Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/346ff034-1c54-37d5-9980-289efa2829b6.roa
File: 346ff034-1c54-37d5-9980-289efa2829b6.roa (raw, json)
Hash identifier: I9OYVX+MyyujTiJaHQCxCsIFDLwh/f1NzaLt9BwJ684=
Subject key identifier: 8B:3A:DE:C8:70:A5:FC:6E:50:B9:B8:F1:DA:66:60:17:84:05:93:F7
Certificate issuer: /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial: 010D0C9F432858481C9A79BFEF298A0E0FBEF1C0
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/346ff034-1c54-37d5-9980-289efa2829b6.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 142.147.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:79:bf:ef:29:8a:0e:0f:be:f1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=e7987bdb-7f5a-4fee-8b7d-a28a86a1baf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9d:1b:56:10:42:e9:ab:24:99:24:c5:0a:05:
90:5b:3b:0d:ac:85:92:be:36:13:36:4c:74:42:ca:
cf:c5:15:8d:b2:37:96:19:7d:da:2e:d8:8d:b9:1b:
13:d6:81:1f:58:1b:b0:50:51:3b:23:41:ea:c3:61:
81:fb:c7:7e:91:af:30:ce:71:1c:6b:8e:1a:96:b0:
38:fd:5a:f1:40:31:af:e3:1e:51:3e:37:f7:cd:e1:
78:4d:2c:1a:9c:8f:2b:db:2e:9a:4f:f2:cc:66:f8:
85:48:9a:17:72:ea:d9:41:3d:fd:d2:e3:ec:b8:f2:
39:cb:a5:5b:1f:58:11:cb:ed:28:54:24:91:d2:ec:
ac:32:6d:6a:6a:a0:d1:33:4c:a3:9c:0d:72:96:6d:
e8:63:83:27:b6:60:ad:83:e8:bb:26:d8:39:c6:c6:
c9:c4:3a:37:17:da:61:19:ee:5d:51:a9:5e:83:7e:
41:51:d1:d5:5b:6c:cf:1c:db:ba:1e:e5:25:8b:34:
57:a7:33:4f:4f:09:8d:bc:fd:99:4d:1c:fe:85:9d:
86:0b:2d:70:b7:62:31:b6:bd:15:31:a9:24:5e:03:
f2:aa:82:31:3d:db:a5:b7:ac:81:22:2f:96:c4:25:
42:32:d7:04:a0:09:9f:78:ae:56:03:9f:52:4b:04:
18:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3A:DE:C8:70:A5:FC:6E:50:B9:B8:F1:DA:66:60:17:84:05:93:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/346ff034-1c54-37d5-9980-289efa2829b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
X509v3 Authority Key Identifier:
keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
sbgp-ipAddrBlock: critical
IPv4:
142.147.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:5a:0b:e0:2e:03:52:7e:4b:24:61:1a:76:11:ed:de:9e:5d:
53:8a:32:31:a1:63:30:66:f2:e2:d9:d0:4e:43:38:37:8a:82:
71:88:71:a6:ec:61:77:a3:e8:b2:1d:5c:4e:9c:b2:2d:4f:ca:
6d:c3:0b:06:33:8a:d0:15:52:3e:4c:8e:fb:27:8d:0c:ed:25:
5d:18:6d:21:1d:ea:5a:71:8f:1e:de:54:e2:0f:fd:1d:90:17:
15:8b:c4:6b:f8:99:85:82:33:e0:44:ca:ae:ca:fd:63:72:37:
79:87:63:d4:61:5c:fa:cd:29:f1:7a:9f:af:ff:4c:01:09:02:
4a:0d:6d:d4:36:0f:fd:42:c3:36:36:52:86:63:1a:a4:2e:43:
0f:5c:47:4d:ed:d0:9e:89:4a:91:bd:dc:4d:34:20:71:04:bf:
b0:f6:74:ec:a2:00:6e:e5:b3:b7:8d:4a:7b:08:65:21:7e:26:
b8:ca:f8:7d:a9:a6:a0:8d:a3:0f:a6:3e:84:7e:a5:db:18:bf:
a2:9d:90:08:59:28:e4:89:66:9e:84:d3:6f:86:b8:25:d8:31:
fc:c4:70:b1:8e:d6:aa:2b:82:88:c3:65:54:f8:71:1f:39:b2:
76:5e:dc:0f:c3:f7:ae:c7:38:bb:d8:d8:e4:78:e5:e5:e8:ce:
bf:9e:57:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:20 2025 by rpki-client