Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8a8da8-12ff-3986-a10c-c955ed07a6cf.roa
File: 1b8a8da8-12ff-3986-a10c-c955ed07a6cf.roa (raw, json)
Hash identifier: FwSVjwXGHUWogtSF/MmMpcKXNcMYxFSbj4t4k7TLWY4=
Subject key identifier: 1A:28:60:87:13:EE:19:DF:94:BD:65:22:B1:52:CD:19:0E:C5:13:97
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100AA2C0ED51523B9858EA8C
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8a8da8-12ff-3986-a10c-c955ed07a6cf.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 63949
IP address blocks: 172.235.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:a2:c0:ed:51:52:3b:98:58:ea:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=46843a9c-91f8-42c7-ac34-6ca32ae60dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:85:41:d1:f0:d8:a5:da:09:83:e7:7c:eb:26:
28:e4:fc:26:82:98:bb:de:e8:ab:b0:34:1e:bb:b4:
ac:71:55:3d:35:82:6b:1a:f8:b5:33:d6:b6:2c:d8:
c7:07:a4:9e:cf:a3:aa:05:77:c2:ac:36:a8:7b:14:
b1:25:81:82:0f:b5:28:9a:71:8b:ab:55:21:aa:16:
67:da:74:6a:c2:69:3c:2b:be:91:90:19:12:01:11:
e7:b4:12:7d:c7:17:7a:da:40:e8:13:39:d2:5d:7a:
22:3b:f5:0e:5e:73:fc:9b:ba:21:3a:66:63:ac:1f:
20:e1:fe:df:c1:e3:a3:83:0e:b6:9d:c2:14:2d:43:
6b:94:c4:30:b4:7d:4e:37:0c:e6:71:e5:76:72:e3:
2c:42:8f:4c:3e:af:06:9c:e9:e5:01:2e:11:98:bf:
1c:c7:8b:20:97:94:b4:e3:26:06:cf:a3:c7:ca:25:
ae:9d:e0:b4:43:d5:e7:f1:f4:d1:80:8b:b5:11:8e:
65:c7:65:72:88:21:54:17:f5:14:6f:84:5e:3b:21:
b1:01:c4:ac:15:42:2c:3d:77:9c:c9:8c:89:a1:dd:
f5:10:9a:d7:15:c7:cc:f8:f3:2c:7b:38:da:38:b3:
65:79:1a:ae:b6:30:91:22:e9:91:df:40:57:bd:31:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:28:60:87:13:EE:19:DF:94:BD:65:22:B1:52:CD:19:0E:C5:13:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8a8da8-12ff-3986-a10c-c955ed07a6cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:b7:8e:d9:19:ff:24:7e:ea:ea:7c:a8:49:b1:74:ab:48:d9:
95:ac:9c:c3:0a:43:a0:70:ad:fe:54:cb:79:6a:cb:bf:f1:a0:
55:bc:bf:80:30:34:3d:54:54:39:62:45:fa:71:49:43:67:15:
e2:fe:aa:9d:32:19:23:84:3e:bb:1c:b7:66:7e:8f:63:e8:97:
fd:e4:f3:bd:6d:06:b1:ee:20:64:28:54:62:00:f3:ed:3c:f3:
33:5b:37:b6:72:29:f4:d0:a6:16:b5:5b:b0:b1:26:54:60:a5:
1c:b4:04:2e:4a:36:04:df:c8:fa:06:95:79:b3:27:f0:31:6a:
d4:ad:f9:25:f4:13:f5:f9:ea:9c:90:97:07:38:b8:4e:fe:0c:
9d:84:6b:13:a8:72:b2:93:90:93:4c:d0:81:e1:c7:3d:8f:78:
5e:a8:4e:d3:fe:97:63:f6:c5:89:e4:6a:a3:49:7b:23:9e:68:
1e:85:53:38:76:22:ec:ba:b1:1c:f5:e7:76:d9:ff:64:57:b2:
36:80:cf:99:aa:8e:12:fe:da:19:8d:e1:fc:4f:7e:c8:29:c8:
2e:cc:e4:07:f0:6e:1f:b9:2a:8d:c3:bb:f2:18:72:de:6f:10:
68:a8:a2:f0:81:1b:de:8f:ac:f9:a6:c5:07:50:7c:21:07:67:
70:e6:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:21:59 2025 by rpki-client