Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/be3a5e47-d281-347d-b95d-87a8fb4d657b.roa
File: be3a5e47-d281-347d-b95d-87a8fb4d657b.roa (raw, json)
Hash identifier: bv9p1dQtEuIwymsyi44D6flc7FqIav0GkdADIMZlZq8=
Subject key identifier: 0E:D4:82:C7:89:93:6A:D7:53:D3:00:A0:CC:80:0E:DC:A5:C9:70:5B
Certificate issuer: /CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Certificate serial: 010D0C9F43285848773AF6C0F66980B6E487FC40
Authority key identifier: E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/be3a5e47-d281-347d-b95d-87a8fb4d657b.roa
Signing time: Tue 07 Jan 2025 13:06:53 +0000
ROA not before: Tue 07 Jan 2025 13:06:53 +0000
ROA not after: Mon 07 Apr 2025 12:06:53 +0000
asID: 14315
IP address blocks: 173.0.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:3a:f6:c0:f6:69:80:b6:e4:87:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd97e7a-c31d-417a-bc07-1ecdb96be09f
Validity
Not Before: Jan 7 13:06:53 2025 GMT
Not After : Apr 7 12:06:53 2025 GMT
Subject: CN=0244a326-665c-4c0a-8938-5588d6ee4457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5e:07:ea:d9:ae:7b:4b:8f:0d:86:8c:7c:44:
2c:30:3c:97:94:8b:d4:03:f4:d7:d4:7a:95:d2:c1:
a3:8f:28:d0:b7:51:48:a6:16:6d:c1:4a:c6:71:78:
bd:73:2c:fc:67:e4:03:1f:bb:14:00:d0:9b:a3:45:
cb:3f:d1:97:97:b4:a5:47:68:f7:2b:48:22:43:41:
47:81:d9:1d:42:98:16:8f:4f:2a:13:85:98:32:ba:
a0:45:2b:b3:2b:10:06:d7:f2:1a:01:b0:86:84:78:
99:0f:2a:e9:8b:ee:f7:39:6c:c5:e2:2f:81:4d:1b:
a2:13:be:c5:7b:80:ab:53:5b:02:4f:7a:57:0e:c4:
43:13:57:2a:49:e4:1f:0e:cf:56:6b:ea:2e:c1:6d:
8e:1a:a6:97:7b:fe:2b:7d:12:7c:94:91:c1:f9:7c:
e4:2a:93:a4:b0:a1:10:03:4c:84:3f:44:6f:fd:60:
f4:fe:7d:ce:ea:21:9e:bc:01:eb:3a:08:72:ca:99:
e3:49:6f:c5:33:1e:c3:8f:f3:41:66:70:3a:0b:86:
8e:1e:42:90:83:d7:b5:29:7f:8c:4f:aa:ed:30:8d:
67:10:c1:0a:42:ff:2f:b9:5f:0e:42:04:d9:1f:39:
55:b1:5a:d3:f2:4f:79:d7:fe:f3:3b:67:58:a1:6e:
ab:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D4:82:C7:89:93:6A:D7:53:D3:00:A0:CC:80:0E:DC:A5:C9:70:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/be3a5e47-d281-347d-b95d-87a8fb4d657b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.crl
X509v3 Authority Key Identifier:
keyid:E0:BC:46:6D:8F:5F:DC:23:84:62:42:1C:22:C8:6C:C1:EE:EB:CB:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1bd97e7a-c31d-417a-bc07-1ecdb96be09f.cer
sbgp-ipAddrBlock: critical
IPv4:
173.0.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:dc:53:69:17:a5:6a:90:ef:4b:b0:78:23:5b:1d:23:31:d7:
63:98:af:cf:b2:84:1b:ca:9a:be:5a:81:8a:bd:02:be:2e:5e:
8c:ff:5f:6d:c9:cf:c3:c2:75:b7:92:10:69:1a:64:9b:de:6d:
35:cf:db:98:25:f8:93:9f:c3:d4:74:1d:7c:5f:d1:a4:39:fd:
7a:cf:f2:71:3f:07:f9:63:dc:8f:e6:8e:99:5a:7b:1b:ae:ba:
8f:5b:9c:1d:28:f6:0a:1c:d5:1c:40:83:79:ac:78:cc:13:7d:
41:ef:5e:c3:ec:a7:5c:dd:d2:5e:56:c0:46:76:9e:b1:6d:52:
27:91:4e:9f:8b:cc:64:dc:81:c3:cf:5b:51:0d:38:97:06:b7:
ba:ab:68:f5:bf:ee:4e:fe:22:b4:ca:a0:a2:c3:e2:5e:c2:56:
ac:dc:52:f8:4a:3d:eb:8b:72:9a:ab:6d:45:8d:0a:44:87:01:
e3:a0:85:6b:26:95:75:d3:16:ed:8d:53:35:91:74:40:55:23:
9e:51:85:10:3c:9f:31:a0:fc:f0:47:e9:e2:c6:65:85:5c:ed:
9e:61:ee:0b:79:f0:d0:2a:c9:38:48:29:68:2a:7e:5a:a8:02:
ba:77:0f:47:64:1e:b1:b9:36:81:02:26:87:a8:b9:ef:8c:91:
47:82:88:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:21:00 2025 by rpki-client