Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f727d449-63b5-30d3-8152-0bc7aba90226.roa
File: f727d449-63b5-30d3-8152-0bc7aba90226.roa (raw, json)
Hash identifier: 91zSiDwv/4qQLS+SBl10kLiSRIrgM4c09DX1VunMSdY=
Subject key identifier: EF:82:3D:16:3D:57:81:F4:36:0E:14:0C:13:BA:9E:DC:22:01:CD:BC
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F432858485CD0349E5ED075449202FA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f727d449-63b5-30d3-8152-0bc7aba90226.roa
Signing time: Sun 29 Dec 2024 02:00:39 +0000
ROA not before: Sun 29 Dec 2024 02:00:39 +0000
ROA not after: Sat 29 Mar 2025 01:00:39 +0000
asID: 20940
IP address blocks: 172.235.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5c:d0:34:9e:5e:d0:75:44:92:02:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Dec 29 02:00:39 2024 GMT
Not After : Mar 29 01:00:39 2025 GMT
Subject: CN=681a8b09-a65e-4b94-9bca-15e4632a6264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:3b:41:58:df:a0:bf:68:85:6b:51:37:27:
4b:1d:4a:9f:0d:15:72:c5:0a:54:98:54:05:02:aa:
80:ab:64:5c:da:27:57:91:a4:a2:29:d7:b0:48:7e:
e2:19:1f:54:fc:bc:f2:ef:14:46:60:51:10:32:1f:
24:32:95:3d:78:cd:61:65:31:d6:ce:b5:fe:b3:3e:
12:b7:14:81:15:21:49:fe:0e:eb:67:a5:38:95:fd:
ff:8b:0c:44:28:4c:3f:85:42:da:06:6b:b8:a3:4c:
b4:c7:87:d3:ee:3f:8b:54:7d:bf:4a:22:d1:f3:8a:
ce:a0:03:ef:9e:35:1a:80:19:61:2a:05:39:7b:cb:
c0:bc:82:d1:bf:42:e1:ad:40:30:ee:b5:7e:8c:b0:
41:50:8d:88:32:5a:4e:fa:2d:48:c2:15:ea:09:99:
70:2c:e1:6a:ac:9d:c2:ab:e6:e3:db:21:e7:55:b9:
fe:f3:f7:5a:81:f7:68:1e:21:cb:ae:e0:ae:f2:55:
eb:c0:3b:6e:58:ff:8a:9d:27:43:c0:c4:73:64:83:
6b:a0:0a:da:fe:75:03:35:17:a2:4d:b7:2a:87:de:
d8:fe:bb:42:d3:54:e9:89:05:75:27:65:3f:0c:87:
ec:57:13:13:0b:fe:aa:7a:9a:6f:05:71:65:b1:80:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:82:3D:16:3D:57:81:F4:36:0E:14:0C:13:BA:9E:DC:22:01:CD:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f727d449-63b5-30d3-8152-0bc7aba90226.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
172.235.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:ad:77:69:cf:2d:d9:31:07:58:72:e7:e1:24:8e:90:ea:c6:
3b:2d:b5:fe:35:68:38:38:66:df:01:01:da:fb:99:99:a4:0c:
a2:70:9a:f9:c9:78:2c:9b:e7:81:0f:b1:c9:11:22:1d:98:bf:
87:34:58:31:62:e5:d7:37:4c:ce:0b:e2:b7:40:3b:c2:e8:59:
0e:98:41:c3:a6:2b:07:6f:89:3c:3d:f4:cc:a9:31:b4:e9:72:
d2:f8:3f:73:89:97:64:fe:ce:aa:c8:cf:55:86:fa:52:78:46:
e0:9b:ff:f4:e1:78:ce:5a:59:d7:91:21:8d:bd:21:ff:63:14:
80:7c:58:ad:9d:10:d2:3a:d6:02:b7:d6:49:42:8c:67:29:b2:
9c:d1:1a:63:e8:cf:18:06:18:ae:eb:dd:b1:2c:52:c4:92:3d:
60:02:70:65:ca:74:b4:5b:77:cb:7b:53:f5:cd:d9:93:7b:12:
e9:21:98:f7:aa:d4:32:62:07:59:ed:7e:59:83:5b:e9:f2:87:
68:ca:e8:72:55:81:4d:35:80:d6:5e:5d:d6:0d:50:fb:9f:4d:
2e:2f:37:48:6b:c7:58:b7:46:a4:fd:f0:fc:8e:1f:cc:4e:c0:
70:5f:a5:2c:d2:50:48:04:30:fb:fd:82:f2:0f:ae:9c:96:04:
35:02:a7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:52:13 2025 by rpki-client