Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/557e6083-1ac3-333a-8de6-3598afc9cd07.roa
File: 557e6083-1ac3-333a-8de6-3598afc9cd07.roa (raw, json)
Hash identifier: s1aRcIBXMvLxyt5+1zo2/xhKGpMwJONDop7Ocr97zo0=
Subject key identifier: 41:31:94:F8:D8:5F:38:53:45:71:FF:5B:F4:B1:9E:A8:E1:63:29:E0
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F43285848100A9C5CE0DEB86308B00FE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/557e6083-1ac3-333a-8de6-3598afc9cd07.roa
Signing time: Sun 01 Dec 2024 14:00:51 +0000
ROA not before: Sun 01 Dec 2024 14:00:51 +0000
ROA not after: Sat 01 Mar 2025 14:00:51 +0000
asID: 63949
IP address blocks: 172.235.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:10:0a:9c:5c:e0:de:b8:63:08:b0:0f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 1 14:00:51 2024 GMT
Not After : Mar 1 14:00:51 2025 GMT
Subject: CN=0d8f9cdd-fa68-4e8e-830d-04852478b909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:48:f6:19:ad:f9:1f:45:46:01:1d:6f:9c:
07:9d:a1:56:45:37:62:f5:96:50:92:cf:87:18:30:
ec:8e:3f:ce:07:6f:ed:8f:8f:6a:df:52:bd:dd:23:
f4:86:0f:50:bf:bb:bd:90:fc:6f:90:42:02:ce:87:
30:08:20:a0:59:60:93:2a:8c:28:40:5e:94:88:84:
27:30:fb:0a:4f:fa:92:13:76:6e:f6:29:97:08:3a:
a5:5a:83:5a:36:a5:9e:ef:b0:e7:8f:c7:b4:f3:b2:
ac:ca:bd:67:26:23:94:29:03:c0:96:a8:8d:6e:42:
90:ad:be:48:e2:ba:26:88:f7:33:8b:8d:2b:63:b3:
5b:cc:87:f4:fb:08:09:e6:35:3c:1f:2d:cc:95:25:
d2:f7:49:52:fe:c6:26:53:be:66:cc:11:2a:17:95:
c7:46:33:09:31:f7:e6:59:2b:9b:d4:a7:52:86:14:
d1:4c:6c:da:d7:50:42:de:12:18:3c:41:58:99:84:
83:37:54:26:17:1e:e9:6d:3d:e4:ab:11:ee:79:b7:
c7:02:02:f2:ba:e4:61:4c:06:e5:e1:92:69:f5:7c:
a6:45:83:0e:48:cd:98:62:ed:db:7d:e6:e1:fe:eb:
a4:2c:6e:29:c3:d0:d1:01:52:ec:8b:20:2f:b1:ed:
e3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:31:94:F8:D8:5F:38:53:45:71:FF:5B:F4:B1:9E:A8:E1:63:29:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/557e6083-1ac3-333a-8de6-3598afc9cd07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:95:93:1d:e3:21:92:40:2a:a7:ac:ed:bd:89:4a:cf:fb:e0:
06:1f:5f:b2:8a:5e:a8:b4:9e:b2:3e:f6:cc:2c:61:78:01:1f:
3e:b5:42:55:d7:a7:cc:18:b5:9f:6e:4f:39:ba:9f:be:95:4b:
44:78:99:cf:f9:6c:3a:61:84:71:aa:52:d3:bf:b0:f8:31:7a:
61:ee:5f:84:56:62:6a:ea:73:ed:ae:29:e9:8a:d4:51:7b:05:
a3:82:fc:74:ef:86:f5:bb:c1:74:b3:c1:0f:38:a9:25:d2:fc:
0d:96:cb:a1:72:ef:a5:45:b6:6d:ba:d9:07:0a:c9:af:e5:ea:
28:2a:4d:3a:7c:87:81:0d:46:46:be:9b:a5:08:ae:59:87:98:
f5:a1:09:19:15:be:b8:ff:d2:92:24:8a:0f:f1:9b:7f:40:b2:
c0:e6:1c:b4:b8:4c:6e:82:f4:6e:da:06:49:38:64:d1:78:74:
9f:b9:e8:7f:cf:6b:a9:5a:89:f2:f6:7e:cf:7d:9a:63:00:3c:
b6:d2:72:59:41:2c:6c:33:a9:d9:dc:9d:9a:cd:59:eb:ab:f0:
c0:10:53:9d:41:57:d3:e0:f6:33:50:b0:7d:54:31:cd:ed:6d:
aa:84:e6:58:75:39:62:d0:52:38:62:65:fd:00:7c:60:01:16:
dd:31:fe:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:48:40 2025 by rpki-client