Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/323e31f4-bcca-38c7-a2f5-aa73c0b70967.roa
File: 323e31f4-bcca-38c7-a2f5-aa73c0b70967.roa (raw, json)
Hash identifier: 0RecLCIferOAJTpYIdGeK4a7chphYMY4mmcgC51dEJ8=
Subject key identifier: 86:66:8C:9E:B2:3A:C7:3D:72:FC:85:8D:BD:00:D1:8C:62:67:E1:45
Certificate issuer: /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial: 010D0C9F432858486D90528C26AC3C167A4B1F40
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/323e31f4-bcca-38c7-a2f5-aa73c0b70967.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 7018
IP address blocks: 207.170.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:52:8c:26:ac:3c:16:7a:4b:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=997af817-2b95-4102-9789-99721323f68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:a3:b5:3e:08:9a:8d:51:85:95:bc:3b:b2:
b9:d8:4e:90:19:90:b2:4f:3a:61:0b:6b:82:5d:2b:
74:bc:0f:2a:d7:f5:d7:28:9b:90:67:9b:b6:10:b7:
7d:ff:44:e8:34:a6:46:de:a1:f2:e9:31:62:d1:ef:
4e:58:b9:fd:0c:35:1b:57:ec:09:2e:4d:89:05:c2:
35:6c:22:90:6e:76:c2:6f:2e:d9:37:1b:b1:e8:25:
a2:26:8f:ee:b5:7d:c5:3a:b7:9f:27:25:ab:28:a6:
d7:7d:d4:5c:6b:aa:4c:88:b2:ac:06:e2:ac:72:1a:
f3:6b:d5:cb:14:35:81:0c:e7:c9:18:2e:4e:e7:60:
25:23:5c:f1:45:27:39:60:92:ce:a3:6c:f5:27:b3:
67:3d:81:4e:40:54:53:45:d7:fb:87:87:6d:9d:5e:
4b:c9:69:ad:4f:4b:16:4a:ee:9b:bb:c5:d3:54:7e:
be:36:b1:29:50:68:54:77:12:81:b4:7e:b5:5e:ac:
1f:b7:cc:15:cd:17:fb:b8:36:ee:67:42:75:50:ba:
8b:a2:3d:b8:09:e6:ce:7a:a6:1b:80:eb:1e:07:3b:
42:57:32:0e:6d:ae:82:e6:15:25:93:13:da:fc:1c:
ae:9e:9b:de:da:cc:b2:8c:08:15:86:e6:4b:1c:7e:
b6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:8C:9E:B2:3A:C7:3D:72:FC:85:8D:BD:00:D1:8C:62:67:E1:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/323e31f4-bcca-38c7-a2f5-aa73c0b70967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
X509v3 Authority Key Identifier:
keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
sbgp-ipAddrBlock: critical
IPv4:
207.170.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:f1:ac:04:21:e1:f3:c1:c4:80:33:71:ba:dc:68:dc:92:63:
39:d9:cc:f6:88:5b:2e:31:65:20:82:c5:47:aa:43:2a:eb:6b:
33:9c:00:6a:4f:3e:51:86:31:c6:e9:75:53:2b:a9:72:3a:10:
cf:12:65:66:e1:55:47:61:6d:2c:50:d8:01:1b:c8:bb:5c:d3:
75:04:36:d8:a7:64:12:90:e6:2d:7c:a0:63:78:9b:c3:d8:7b:
68:c7:63:b3:77:50:b6:18:63:62:12:e5:54:22:67:5d:76:c6:
c8:e5:3a:ac:54:fa:d3:6a:72:c5:3a:f3:8e:51:40:a4:46:9d:
97:c7:7b:cc:6e:67:89:95:4c:50:7d:71:de:07:e4:08:fa:f7:
da:a7:39:ca:91:e1:e1:ae:84:4b:16:47:5f:d1:c1:f6:d7:ea:
70:b0:89:28:e8:2c:b7:fc:64:fd:79:74:1e:e9:2d:59:4c:e9:
c7:b5:43:14:d8:db:2e:84:35:43:d4:39:54:f1:6a:77:2d:3a:
04:43:29:a7:25:f5:e5:25:8b:5e:60:e4:52:8a:7f:19:f3:a3:
47:9d:b5:59:52:eb:28:49:f0:1f:37:dd:0d:59:da:21:c8:4d:
d1:32:ff:68:8d:bd:ba:1f:bb:0f:8b:5c:d6:f6:92:19:15:d7:
8f:1a:87:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:01:06 2025 by rpki-client