Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/fb8d160a-93ca-33b4-ad3e-97bb7694c4ec.roa
File: fb8d160a-93ca-33b4-ad3e-97bb7694c4ec.roa (raw, json)
Hash identifier: k+EwLP1N37w2GqDDsXsmUnbfDVI9mjvnNuVASOOpjww=
Subject key identifier: 66:77:20:60:59:0C:3C:73:9F:77:D3:06:DF:1C:9A:4E:57:8E:46:8C
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F432858490E16C98E26FA76F541A3AC10
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/fb8d160a-93ca-33b4-ad3e-97bb7694c4ec.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 17051
IP address blocks: 24.157.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c9:8e:26:fa:76:f5:41:a3:ac:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=92840319-f6d4-4d7d-beb8-13a703779880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:b5:f4:b7:70:8b:0a:99:7c:94:df:d6:59:
42:1b:58:43:ce:8c:23:30:df:9e:4f:ef:b7:e6:46:
21:0d:9f:29:d0:b1:65:6c:30:dd:e4:c8:da:ec:9d:
c0:7c:76:5f:f3:1e:98:99:97:71:40:af:26:ab:ad:
9a:c3:8a:94:ad:d2:54:8b:e5:ba:dd:07:4e:a7:bc:
d3:0b:cf:67:f4:5c:5d:5b:e5:7a:f1:c5:c8:6a:33:
bb:71:7e:e1:eb:75:fa:4c:ec:6d:68:c3:ce:54:3f:
b9:32:68:88:ce:fd:27:3c:0f:7c:5f:ee:fc:56:ba:
84:36:14:79:1a:e2:cd:b1:7f:ab:5d:d2:68:08:be:
98:7e:1b:73:30:c5:32:61:59:bb:ef:5d:5f:af:83:
61:d0:11:a4:eb:0e:84:d8:e3:25:5b:76:d4:43:6a:
67:80:18:bb:bc:10:e5:93:83:29:70:6e:4e:4f:02:
30:4a:36:5b:61:b8:6c:e2:89:48:ba:8d:8e:32:dd:
c1:3f:54:88:45:70:4d:9b:40:f0:44:bc:11:fa:93:
d4:eb:7b:c7:84:d3:a3:6f:5a:e5:56:5f:21:be:b1:
21:4e:b1:9d:92:46:15:8e:52:42:be:e2:bf:55:98:
74:b8:0f:36:c5:64:47:c1:5f:92:1e:25:9d:99:0e:
e0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:77:20:60:59:0C:3C:73:9F:77:D3:06:DF:1C:9A:4E:57:8E:46:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/fb8d160a-93ca-33b4-ad3e-97bb7694c4ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
24.157.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:31:f2:e9:f7:e8:50:99:c6:4a:23:de:ad:9f:0f:aa:f9:46:
a6:a2:1a:78:0d:a5:ba:cb:fe:ca:d3:29:fb:a9:0a:9a:fa:bb:
c8:6e:f5:6e:1e:4a:5e:07:76:c9:70:79:a1:54:25:40:9e:09:
9e:35:b6:02:70:24:33:6a:8d:ca:95:98:75:12:c3:c3:8e:47:
75:a0:3a:b8:00:51:b6:20:25:c6:b2:a3:40:10:d5:68:f8:76:
93:52:4e:ce:a1:92:c8:23:23:50:d7:18:60:8c:b0:ca:78:ff:
33:f5:0a:6c:22:5c:b5:a4:30:c0:29:3f:70:99:71:c1:97:f2:
b0:45:8c:09:0c:5b:8c:eb:10:33:f3:d8:71:c4:b5:65:92:db:
e1:90:db:e0:56:ad:43:e5:91:4d:a4:ec:c5:d8:06:79:bb:1e:
ed:d9:21:e0:7d:b9:c6:9a:cc:dc:9b:53:27:8f:b8:cb:f1:d6:
bf:07:ce:21:80:41:26:cf:42:71:0f:96:b2:58:38:c4:01:c2:
a3:a3:4f:8b:d7:06:c0:ca:10:8e:97:89:f2:f7:69:d9:5b:f8:
05:3d:3c:d8:d5:a3:90:72:b5:d7:e2:72:6c:7b:c1:d1:7d:5e:
3c:8a:f9:aa:58:2f:8d:1f:81:7b:43:04:20:32:1c:c3:37:76:
21:d7:38:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:46 2025 by rpki-client