Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381/7a27f177-5d17-3ebd-b617-e1dfdf44737e.roa
File: 7a27f177-5d17-3ebd-b617-e1dfdf44737e.roa (raw, json)
Hash identifier: mOuQiyfQHuDFhmlhYNC+5LRS+/ZQNemuv7fYiuXb+qo=
Subject key identifier: A7:CD:B5:22:E9:96:22:2A:63:89:CB:CD:7F:21:F6:2E:C0:AB:8A:BC
Certificate issuer: /CN=c77802de-4d62-4c96-9ea5-86421ef69381
Certificate serial: 010D0C9F432858484C102F43A3112AE2EA7DF880
Authority key identifier: D1:01:D8:59:D2:79:41:DF:4C:36:77:DC:08:EF:28:48:36:AF:D9:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381/7a27f177-5d17-3ebd-b617-e1dfdf44737e.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 399124
IP address blocks: 144.86.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:2f:43:a3:11:2a:e2:ea:7d:f8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77802de-4d62-4c96-9ea5-86421ef69381
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=262f713f-db6c-4820-aef6-b0595f8fc79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:d1:bb:88:5f:a3:6c:18:7a:30:b3:2b:92:
de:98:2c:89:6f:8b:fa:71:64:d0:47:7e:84:0d:11:
f3:09:54:ff:bc:31:6f:00:61:0e:e2:bd:5c:8d:47:
88:62:b5:c1:2b:47:b1:4f:e5:4c:75:70:a1:05:77:
d7:35:c4:ca:e4:9a:26:9f:83:23:2c:88:00:02:00:
dd:3f:f0:a2:c8:9d:b6:39:eb:a8:71:93:9a:3f:07:
72:c6:3a:e4:b3:27:ed:22:e9:4c:de:88:de:2d:5b:
b3:4b:b4:3e:d8:77:d8:23:49:5b:3b:6a:6a:20:aa:
45:fe:d2:9b:87:3c:23:d6:dd:c2:21:9e:88:39:14:
07:ae:a4:c2:31:43:54:4f:2a:cf:52:fb:b7:fb:71:
fa:a6:f0:01:58:62:5a:d1:ac:0c:6c:51:1f:4d:05:
04:16:43:58:bf:6c:1a:81:69:5e:a3:f7:77:fb:d2:
49:f5:ca:07:08:b8:30:43:4e:41:fe:15:74:55:6f:
d4:de:eb:f6:af:e1:85:94:2f:fd:0d:68:01:7f:fd:
04:e4:63:c6:a7:11:66:3b:5e:b3:af:05:fa:d1:d3:
75:53:44:6d:74:01:8b:c7:28:fd:eb:e4:0d:6a:c3:
98:60:aa:39:96:2d:cd:7d:70:7c:bb:57:fa:c0:3e:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CD:B5:22:E9:96:22:2A:63:89:CB:CD:7F:21:F6:2E:C0:AB:8A:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381/7a27f177-5d17-3ebd-b617-e1dfdf44737e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381/c77802de-4d62-4c96-9ea5-86421ef69381.crl
X509v3 Authority Key Identifier:
keyid:D1:01:D8:59:D2:79:41:DF:4C:36:77:DC:08:EF:28:48:36:AF:D9:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c77802de-4d62-4c96-9ea5-86421ef69381.cer
sbgp-ipAddrBlock: critical
IPv4:
144.86.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:d4:9c:90:7a:90:e8:1e:94:6b:ef:3a:e2:f1:35:7d:ca:9a:
ea:76:4e:81:33:8f:83:38:d2:2c:01:ad:83:54:0c:a0:f2:26:
99:83:ba:be:18:68:6b:46:b5:0c:1f:a7:9f:b7:22:65:c5:63:
36:ab:6a:1e:bf:88:56:e3:8c:81:7d:a3:cf:58:53:85:00:d9:
b7:42:a0:88:a6:7d:33:e0:d8:9f:00:c9:86:13:94:07:b6:41:
60:d5:58:e1:8b:a6:47:29:12:ea:f7:cc:8c:81:0a:9c:50:f5:
60:01:54:9c:32:8e:b5:58:40:d7:c5:3a:bf:58:54:fd:e9:68:
37:94:f1:17:3a:d6:d7:23:6d:74:b6:e2:b3:f1:04:ad:76:37:
a7:20:f4:41:50:16:98:9a:8a:59:57:02:62:84:37:1d:29:9a:
95:af:5c:e3:a1:68:71:f4:fd:ed:ac:f8:72:71:92:fc:c6:c6:
a4:e0:76:b5:f0:16:b5:74:12:e4:3c:3c:c1:f9:34:c3:be:d6:
12:b2:2c:78:cb:2a:20:fe:67:a2:91:13:97:93:d8:ff:69:34:
58:ca:e6:d7:b6:2d:3c:3c:3f:d0:c9:38:8e:2c:bc:d7:9d:4f:
f5:2c:be:1d:d0:b7:8e:f4:65:78:4f:d1:93:ae:6e:45:a1:f0:
81:91:e3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:08 2025 by rpki-client