Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa
File: a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa (raw, json)
Hash identifier: 9KbSP7X8iYCffTCICyTHvocplBTIsa0AsCd/N/L3LNI=
Subject key identifier: BB:73:48:6B:8E:FA:1C:3E:0C:6C:EC:BE:BD:15:85:4C:4F:12:2A:B2
Certificate issuer: /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial: 010D0C9F4328584862658FB8D3EC4ED3B2BF8A40
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa
Signing time: Tue 31 Dec 2024 02:00:40 +0000
ROA not before: Tue 31 Dec 2024 02:00:40 +0000
ROA not after: Mon 31 Mar 2025 01:00:40 +0000
asID: 397453
IP address blocks: 170.117.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:62:65:8f:b8:d3:ec:4e:d3:b2:bf:8a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Validity
Not Before: Dec 31 02:00:40 2024 GMT
Not After : Mar 31 01:00:40 2025 GMT
Subject: CN=9bbbbd28-6b7d-4fbf-b7d6-2afb0be7207b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:a8:9c:34:d2:75:24:75:7f:59:17:a0:6f:
44:a1:1a:23:b2:ba:de:cb:23:93:98:68:55:75:f1:
58:90:65:7f:e9:a5:b7:b1:8c:c4:f2:26:c5:23:39:
b2:6a:53:b6:d9:71:ad:a3:29:63:72:05:7a:1e:09:
af:23:51:b3:ff:b0:b8:82:bc:84:b6:49:b9:07:35:
8f:57:0a:37:d7:10:49:82:1e:40:3e:05:ff:3a:1a:
8c:7b:8c:3f:7f:fd:bb:12:5f:51:82:2a:51:0c:4f:
94:2c:2f:c3:b0:63:ad:a0:c3:59:79:8b:46:1e:4a:
31:66:e1:98:ca:7c:09:5d:12:2a:03:f7:79:e1:d2:
c3:8e:da:48:4a:ad:da:70:6a:ff:1f:83:c0:82:b1:
96:af:15:74:47:0c:b4:da:b7:34:c6:86:95:ef:d7:
0a:43:53:5c:b6:17:4e:a3:c9:2a:0a:59:c7:e1:b7:
5c:69:b2:09:96:10:35:8e:c8:5a:94:96:74:b3:d3:
b3:9e:6a:e5:d0:17:20:aa:85:87:3c:0e:26:79:2d:
c2:a5:36:bf:16:e7:25:c5:4e:80:71:cb:b8:91:d2:
b9:0d:7d:27:ec:4c:6e:d5:b9:1b:05:18:4a:69:7d:
95:ff:f8:a5:a6:b5:92:f2:42:d6:a7:af:9c:f1:02:
84:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:73:48:6B:8E:FA:1C:3E:0C:6C:EC:BE:BD:15:85:4C:4F:12:2A:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/a7cb96f8-798c-30b2-b971-ea00ffd4f8ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
X509v3 Authority Key Identifier:
keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
sbgp-ipAddrBlock: critical
IPv4:
170.117.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:cf:2e:1d:9b:fc:54:ec:c3:17:82:f9:0e:b1:16:cf:5f:97:
9b:98:98:c8:63:a6:cc:0f:d9:64:cc:17:79:b6:6d:56:b7:6b:
76:5d:a0:b5:34:e3:aa:b9:2f:26:bf:e1:25:44:17:71:a2:3d:
59:c8:c4:47:74:5f:3b:cf:5f:53:19:1a:01:a0:66:83:22:f4:
bd:c2:8c:69:53:6d:9c:63:f6:8a:58:e9:4e:7a:c5:67:26:f1:
3e:d2:f3:d5:33:f8:26:b8:ee:0c:b7:b9:f8:00:2b:cb:fc:9b:
c4:ba:7d:81:a4:b2:19:c4:ff:69:fe:02:2e:0d:ec:4e:2a:36:
6b:d9:7c:48:25:1e:24:3e:bb:98:a4:70:45:5a:df:2c:8f:fc:
6e:1c:80:c8:d2:44:58:18:57:3c:c8:1b:84:7b:9a:bf:c9:66:
b6:b0:46:b7:73:87:18:6c:03:34:6a:1e:91:90:ec:6a:36:22:
4f:b5:b5:d2:b5:87:69:2e:fb:a1:ed:00:dc:6f:73:63:01:f7:
7f:2f:d4:42:7e:b5:9d:dc:33:cb:1f:3e:13:00:e7:51:85:d1:
4c:f5:ee:f1:49:db:10:3c:0a:b2:93:f8:2d:f8:fb:6e:25:46:
72:9c:2f:e7:12:56:b7:2d:bd:87:1a:dc:c4:e8:24:2c:79:c2:
40:10:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:43:53 2025 by rpki-client