Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/cb96bbd6-5e71-3fc0-9217-86d9262e720e.roa
File: cb96bbd6-5e71-3fc0-9217-86d9262e720e.roa (raw, json)
Hash identifier: 1bWFPW3i9BGukOgx1bf/vuz+JFXB04qdMEO0Ibo2S6k=
Subject key identifier: 71:1C:A9:D1:99:79:DE:AF:7F:15:4C:68:5D:A9:13:23:C2:C7:24:DC
Certificate issuer: /CN=6fc3741b-deff-4ecf-bc37-262b20e1e278
Certificate serial: 010D0C9F4328584827C537688B4A6B604AE0DE40
Authority key identifier: E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/cb96bbd6-5e71-3fc0-9217-86d9262e720e.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 16509
IP address blocks: 168.100.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:37:68:8b:4a:6b:60:4a:e0:de:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fc3741b-deff-4ecf-bc37-262b20e1e278
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=9d22c752-a4b1-462c-ab3a-965ec3e2b00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:18:b0:8d:95:b6:e4:4f:88:3b:71:fe:b9:25:
3c:ac:16:f5:36:ad:25:2c:d6:df:0b:91:63:98:70:
b8:2c:b3:56:fb:b7:50:6a:2a:c3:c6:ae:a9:69:94:
47:16:e9:13:d2:37:84:e1:7a:e2:eb:9f:75:78:78:
db:e5:19:7a:fd:65:5d:db:a4:d1:a8:ea:19:f9:9f:
63:60:bb:2b:c1:33:6e:c2:15:15:0c:ee:69:cc:09:
0c:01:05:79:8f:2a:12:96:ab:78:cf:e4:fd:c8:24:
32:81:2d:45:9a:e1:96:a3:1d:24:ab:a3:db:2a:7b:
8b:b2:04:b0:ae:23:e2:0b:6f:f0:49:4a:ef:17:af:
72:66:54:cd:77:ce:b8:43:81:8d:bc:2e:2c:3b:f6:
f5:fb:6a:55:e1:1e:79:bd:75:d4:1d:ec:9c:ba:77:
40:d4:45:ee:17:7d:02:20:ce:63:c3:3d:ba:b8:2d:
7d:69:d9:32:68:cc:25:3e:e6:64:5e:e7:ae:12:64:
ab:a0:01:39:6a:ab:58:fc:30:4d:0e:69:44:46:e9:
dd:43:94:2c:a1:cb:65:d4:44:26:b3:91:d9:51:17:
5d:0e:ff:83:92:c9:f8:22:dc:fb:c5:a9:d6:6a:0a:
5e:c5:cf:41:15:8c:8d:71:25:76:57:5e:07:2a:20:
ef:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:A9:D1:99:79:DE:AF:7F:15:4C:68:5D:A9:13:23:C2:C7:24:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/cb96bbd6-5e71-3fc0-9217-86d9262e720e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278/6fc3741b-deff-4ecf-bc37-262b20e1e278.crl
X509v3 Authority Key Identifier:
keyid:E3:C0:A1:F3:E4:47:BA:AA:BD:98:08:6B:B1:7F:3C:18:D5:22:04:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fc3741b-deff-4ecf-bc37-262b20e1e278.cer
sbgp-ipAddrBlock: critical
IPv4:
168.100.177.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:f1:16:eb:7f:8b:9e:61:20:4c:fa:16:5f:7f:f2:8c:59:60:
04:45:6c:16:9d:2d:45:6c:78:1d:2d:f3:01:3b:85:d6:80:a3:
c0:cf:15:cd:57:b6:c4:74:e6:d9:f2:1f:a4:1c:8e:5a:58:2a:
e0:45:e1:17:4b:30:31:cc:f5:d5:b4:5c:f6:31:7f:b2:ea:be:
2d:4c:f3:e0:b0:09:0c:49:82:6f:0a:7c:2d:74:35:99:2b:04:
c5:c9:4f:f1:dd:48:34:15:59:78:cb:03:e2:f7:f4:f1:0c:fa:
ef:9a:b4:5e:7a:9e:fe:3c:87:67:76:b7:21:43:f2:ff:bf:77:
7f:a9:72:72:b7:ca:49:6e:46:d8:49:eb:cf:f1:06:2a:c3:3b:
6e:9d:59:83:16:8c:ed:84:c6:81:cf:ee:f6:f4:dd:a0:af:5a:
47:35:9b:39:e6:0b:13:22:a4:12:c3:e5:9f:bc:d0:8e:8b:5c:
e2:17:1a:4e:7a:93:1f:d3:b8:f9:cc:b2:68:56:56:5f:92:c2:
82:b5:ed:e2:7c:fa:48:ab:8f:fd:09:13:0e:42:94:c2:cc:32:
dc:d2:12:a2:54:9c:e1:ed:3e:f7:ab:83:d1:5d:df:bc:db:2b:
18:78:43:43:b1:5e:4f:db:da:f3:c0:0d:d0:6e:17:d5:28:36:
f9:aa:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:05 2025 by rpki-client