Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/133968bd-e7fa-3535-936f-c353cbfc5c62.roa
File: 133968bd-e7fa-3535-936f-c353cbfc5c62.roa (raw, json)
Hash identifier: 8+F3D8AounLYMM4+JTtOaiE5uAckNMVeWr+OcLeI91U=
Subject key identifier: FB:EA:35:C6:0D:5C:6A:90:9D:4A:73:E9:EA:53:42:0D:E7:43:C0:B4
Certificate issuer: /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial: 010D0C9F4328584851A58260C10E90D526C9BD00
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/133968bd-e7fa-3535-936f-c353cbfc5c62.roa
Signing time: Wed 25 Dec 2024 02:00:38 +0000
ROA not before: Wed 25 Dec 2024 02:00:38 +0000
ROA not after: Tue 25 Mar 2025 01:00:38 +0000
asID: 54994
IP address blocks: 174.35.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:51:a5:82:60:c1:0e:90:d5:26:c9:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Validity
Not Before: Dec 25 02:00:38 2024 GMT
Not After : Mar 25 01:00:38 2025 GMT
Subject: CN=96d264b3-5452-4d4b-92d3-558d81e8dac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:f6:8d:86:38:df:9f:e7:38:16:d2:e1:de:
e7:73:1d:fe:19:c7:30:da:9a:74:bc:5b:1d:33:49:
41:fc:45:3c:c9:0d:5f:0e:92:f7:7a:2f:b5:82:ea:
d9:9a:d6:20:7e:9f:e2:c8:05:da:81:b4:18:a5:9e:
f3:6e:1e:e4:9b:90:e6:97:49:ee:e7:ef:d6:be:ca:
91:4e:5b:77:dd:4a:e5:89:b1:8e:4d:18:7c:dc:5d:
9c:4f:c7:56:44:d0:ec:8b:1b:0b:ce:b5:da:c0:81:
cf:d9:0c:5e:d1:e7:0c:7f:f3:df:ff:75:9a:ab:74:
1c:bc:0a:03:c2:b0:3c:ab:6d:ec:de:33:e6:2b:a3:
79:1d:c9:21:aa:a2:ab:4c:ef:1b:f0:55:85:55:7d:
92:73:cb:b1:04:9d:9d:1d:9a:64:a3:b7:03:67:9d:
21:37:61:48:ea:91:2e:7e:42:46:f6:80:d4:e0:29:
53:0d:bb:8d:d4:25:1d:1c:72:d5:49:eb:77:fe:dc:
f5:90:89:83:f3:fd:71:51:7a:26:34:56:c5:d4:f9:
94:1f:16:f2:61:14:df:3d:22:b1:d2:d7:d3:74:50:
64:21:12:23:26:a3:b5:4d:22:6c:39:42:3e:32:95:
3b:39:19:ca:55:bf:43:eb:96:c9:45:3f:31:d7:a8:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EA:35:C6:0D:5C:6A:90:9D:4A:73:E9:EA:53:42:0D:E7:43:C0:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/133968bd-e7fa-3535-936f-c353cbfc5c62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
X509v3 Authority Key Identifier:
keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
sbgp-ipAddrBlock: critical
IPv4:
174.35.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:84:cf:a1:13:23:37:a4:d4:61:07:3a:f2:38:04:b1:89:96:
c6:77:f0:d6:97:8b:67:55:b5:9b:a4:c3:d7:02:c1:ad:3d:97:
0c:a6:3f:15:55:91:70:79:a7:51:7d:ce:fe:20:af:e5:c1:6b:
8a:d0:c2:b4:af:9f:4a:5c:78:a6:e7:b8:a1:86:e6:74:e1:2c:
91:3b:3f:0d:0c:78:be:9c:81:96:f2:42:9f:63:74:d4:ae:9a:
c2:ff:6b:b5:02:cf:ea:a4:08:65:53:a6:cb:c1:57:08:fe:6b:
57:47:2a:6e:d1:68:6d:a5:fa:db:52:4c:fb:da:fb:09:80:4d:
b4:df:fe:a7:91:ff:37:49:8b:67:ff:4f:fe:32:9c:3c:cc:1c:
13:4d:3f:5e:e6:5b:aa:7c:bf:b1:90:51:fb:b2:a8:92:28:48:
95:01:cf:2f:9d:d2:f3:5b:81:4d:2c:15:41:59:6e:01:80:5f:
e5:89:37:f3:3e:67:33:9d:32:c2:5a:72:8c:a5:69:b7:a4:70:
89:39:eb:43:b4:61:73:74:fe:28:da:b5:49:7c:d7:b3:7f:5d:
c9:f3:97:86:26:69:ab:e0:ac:2c:d3:4a:8f:85:55:72:51:14:
76:44:d0:74:89:60:cb:b3:f2:25:3b:5b:6e:c0:b2:f8:73:a7:
63:f7:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:41 2025 by rpki-client