F:E4:6B:05:4C:57:3C:36:CC:3E:6D:FF:E9:40:FB:90:17
Certificate issuer: /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial: 010D0C9F4328584863CB1398D4ECC1D92DDF6C80
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
Signing time: Tue 31 Dec 2024 14:00:53 +0000
ROA not before: Tue 31 Dec 2024 14:00:53 +0000
ROA not after: Mon 31 Mar 2025 13:00:53 +0000
asID: 5065
IP address blocks: 174.136.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:63:cb:13:98:d4:ec:c1:d9:2d:df:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Validity
Not Before: Dec 31 14:00:53 2024 GMT
Not After : Mar 31 13:00:53 2025 GMT
Subject: CN=545cf129-5e17-421d-a830-d0ca8d7156cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:84:00:c0:2f:db:45:db:12:08:06:20:f2:
c5:24:73:e8:b2:9a:7a:c3:8c:d5:dd:72:fb:e4:2e:
a9:ba:a2:db:41:af:4c:7f:11:0b:fb:a4:4f:37:12:
7a:c2:7e:ce:3f:4f:b0:93:db:f3:39:35:5f:79:f5:
46:a8:32:5c:e8:7f:79:cd:68:90:ac:cf:2e:24:7a:
e8:4a:ec:79:1f:18:2f:ff:10:f0:a8:a1:f3:d6:d4:
c0:02:97:8f:7f:00:84:53:c4:a5:e4:6c:a7:02:1e:
7b:07:97:3b:82:84:91:c5:d3:d7:bb:f1:37:c8:2a:
74:3f:90:09:d6:24:53:73:c7:2f:78:47:c0:c0:b7:
ca:4f:7f:db:3a:f3:34:3b:ee:e2:4f:16:3d:e7:fc:
26:46:22:30:bf:e6:6e:65:b9:46:22:ee:20:63:2e:
9e:f5:2a:2b:e8:5f:a9:68:c3:eb:ca:bd:09:b5:4a:
09:c0:1f:7b:4f:ef:1d:58:66:b4:0d:f4:e2:34:1c:
e8:e3:62:a7:a5:b5:1c:4c:09:c4:18:f8:3e:f7:dc:
b9:2f:b5:33:72:40:ba:b6:97:1d:ae:7a:21:47:cf:
42:ab:15:34:18:b3:54:6f:99:a1:f9:1a:8b:53:4e:
d1:22:6a:9d:3d:94:85:b1:fc:e0:d6:2d:c5:88:0d:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:8A:91:2F:E4:6B:05:4C:57:3C:36:CC:3E:6D:FF:E9:40:FB:90:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
X509v3 Authority Key Identifier:
keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:07:bb:ec:fc:19:27:63:68:a5:e8:91:1b:81:c5:c5:68:9a:
3a:40:fa:b5:9f:b3:7e:47:69:84:6e:70:9d:de:4f:ad:58:52:
cc:37:0b:d5:a6:29:2f:f9:92:d2:9c:c7:89:26:57:bc:a7:9a:
13:ae:31:9a:75:70:93:c6:14:d9:74:2f:db:d5:c7:94:cc:2e:
43:b9:71:32:ae:15:57:c1:02:c1:8b:60:64:0b:d7:7b:a8:0c:
c4:aa:b3:9a:6e:0d:bf:6e:fd:18:42:98:dc:14:29:da:f5:ff:
7b:7d:cb:eb:6b:df:9b:0f:74:71:85:c1:1a:0d:86:f2:bb:ec:
42:8b:2a:a2:9b:f3:f9:37:56:59:3e:4c:cd:6d:1a:ce:88:03:
82:83:45:2d:58:0b:89:8c:77:ea:a5:4f:58:66:a4:c9:7a:f6:
26:b9:eb:10:15:49:c1:96:4d:93:c3:ba:11:46:56:53:27:a7:
04:d3:4d:34:90:d1:6c:77:83:e5:ac:82:41:6d:1e:ce:ef:78:
40:2d:b2:40:b1:c1:7e:9e:81:bb:78:24:31:4b:96:79:75:a5:
5c:0e:87:35:fa:c4:6b:f5:72:31:39:68:92:e7:9b:a8:d3:0b:
97:d1:80:22:75:9e:48:32:68:63:5f:71:5d:37:7d:b6:ae:78:
59:ee:aa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:13 2025 by rpki-client