Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/0a472d9e-05a0-3ece-9277-b624528f57d0.roa
File: 0a472d9e-05a0-3ece-9277-b624528f57d0.roa (raw, json)
Hash identifier: hVxRnhenqYmcnxB/JkcTZmGrOD3XzePndB2cw7fz5hg=
Subject key identifier: 2C:3C:CC:27:D2:31:4F:09:72:1C:48:E9:71:B5:65:1F:71:36:31:94
Certificate issuer: /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial: 010D0C9F432858481F65346FD5E8986836839D80
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/0a472d9e-05a0-3ece-9277-b624528f57d0.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 7862
IP address blocks: 146.23.204.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:34:6f:d5:e8:98:68:36:83:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=0de474dd-0137-4583-ba55-c2be49e5e1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:bf:4c:a3:6c:7c:57:33:74:a3:35:42:2a:
d3:39:fa:56:b9:37:9a:e1:1a:3d:4a:27:0e:8d:d5:
21:b7:33:17:69:23:0c:90:5d:f3:9c:da:8e:97:67:
2a:5a:b4:01:b4:46:bd:f4:6a:65:b6:59:23:d0:f5:
71:79:e1:b2:00:f5:7b:0f:a7:db:5c:3e:c8:50:be:
76:20:9b:27:f5:ba:47:c4:ac:84:4c:2e:bc:a5:3c:
97:00:68:33:59:28:e4:5c:8d:e1:18:67:be:bd:ed:
12:ac:c7:07:e5:77:5b:ae:3f:4d:0a:25:c5:c3:68:
cf:d0:68:01:08:4c:24:a6:dc:50:90:24:d1:0d:03:
03:df:83:51:60:bf:b3:6b:4b:7c:11:58:a3:84:b4:
21:a8:46:1a:b5:3e:55:34:59:a5:f4:08:00:d1:16:
f6:4b:84:da:b0:fc:e5:06:fa:08:a3:c4:9a:3c:15:
68:9d:6f:2c:70:6c:eb:b4:2d:d4:05:d5:9f:63:7e:
06:c4:13:13:0f:45:88:cc:fa:c5:fd:9e:4c:ef:f8:
4e:05:fe:00:b3:58:87:4c:42:5d:32:f3:c8:a4:0e:
69:3f:f5:32:92:a4:4f:1d:47:39:1f:af:86:ef:5e:
59:27:68:e9:a1:14:2c:ae:5b:30:ff:a8:00:e6:70:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3C:CC:27:D2:31:4F:09:72:1C:48:E9:71:B5:65:1F:71:36:31:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/0a472d9e-05a0-3ece-9277-b624528f57d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
X509v3 Authority Key Identifier:
keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
sbgp-ipAddrBlock: critical
IPv4:
146.23.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:b1:de:e5:c7:6b:d8:37:2d:81:88:69:c0:1f:52:e2:7f:06:
cb:5e:b3:26:a6:60:46:6f:11:35:72:c4:81:80:95:13:fb:75:
4e:a2:ad:e1:97:68:94:f0:a0:53:58:ba:bd:c9:79:bd:cb:3b:
60:f6:a6:1e:42:39:9e:c8:24:bd:4c:84:21:5c:8e:14:c6:34:
ec:58:14:84:78:4e:f8:e2:25:2b:11:9e:91:8f:5e:da:e8:43:
bb:19:41:b5:89:66:76:cf:08:8f:1c:56:fe:d8:26:24:90:24:
80:41:c2:e2:51:7f:53:38:3a:5c:b4:70:5f:0b:eb:90:97:fa:
75:46:e1:d8:f5:68:41:59:ed:0a:fd:a9:26:3f:68:69:0e:92:
47:ca:3c:b6:3c:ad:af:5e:3a:0f:b1:1a:10:a9:1f:66:a7:c8:
62:c5:1f:16:59:fd:f7:70:f3:05:59:2a:25:31:7b:f0:04:9b:
8c:73:cf:c4:7b:b2:2b:ec:c6:20:ba:22:16:b9:84:96:82:bd:
ee:57:d3:e5:58:fb:92:59:a1:df:a6:17:4a:f8:b4:02:ff:b1:
e8:f2:11:4b:cc:21:64:ac:c4:d7:0d:9e:91:ac:77:2d:a0:78:
0f:9d:ec:f5:e1:2c:7b:32:16:16:d5:39:c4:aa:7d:63:c1:ca:
06:4e:c2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:13 2025 by rpki-client