Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ff1dcdc6-bc45-3521-902e-a64b8f8b9b58.roa
File: ff1dcdc6-bc45-3521-902e-a64b8f8b9b58.roa (raw, json)
Hash identifier: RwTfavMPopJfzTWQ9X9hlNgp9XdmB22Yedww8Hn2adU=
Subject key identifier: BF:7D:FE:C2:1A:FB:92:86:7E:69:3A:02:E4:FC:F6:CE:C3:75:83:28
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285847FB1A23E3530BA037825EE700
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ff1dcdc6-bc45-3521-902e-a64b8f8b9b58.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 834
IP address blocks: 173.211.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:23:e3:53:0b:a0:37:82:5e:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=00f08de8-cf80-461d-ab0f-9411d7c4c136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:f3:3a:3e:f6:d0:71:20:19:f3:05:0f:4a:
64:83:77:76:be:a5:4f:5c:a8:3f:14:96:f9:41:8a:
85:3b:22:27:1a:dd:fa:17:ba:28:94:3a:06:d6:d9:
3e:70:4d:5b:5c:66:f2:5e:19:ad:45:b4:55:7d:57:
e2:28:2a:91:9c:9e:9e:01:8f:26:2d:b2:e3:78:72:
ce:fc:39:27:78:5d:3f:9e:45:b2:9e:93:6c:71:f7:
f0:cb:7a:36:78:fe:21:e8:a1:83:90:a8:91:f8:1c:
e6:b7:58:53:a8:0e:82:f1:a6:f6:83:f3:76:a0:21:
5a:10:3a:0f:15:67:e6:b7:14:e3:f7:77:2e:49:26:
3a:3d:95:a5:02:15:33:9b:29:29:4b:9f:5f:08:e7:
09:c3:9f:bf:8f:e0:f3:97:8e:4b:87:8b:07:74:b8:
3c:5d:7b:99:df:4c:5d:37:69:98:97:7d:01:96:30:
38:4f:15:cc:e7:14:73:96:b7:5d:eb:30:02:a6:05:
51:90:e4:8f:89:46:45:ad:26:fd:f1:02:6e:81:b1:
60:f5:1f:be:7d:9b:c8:f9:47:72:63:0f:6a:37:63:
0c:46:6d:5a:9b:9e:63:93:2c:fa:15:a3:d9:c0:aa:
c4:85:da:6f:a2:9b:3a:4b:b0:0c:c0:b6:e2:56:4f:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7D:FE:C2:1A:FB:92:86:7E:69:3A:02:E4:FC:F6:CE:C3:75:83:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ff1dcdc6-bc45-3521-902e-a64b8f8b9b58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
173.211.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:06:62:68:a2:21:b4:9f:7b:2d:c5:8f:52:4e:c3:9d:aa:33:
5a:86:97:8e:6b:88:fd:8e:4f:67:f6:a0:b1:88:bb:22:5e:4c:
b3:f1:01:7a:1d:f2:5d:56:44:a8:3a:f8:76:52:33:bd:32:ae:
91:79:f0:c4:4a:e5:2f:4d:5a:14:61:b6:94:b8:01:38:0b:99:
7b:8b:c9:61:fb:77:a9:d8:ad:93:10:e7:b6:94:07:95:b8:6f:
92:d2:84:58:de:c5:72:52:b6:21:0f:85:29:59:a8:94:d0:59:
d4:c3:1d:50:27:de:22:45:82:f8:34:18:d2:52:4d:85:a8:04:
12:76:74:ed:63:aa:41:da:b2:f2:81:e7:69:23:b1:8c:8c:e8:
b7:68:e5:d2:4d:92:16:01:4c:d9:26:e4:72:b6:bb:9d:9f:f9:
c4:c3:10:92:e0:19:f1:3d:eb:2b:70:95:ff:50:16:28:23:0d:
9d:75:1c:af:19:0e:d5:20:a6:cd:c7:ca:46:94:8d:20:c6:a9:
87:42:46:28:27:30:eb:83:e6:e6:5a:18:d1:bb:fa:f0:85:07:
e2:fa:12:73:eb:fb:30:4b:0d:56:2c:10:c1:9f:d0:fb:6b:55:
0d:db:f0:49:76:77:81:8a:57:c2:bb:84:51:38:04:45:dc:15:
fa:80:d6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:34:02 2025 by rpki-client