Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/113e94f6-fc29-376e-85d0-d6d99e6ef78b.roa
File: 113e94f6-fc29-376e-85d0-d6d99e6ef78b.roa (raw, json)
Hash identifier: ZYLOm+nVLRLxt2aiSqZL0b5iLwf/KZKFiPmZ8Scj3u0=
Subject key identifier: BE:E7:89:99:9F:E8:17:BD:5E:81:9C:43:BC:04:24:C2:BA:13:66:82
Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial: 010D0C9F432858487325B28605F181981FF12900
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/113e94f6-fc29-376e-85d0-d6d99e6ef78b.roa
Signing time: Mon 06 Jan 2025 02:00:40 +0000
ROA not before: Mon 06 Jan 2025 02:00:40 +0000
ROA not after: Sun 06 Apr 2025 01:00:40 +0000
asID: 212384
IP address blocks: 203.17.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:73:25:b2:86:05:f1:81:98:1f:f1:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Validity
Not Before: Jan 6 02:00:40 2025 GMT
Not After : Apr 6 01:00:40 2025 GMT
Subject: CN=53e38586-9411-4a12-a154-1e9d80abb758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5d:df:47:1b:f0:28:f7:f4:9c:92:c8:e5:bb:
92:32:52:68:3a:01:74:f0:35:53:d1:1c:d5:b7:7d:
a6:1e:84:75:31:3b:f8:55:9e:d6:03:67:37:8c:2e:
d0:28:0b:64:39:f8:47:9d:91:7a:f7:36:79:8b:3a:
78:a4:39:e6:89:23:90:26:55:2b:0c:98:ba:ef:2d:
dc:fb:d3:d0:db:41:be:f9:2e:bb:39:60:db:f3:88:
6b:0a:72:9e:0d:1f:2c:c6:e7:bd:94:c8:c5:a0:a6:
23:37:36:d3:a7:25:a6:e3:84:6a:58:7a:26:1e:ee:
e6:25:c7:fc:e1:de:50:7a:82:c6:10:9d:2c:55:e8:
b4:7a:86:a1:1c:ae:ac:ae:e9:2e:06:f8:6d:0f:96:
ab:50:9f:b0:a7:db:ff:53:81:c7:39:03:f3:cf:34:
00:45:f3:6a:78:ec:da:b3:5a:d5:50:bf:af:5f:41:
4c:17:f1:7f:17:68:f0:8c:8e:f3:99:c3:72:ac:59:
69:75:5a:c8:2a:50:f7:5c:7c:a0:95:f9:bc:ea:de:
c6:12:58:e0:56:66:88:1d:23:42:ec:18:d9:7a:aa:
04:06:c8:d2:cc:c1:d2:de:68:56:30:ee:dd:c6:40:
fd:42:bf:91:17:56:8c:a9:03:09:e4:81:61:78:98:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E7:89:99:9F:E8:17:BD:5E:81:9C:43:BC:04:24:C2:BA:13:66:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/113e94f6-fc29-376e-85d0-d6d99e6ef78b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
X509v3 Authority Key Identifier:
keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
sbgp-ipAddrBlock: critical
IPv4:
203.17.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:cf:68:0b:f1:e8:84:9e:af:9c:50:fb:00:fd:77:d3:be:9d:
d9:3c:c6:71:1e:14:86:e8:c0:6c:8f:9a:fb:06:31:31:bc:86:
15:25:3f:3d:02:8c:91:fb:9f:bc:71:14:02:42:4d:33:9f:2e:
d6:70:cb:12:c5:c8:fc:09:83:4d:6f:04:0b:46:65:27:11:37:
84:23:85:9a:ca:eb:a2:46:88:67:fe:08:37:be:56:95:58:a0:
cd:ed:f4:55:ac:0b:89:08:d4:57:00:05:73:18:f0:4d:c2:aa:
b2:7b:81:50:7f:08:fb:18:e2:01:2a:1d:47:dc:c6:e9:73:85:
34:40:fe:da:7c:b7:39:cc:cb:aa:5d:d1:cb:0e:e7:06:d7:f5:
92:d8:47:da:ce:ed:e2:73:43:14:77:f2:3d:d7:ef:f3:df:ee:
0b:74:52:1e:a3:90:20:b3:92:af:fc:df:da:b6:0d:a6:14:52:
bf:78:a1:46:c0:5a:9e:94:5b:d5:04:b5:cb:86:1f:93:de:f8:
c9:9e:bb:57:ef:09:cd:40:9d:dd:c3:1b:a6:62:2f:27:66:76:
71:93:22:dc:28:77:e6:04:0b:d6:f6:b0:92:ad:87:d4:4b:81:
11:76:91:b7:9d:81:a6:67:ef:49:a9:ee:3f:51:66:e2:36:ea:
d2:69:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:14 2025 by rpki-client