Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/c9a28bc8-af63-388a-8f85-9abd55015548.roa
File: c9a28bc8-af63-388a-8f85-9abd55015548.roa (raw, json)
Hash identifier: NAl1tdwKvCu9ztkU5gJVy8FcyNYy5/QIu0UtP55ZkWQ=
Subject key identifier: 6A:37:DC:15:56:31:64:3C:CF:72:1B:F6:63:BB:C4:0A:1F:60:A8:BC
Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial: 010D0C9F43285848D7A65226514EC7FA8E026480
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/c9a28bc8-af63-388a-8f85-9abd55015548.roa
Signing time: Tue 11 Feb 2025 02:00:39 +0000
ROA not before: Tue 11 Feb 2025 02:00:39 +0000
ROA not after: Mon 12 May 2025 01:00:39 +0000
asID: 40934
IP address blocks: 208.91.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d7:a6:52:26:51:4e:c7:fa:8e:02:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
Validity
Not Before: Feb 11 02:00:39 2025 GMT
Not After : May 12 01:00:39 2025 GMT
Subject: CN=02694a9b-81e6-4d63-9201-fc9d38d038bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:57:45:17:62:56:b0:50:7a:4e:0b:3a:ba:
5b:9a:7d:c2:34:8e:10:58:5b:31:dc:01:08:a0:80:
9b:11:5b:c4:7d:7f:fe:b1:73:63:bc:90:6f:1f:b8:
1a:b5:35:21:57:71:7a:8a:0c:b7:64:59:46:c6:e3:
84:79:f0:85:c0:25:72:cc:15:a5:14:82:29:c2:24:
5f:b3:b2:72:ef:f6:08:80:d7:68:eb:3d:97:d6:d0:
60:c8:ec:51:ae:8d:53:e2:a3:4a:5b:5f:89:2a:4b:
13:63:4c:84:79:58:c8:95:5e:e3:0d:55:f0:9a:80:
0c:2c:76:3b:99:42:13:28:84:df:f2:13:3f:07:8a:
a7:ed:36:94:6e:ac:72:91:e4:61:dd:31:c6:0b:2b:
f0:eb:90:19:11:2e:94:ab:19:24:e9:e3:16:d1:83:
7b:83:6b:3f:63:b4:86:db:9b:20:6b:e1:45:a5:c0:
2b:b3:58:8b:4e:a3:79:5a:7a:20:cd:1f:60:c3:70:
95:0c:34:8e:20:43:93:7b:85:e2:0b:f5:ae:7f:6d:
d4:92:9d:e3:a1:ff:1b:97:0a:8f:41:45:34:70:89:
ad:26:4d:f4:44:86:76:46:07:c8:8d:5e:3f:c6:43:
3a:a7:db:8a:44:14:0d:19:42:a7:98:2f:08:11:d0:
2f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:37:DC:15:56:31:64:3C:CF:72:1B:F6:63:BB:C4:0A:1F:60:A8:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/c9a28bc8-af63-388a-8f85-9abd55015548.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
X509v3 Authority Key Identifier:
keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
sbgp-ipAddrBlock: critical
IPv4:
208.91.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:e9:9a:41:b4:c3:00:43:6a:3e:99:73:f0:cd:a6:2a:dd:9d:
26:f9:b8:a7:b2:01:2e:3c:b4:03:6c:4d:11:dc:fc:33:21:da:
32:0f:0f:a1:27:7e:94:fc:5b:38:9f:9b:01:aa:6e:3a:87:ef:
c9:bb:d2:44:20:6e:29:46:2f:38:46:0d:48:b4:e3:4d:b9:87:
69:2d:98:6f:bc:be:a0:6a:3e:06:bf:79:c2:68:39:03:b7:00:
f8:07:da:15:6d:8f:7b:d5:c5:17:09:2b:47:3d:34:a0:41:50:
4b:7d:d5:5e:99:93:ee:9d:94:fe:05:a9:30:89:00:91:16:3e:
ab:11:a2:24:39:51:44:09:f1:7e:e3:05:f6:1e:28:5c:85:21:
52:6e:d6:aa:e0:53:61:8b:d4:40:6f:6e:ef:f4:c9:60:88:45:
58:f9:d7:5c:d1:6e:7d:3a:a1:88:23:b8:92:2a:a2:6d:88:5f:
e3:fe:16:7d:5a:62:cc:7c:10:e9:5a:7f:51:1e:5c:52:6c:b9:
b4:a8:aa:06:a6:ab:bf:b9:1d:19:dd:9f:37:49:ce:76:a2:03:
9a:f6:83:37:4c:85:1b:76:b0:46:e2:85:b4:27:30:e5:89:cb:
f0:ab:3e:9c:d8:95:a4:21:ef:c8:1c:7e:d8:a1:97:db:e1:1d:
25:7e:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:24:56 2025 by rpki-client