Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa
File: b4e78078-a443-3edc-9dba-d33315b67c0b.roa (raw, json)
Hash identifier: AndstQCnKeFTMgEXF4DQR4z8lgV4VFd7Yea0zdv72DE=
Subject key identifier: 4C:D6:F7:67:FC:98:9B:65:AB:78:B2:4E:14:FD:19:7E:CF:12:4F:AC
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F43285848547022DB11CF9840F84BEA00
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 33208
IP address blocks: 170.133.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:22:db:11:cf:98:40:f8:4b:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=a4b37a4d-9cca-4dd5-aff2-3a211ba13ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:ef:5f:a1:0e:20:26:71:c7:ae:32:18:c1:
1c:e8:23:c9:e1:7a:bd:1e:1d:0d:3c:93:47:f3:96:
ac:58:3f:91:9d:38:2b:00:dd:f9:e3:0b:a4:dc:8d:
34:05:ab:3c:29:0e:66:51:f0:1d:58:5f:48:b9:fc:
77:f9:0a:9b:7d:12:96:ff:6a:d8:8d:4a:72:22:1f:
b8:1c:05:bf:99:99:23:e3:65:32:c6:39:09:87:63:
a8:cd:64:65:7c:a6:34:66:92:10:24:b3:96:5a:b3:
f0:4e:32:4a:06:03:3b:ec:7e:ae:b3:43:ea:d4:b3:
82:b2:18:1d:3b:ff:d6:9e:1d:b3:48:2d:37:2b:b1:
f5:01:11:b3:9b:15:95:eb:39:7f:bc:4b:93:37:cf:
d9:4c:06:a9:69:07:a1:cc:2d:9f:5b:cf:27:ee:64:
8e:05:d5:69:f7:71:6e:16:c4:d8:cd:0f:86:3a:3b:
d9:42:f8:7f:6b:e5:d7:08:c7:fe:ce:31:2f:8e:60:
1f:49:b4:0f:46:02:b0:86:b5:5b:08:89:f9:d9:02:
dd:de:d3:25:15:93:9a:04:00:2f:6a:d0:54:b4:43:
77:eb:34:09:e4:c0:69:17:bc:de:01:1a:61:a8:e2:
56:04:f0:ef:7a:d4:8f:65:9c:f4:86:61:51:d9:d0:
f8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D6:F7:67:FC:98:9B:65:AB:78:B2:4E:14:FD:19:7E:CF:12:4F:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/b4e78078-a443-3edc-9dba-d33315b67c0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
170.133.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:cd:0b:81:64:3d:06:c6:7f:6f:95:61:30:ed:4f:4a:35:a2:
ca:06:5a:7e:82:e0:bc:bb:ef:80:36:58:4d:b7:50:a9:0c:dc:
fa:60:ad:c6:bf:34:e0:51:38:77:1e:5d:48:3c:c1:5b:e2:68:
05:b4:9c:c0:a6:46:da:cd:1b:3a:96:60:7d:aa:41:a3:96:86:
ea:03:94:df:c7:12:77:f8:52:21:a8:3c:22:a6:1d:08:58:c9:
e4:b9:03:97:6c:54:7f:e9:c9:5b:d6:f6:aa:22:f1:d5:c9:79:
5c:b5:90:05:5f:24:26:a2:63:33:a0:4c:32:ab:fa:dd:82:76:
64:2c:8c:88:b1:9d:0f:47:b8:e0:b5:4b:5b:4f:b6:5c:2c:61:
49:89:c1:59:f7:89:94:a7:e3:76:4e:45:56:3b:ae:dd:42:12:
d0:b5:7e:04:99:77:b0:69:1f:ef:8e:c7:38:ec:ac:c0:b4:fd:
92:ac:03:cc:b5:7d:e1:d8:c9:69:a2:c1:db:f0:48:27:44:53:
69:3d:89:9c:de:66:23:89:76:ca:f7:06:49:d4:f7:bb:6d:1e:
fa:f2:e6:0a:0a:db:5c:40:6a:70:e2:0e:be:d9:e4:5c:e7:d8:
fa:9b:ee:50:3f:a8:d7:63:22:2d:a4:31:9c:c5:f7:d9:96:bd:
d1:82:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:19 2025 by rpki-client