Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa
File: 6004ad98-6f8b-32da-a595-914020a7855c.roa (raw, json)
Hash identifier: Q1eZjoH4Mwj+Ux8DZhzNXHGXC5nyasn6ttphYbEdii8=
Subject key identifier: 7F:CC:CE:75:9A:A9:F6:0A:A5:59:93:EF:B6:28:F9:FF:9B:58:67:FA
Certificate issuer: /CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Certificate serial: 010D0C9F432858485B6AF28C1E2523C877A825C0
Authority key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa
Signing time: Sat 28 Dec 2024 14:00:52 +0000
ROA not before: Sat 28 Dec 2024 14:00:52 +0000
ROA not after: Fri 28 Mar 2025 13:00:52 +0000
asID: 14500
IP address blocks: 173.244.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5b:6a:f2:8c:1e:25:23:c8:77:a8:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afc9c4c7-de4a-4066-870e-383d770d6d47
Validity
Not Before: Dec 28 14:00:52 2024 GMT
Not After : Mar 28 13:00:52 2025 GMT
Subject: CN=2f17e94e-c8a0-4a6c-a3db-b600cbfed98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:19:ac:a6:42:86:f0:13:12:e6:bd:50:ac:
20:0b:19:c6:18:2a:20:e7:26:32:37:a7:47:15:66:
a0:df:1d:bf:cb:8c:6d:86:34:34:5a:28:3e:54:1b:
c9:ed:fa:4b:a2:46:9b:7e:79:04:d5:61:b2:27:b6:
5a:5a:93:bb:8c:25:d1:46:44:12:74:16:ed:29:31:
fe:0e:35:04:92:0b:da:31:7c:df:d9:09:1e:f9:14:
24:7b:33:22:58:fa:32:5d:1c:d3:3a:f6:cf:b1:c2:
5b:a1:c8:f3:78:4d:3d:4f:20:af:d7:c5:9c:15:e5:
69:f7:c1:d8:d3:ad:89:46:f0:cd:53:d5:36:a3:64:
d3:47:5d:3d:65:19:ca:03:aa:01:77:a6:35:b1:ee:
52:20:98:cf:9e:7a:3d:1d:45:6d:e8:e3:61:97:4c:
bc:f2:28:4a:84:8d:aa:33:d4:3f:f5:3e:b9:4b:35:
dd:67:fe:33:77:21:c4:82:93:ca:4a:ff:23:d0:67:
3c:0d:99:37:6e:7b:f6:bc:98:94:9a:a3:3d:eb:27:
fe:b8:d3:3d:b3:31:45:30:be:1a:fe:88:00:af:b2:
32:20:94:5b:89:03:a5:6a:c4:74:e4:35:17:2e:05:
fc:04:61:3f:7c:80:33:22:1d:b0:e8:89:0c:30:04:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CC:CE:75:9A:A9:F6:0A:A5:59:93:EF:B6:28:F9:FF:9B:58:67:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/6004ad98-6f8b-32da-a595-914020a7855c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.crl
X509v3 Authority Key Identifier:
keyid:5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer
sbgp-ipAddrBlock: critical
IPv4:
173.244.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:c7:f2:84:20:14:82:9b:9d:a0:f9:fc:39:16:96:8c:5a:5d:
a9:97:bb:af:d1:61:71:3b:16:d7:53:71:8d:9f:0b:82:3b:18:
28:84:56:fd:39:1d:e4:f0:dd:bc:ed:c3:35:b8:50:9e:dc:61:
b0:b2:dd:b8:0a:3b:f7:b9:fa:eb:47:3a:bc:ec:1a:22:59:85:
48:46:2f:5b:d6:8b:8a:3b:38:95:d2:aa:20:6d:f7:df:90:58:
eb:a9:d6:e0:43:d1:26:53:43:6b:cc:f3:8f:82:bd:c9:50:f4:
29:58:97:dd:a5:32:8a:d4:3e:82:19:7b:03:2e:bd:93:dc:94:
88:b8:97:02:b8:fe:c8:c5:99:25:98:20:fc:03:cd:33:e9:2f:
fa:85:60:c7:02:a9:7a:d6:18:43:a0:d4:16:ef:45:3c:88:d9:
10:13:0e:e3:60:a4:ef:0d:bf:c7:59:15:17:ac:65:96:52:42:
2a:ad:12:22:f4:7f:3d:3b:f0:c9:73:0e:eb:50:78:f7:85:52:
20:5e:24:01:02:50:24:ce:1d:e1:bb:d6:48:1e:6e:77:ad:ef:
b7:60:2a:db:e7:15:47:cc:04:b7:6c:b6:e4:7d:27:5e:64:32:
3b:c7:26:ef:13:e0:a9:f1:8e:4e:1c:cc:f8:5c:3d:d4:01:9c:
d2:f8:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:09:18 2025 by rpki-client