Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa
File: 5eda4636-65ba-33d9-aa37-2ae89912698e.roa (raw, json)
Hash identifier: Hxh4r2I7lni8Hqg0kP6xC5G3yrIW+Kw0GUtxaDJ+NH0=
Subject key identifier: C1:96:5B:38:08:09:DC:F7:3A:BD:64:0A:22:2D:55:8C:84:02:CE:58
Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial: 010D0C9F432858487755E0C47833EE6E42E21320
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 209242
IP address blocks: 170.176.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:e0:c4:78:33:ee:6e:42:e2:13:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=3922d5ff-0feb-488e-9e29-bbdb62485e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:f6:92:12:b6:20:c0:69:3c:00:5b:1d:87:
2e:2a:bb:f1:79:50:10:3d:d7:a1:21:53:44:1e:b3:
97:82:c0:58:ac:64:b4:0c:2d:3e:fe:7c:86:69:54:
69:c6:34:f0:e0:5d:48:ef:0f:7c:f6:ba:18:48:de:
00:23:d1:01:a8:4a:52:dd:71:05:63:e5:3a:55:ef:
b0:62:8f:f4:d5:1c:34:41:16:5f:43:63:ab:22:04:
7d:77:a5:fe:3f:d6:75:e6:ff:f3:e8:c1:26:a3:de:
d1:03:80:10:b0:f6:6f:bf:ec:27:3d:57:f1:ee:27:
87:7a:f8:eb:7f:0e:67:6e:69:f5:ff:55:cf:75:72:
d7:54:e0:35:a0:f8:91:23:29:d9:b1:8e:60:71:23:
33:99:ab:f2:51:6e:c7:c4:91:2d:78:69:16:5f:12:
d8:81:02:5f:ae:35:39:98:a0:ae:1e:a2:65:38:a2:
74:c3:75:6e:87:b7:e1:a5:79:b0:78:ef:b7:79:8d:
f8:47:08:c0:c2:dd:fb:6f:7d:cf:d3:8b:2e:8e:f0:
ff:f8:9e:a4:dc:85:20:e1:48:01:60:39:e0:64:72:
8c:8f:d0:32:f7:c1:bb:ac:f9:6a:8a:ec:02:9f:13:
22:76:88:80:6c:6f:4b:47:53:d1:5b:1b:15:26:20:
03:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:96:5B:38:08:09:DC:F7:3A:BD:64:0A:22:2D:55:8C:84:02:CE:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/5eda4636-65ba-33d9-aa37-2ae89912698e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
X509v3 Authority Key Identifier:
keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:f5:f7:d0:66:3b:c1:ed:fd:8e:f2:1a:98:e7:f1:38:f3:1f:
03:f8:fe:53:92:44:8f:b4:94:2f:ee:f7:e4:a4:9c:34:8f:34:
c9:65:da:3c:34:d8:1f:f1:e9:33:0c:33:cd:f5:fa:46:07:55:
47:59:5c:7e:40:4c:83:8e:1d:d0:ff:4d:b7:05:10:ac:a4:08:
3e:12:08:09:07:2e:83:c6:f2:6d:29:ca:ce:aa:e9:53:6c:41:
3d:8f:bf:66:54:45:23:20:2f:71:0b:87:f8:b3:97:f6:e1:b1:
91:63:3f:65:87:45:8d:99:76:25:8d:9e:c6:06:d5:8c:7e:59:
bd:24:cf:c6:08:23:c2:e5:18:2b:18:50:0f:4b:9c:33:ae:88:
f7:8c:0b:90:ef:59:e0:fe:60:fc:89:85:d4:b9:e8:53:ab:d5:
23:d3:a1:c2:2e:bf:26:4c:7b:53:51:ca:f0:ea:d2:2e:29:b6:
2a:25:a4:9d:43:d4:da:47:3d:55:5b:92:f2:87:88:1a:99:0e:
3a:70:24:a5:3d:c6:df:0b:ce:20:c8:e8:c2:b2:a7:06:92:7f:
9b:a8:f7:7c:d7:9a:b1:3a:d6:94:6c:52:1d:c9:bc:38:cd:9f:
45:8a:9f:82:80:8b:d7:34:4b:e8:fc:56:9e:12:78:bd:d5:09:
8a:80:01:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:52:13 2025 by rpki-client