Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1/177dc4dc-4c1b-3d43-adb6-6987e15b50fb.roa
File: 177dc4dc-4c1b-3d43-adb6-6987e15b50fb.roa (raw, json)
Hash identifier: VKtU4ZfRPEXTR+wO2lkf8Kb4YeZY530gXcu2e56I4us=
Subject key identifier: B9:B0:8A:53:22:1C:45:6B:BA:83:22:6A:91:94:2E:E1:FD:2C:10:76
Certificate issuer: /CN=a7b42c63-8674-4049-9866-cebbac1945e1
Certificate serial: 010D0C9F432858488815E957387526285CA36F80
Authority key identifier: 7C:C5:4D:DC:14:72:D5:D5:C0:0B:60:C6:A5:F5:65:90:1C:8A:E3:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1/177dc4dc-4c1b-3d43-adb6-6987e15b50fb.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 394040
IP address blocks: 204.126.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e9:57:38:75:26:28:5c:a3:6f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b42c63-8674-4049-9866-cebbac1945e1
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=2b0557d9-9dd3-41e3-b60a-d2e97ff2c8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c3:2f:44:3f:e4:e7:f4:b6:0c:11:99:32:28:
01:e2:80:7a:07:02:bf:2d:5b:76:67:12:f7:bd:35:
52:ca:9e:96:4d:27:c4:6d:a4:8f:a8:51:cc:19:c8:
a4:d2:16:2d:7f:bb:18:ef:cf:cb:55:a5:0a:d7:dc:
88:e3:22:06:59:58:42:a1:40:4f:5f:70:e5:47:78:
db:25:b3:bf:10:b5:c3:52:79:d1:f1:38:59:08:84:
75:db:68:29:51:5a:63:27:33:84:e2:d1:ae:64:0e:
5e:c9:df:0c:cf:78:67:dc:63:3c:01:0c:50:39:da:
fc:d8:0b:1e:10:56:26:b0:fb:19:8e:0a:f7:cd:1e:
0e:52:86:c0:f0:b2:6f:07:ed:ea:cc:9c:6a:88:f6:
e2:d6:53:b4:b3:15:c0:0d:5e:e5:e8:03:3d:03:b8:
01:9e:10:fb:30:7e:53:af:86:6b:b1:58:70:2a:01:
4f:a6:26:f4:a0:fa:4d:14:5d:59:6b:47:a0:97:d8:
da:e6:5d:6b:bf:45:98:e1:59:b8:69:83:18:73:02:
f3:de:54:28:88:ed:28:af:6f:e8:f8:64:7e:df:17:
61:cc:d8:1e:f7:67:5d:c1:ac:01:42:dd:59:b1:c4:
63:f6:47:e5:ae:24:70:50:62:a0:42:11:f2:75:80:
d4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B0:8A:53:22:1C:45:6B:BA:83:22:6A:91:94:2E:E1:FD:2C:10:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1/177dc4dc-4c1b-3d43-adb6-6987e15b50fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1/a7b42c63-8674-4049-9866-cebbac1945e1.crl
X509v3 Authority Key Identifier:
keyid:7C:C5:4D:DC:14:72:D5:D5:C0:0B:60:C6:A5:F5:65:90:1C:8A:E3:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7b42c63-8674-4049-9866-cebbac1945e1.cer
sbgp-ipAddrBlock: critical
IPv4:
204.126.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:7f:f9:eb:a2:f7:fe:ac:d7:93:5a:bb:72:e0:28:7f:17:f7:
b1:e8:6b:72:af:fa:76:88:e4:02:23:1c:7e:ad:09:c2:96:07:
18:21:e5:41:a7:54:c4:d8:41:1d:1e:94:f5:70:1a:bd:2f:d0:
8a:03:e5:69:d8:ad:87:0c:53:3d:cc:1e:61:61:c1:8c:dc:82:
67:ef:5a:62:05:4e:36:fe:54:a0:7e:f7:f2:5e:1d:0a:7a:b4:
17:c1:a8:b7:2c:e4:3b:77:85:a2:d9:27:b3:5d:7d:bc:cf:aa:
3c:dd:9f:b6:2e:9e:c5:3a:f4:80:74:78:8b:20:df:ba:3d:79:
90:c5:0b:f8:34:46:08:d5:96:78:ff:db:ef:fd:78:d9:aa:5d:
cc:3a:22:ae:75:8c:66:92:45:c7:6b:b5:ed:e1:13:e2:2a:0c:
f3:f1:d2:a2:56:a5:b1:b0:0f:46:df:aa:7b:49:91:58:bb:3d:
9e:d5:d5:23:2b:ed:c7:30:0a:cd:21:dc:39:c7:3e:fe:93:d2:
ec:e3:2b:cc:91:5c:b9:b5:7e:87:17:46:64:7f:fc:43:8a:a9:
e9:2b:c0:61:9a:7f:31:d7:5a:28:a4:d8:7d:53:80:60:f9:62:
0d:9b:8b:5e:44:62:9d:f7:d8:b7:1c:fb:fe:70:e8:81:9c:dc:
0d:42:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:24 2025 by rpki-client