Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04/1abd0f9c-a7c6-3ac4-87f7-783d31d19e71.roa
File: 1abd0f9c-a7c6-3ac4-87f7-783d31d19e71.roa (raw, json)
Hash identifier: ktRgFk1V1cQNYQePfQLHHu0tWkVmRydxLcfX6GG9Dwk=
Subject key identifier: A0:D1:A8:37:5A:9A:79:01:05:92:B2:8E:C4:C2:38:4B:7F:17:56:63
Certificate issuer: /CN=d5b5be43-e992-4536-8b4b-8f9370040f04
Certificate serial: 010D0C9F432858481F65379330BC6C3EACC1BB50
Authority key identifier: A1:01:B0:CE:15:25:47:6E:E5:01:1D:1B:45:9C:0D:F7:3E:96:74:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04/1abd0f9c-a7c6-3ac4-87f7-783d31d19e71.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 394996
IP address blocks: 172.83.8.0/24 maxlen: 24
172.83.9.0/24 maxlen: 24
172.83.10.0/24 maxlen: 24
172.83.11.0/24 maxlen: 24
172.83.12.0/24 maxlen: 24
172.83.13.0/24 maxlen: 24
172.83.14.0/24 maxlen: 24
172.83.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:37:93:30:bc:6c:3e:ac:c1:bb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b5be43-e992-4536-8b4b-8f9370040f04
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=12623136-e7f7-4e54-b297-37a7cfb6780f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:c7:6c:71:55:20:51:96:0f:8d:ae:72:bb:
69:78:86:25:f3:17:fc:ba:36:38:74:c0:00:f9:bd:
14:fc:c0:d1:5a:ee:ce:dd:8d:d8:75:7c:39:45:cc:
71:1a:25:a3:8a:c2:06:cf:25:e5:d2:7c:5a:92:54:
c5:d5:fc:ce:f4:fd:f4:dd:a6:8e:9e:ce:ef:50:9e:
8e:41:9f:66:03:6d:ee:7c:68:a4:c4:27:23:c0:b7:
87:ea:e2:2f:50:e0:76:28:0e:34:78:1c:79:07:8b:
dc:bf:0a:82:ec:49:d9:6d:57:91:1a:9b:4d:89:14:
ca:06:ec:95:7d:30:96:03:10:b7:b1:e1:ea:5b:7f:
57:06:45:5e:44:4b:02:a2:bd:14:54:4d:af:d4:45:
44:33:f6:1f:29:82:d5:a0:d6:a8:10:e8:bc:f0:6b:
90:54:27:1e:21:55:70:18:7f:19:b6:ff:6e:b9:0e:
a7:69:1c:b6:da:e9:9e:ff:9f:0b:c9:4e:83:3c:20:
36:96:9d:c0:1f:af:2e:77:09:35:28:5d:d8:97:43:
26:12:db:8a:7a:90:50:4a:89:c7:31:d9:83:98:ca:
bf:bb:96:e5:9b:44:75:61:05:d9:ec:1e:24:02:51:
3c:48:68:ec:2c:1a:0d:6b:ad:3b:ab:08:ae:8c:e8:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D1:A8:37:5A:9A:79:01:05:92:B2:8E:C4:C2:38:4B:7F:17:56:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04/1abd0f9c-a7c6-3ac4-87f7-783d31d19e71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04/d5b5be43-e992-4536-8b4b-8f9370040f04.crl
X509v3 Authority Key Identifier:
keyid:A1:01:B0:CE:15:25:47:6E:E5:01:1D:1B:45:9C:0D:F7:3E:96:74:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d5b5be43-e992-4536-8b4b-8f9370040f04.cer
sbgp-ipAddrBlock: critical
IPv4:
172.83.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:10:ee:2b:cb:31:6b:a7:16:ad:ac:fa:2f:ec:10:a0:69:42:
4c:16:3f:fe:ff:34:b8:b4:19:c2:32:3c:13:c2:7c:a2:9a:54:
55:f6:f7:c8:44:46:86:67:df:fb:60:d0:10:06:92:7c:8f:d7:
c0:d9:d1:67:1f:f8:05:22:db:26:91:70:a9:a6:be:1c:b2:7e:
a2:8d:05:cf:c9:36:95:9a:40:60:e0:ff:0b:84:01:58:15:f9:
ea:50:d5:a6:d7:7e:2b:77:5c:41:57:06:49:e2:c0:8d:2d:32:
97:5e:1e:38:5c:ea:5d:6c:e4:6d:2a:63:da:69:e9:58:e2:1c:
2e:e0:57:db:27:57:fe:b4:72:36:36:f7:00:33:57:23:21:cc:
9f:35:7e:e2:65:20:96:04:6d:83:aa:ce:4a:b5:1e:79:44:03:
d7:fe:b7:8d:98:54:53:d0:91:04:71:eb:56:a0:35:18:7e:e1:
54:f7:7e:77:cd:eb:f4:8d:00:b9:77:6e:00:33:a1:c8:09:d9:
4f:11:2c:da:d7:47:e6:ad:1f:66:84:4e:49:3e:18:97:41:f9:
88:80:a5:3b:27:a1:fa:fa:f1:ac:2e:ff:53:ab:8d:51:20:e5:
3d:20:19:03:cc:c5:5b:39:de:49:2d:74:67:40:29:c5:2f:ec:
69:9e:32:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:27:04 2025 by rpki-client