Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c27db91c-abeb-3439-af15-3d4e2c35f941.roa
File: c27db91c-abeb-3439-af15-3d4e2c35f941.roa (raw, json)
Hash identifier: d9EqHIUdaHT82jYngWYggxKYL2MUFNmbmkvP27icdt4=
Subject key identifier: 42:14:1C:AC:CE:98:2E:C7:5C:FF:44:8C:7F:3C:4D:8E:EB:68:CA:74
Certificate issuer: /CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Certificate serial: 010D0C9F4328584812D52A128CC78C505BA25A40
Authority key identifier: BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c27db91c-abeb-3439-af15-3d4e2c35f941.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 33185
IP address blocks: 170.39.196.0/22 maxlen: 24
2602:fd23::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:2a:12:8c:c7:8c:50:5b:a2:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c554a280-22a1-477c-97bf-f23a7f33a0c0
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=b486e858-f235-4204-afb6-41a2019a8955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:07:6e:83:3f:49:4e:f5:7c:37:e8:de:ae:f1:
20:d8:3d:d7:e0:07:cc:69:a5:f0:b5:66:3d:4b:de:
8e:90:19:c1:50:85:e3:93:1e:ed:3e:aa:28:d8:3d:
64:ec:d6:65:e9:c7:65:2f:e7:2b:38:e9:77:a0:1e:
f4:39:4e:23:53:19:5a:04:ef:9b:e1:64:07:5d:b2:
a4:b7:c6:0e:2a:67:80:4f:bd:f1:3e:56:ae:e9:1e:
da:51:37:57:37:01:62:da:1f:ca:c0:1d:7f:7d:af:
df:1a:cc:56:c1:4d:2b:64:41:8b:24:1f:7e:be:6c:
3e:d3:98:c2:69:80:0a:f9:70:04:5d:e8:12:b7:0d:
6c:e7:64:8c:0d:47:65:17:23:a2:ef:69:11:f2:22:
ab:e8:3c:41:2c:2d:a6:f5:40:4b:09:a2:aa:62:c8:
1b:72:ff:16:06:cf:3f:85:34:5c:90:a4:2f:3f:58:
3c:52:e5:41:ed:eb:bc:52:77:e3:83:ac:e9:a9:84:
cc:68:1a:b6:21:b1:d3:dc:82:a8:3e:b5:43:23:ac:
11:6a:01:96:7a:7c:62:d3:dd:d4:98:cb:44:6c:de:
00:ae:52:06:1a:aa:cc:ec:fc:4a:1b:06:c6:ac:da:
42:01:c1:07:c9:fc:6b:09:70:a8:fa:c4:a1:55:3a:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:14:1C:AC:CE:98:2E:C7:5C:FF:44:8C:7F:3C:4D:8E:EB:68:CA:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c27db91c-abeb-3439-af15-3d4e2c35f941.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0/c554a280-22a1-477c-97bf-f23a7f33a0c0.crl
X509v3 Authority Key Identifier:
keyid:BC:0E:50:C6:09:1A:EE:F3:D5:CA:17:87:86:B6:A9:50:1D:DC:59:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c554a280-22a1-477c-97bf-f23a7f33a0c0.cer
sbgp-ipAddrBlock: critical
IPv4:
170.39.196.0/22
IPv6:
2602:fd23::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:a5:16:3b:f7:b4:78:a7:d3:11:5f:1a:bf:be:5a:4f:37:49:
f7:8b:69:6b:fa:aa:3c:e6:ea:4b:07:1e:77:1a:33:48:5d:b6:
a0:cc:49:68:0b:5e:98:59:26:17:d9:bf:59:a9:fd:ac:2e:e8:
cd:01:18:ca:d6:40:b2:bf:87:ea:10:2d:dc:78:0b:d7:44:a5:
ff:22:b4:a9:3b:a6:e5:1f:72:9f:4b:7f:81:ea:ad:e8:19:0b:
f7:e7:57:49:e8:a5:fe:15:5d:d4:0e:35:b9:8f:d4:05:f1:4a:
38:ce:e5:e1:39:f8:95:91:43:67:55:85:a9:1f:ef:bf:c1:fa:
fb:fa:50:c8:e2:04:56:fd:d6:c1:b9:e1:d7:ce:b2:ce:05:4e:
e6:a0:89:16:e9:f9:bc:b0:33:c1:4d:25:d9:91:1c:dc:5b:ae:
a6:df:bc:66:1c:60:32:c8:08:7e:03:a0:e5:80:c8:52:62:20:
76:95:68:e0:b2:9b:49:1a:31:0e:32:12:66:82:64:b3:89:c5:
1f:b5:db:2d:f6:99:99:d3:ea:bf:dd:04:06:c5:19:20:ec:2e:
49:71:71:44:99:9c:ca:05:06:8a:9c:75:c8:0e:62:b6:1f:01:
06:9f:c6:7f:88:e5:75:1b:c7:f7:59:0c:94:a0:81:d6:03:87:
9e:44:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:48:04 2025 by rpki-client