Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/19061c41-5891-3f97-9d63-54bcf39601e6.roa
File: 19061c41-5891-3f97-9d63-54bcf39601e6.roa (raw, json)
Hash identifier: CsadIHm1TNIv9Z1FHQ7iFR1TUDm5Ckay3QyiE7ADhhU=
Subject key identifier: F8:EE:41:DF:60:20:87:CC:8F:7B:15:FB:82:D4:7F:2C:A7:63:7B:12
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F43285848CC57F9F126EA4BBA2AFC085E
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/19061c41-5891-3f97-9d63-54bcf39601e6.roa
Signing time: Fri 07 Feb 2025 00:49:03 +0000
ROA not before: Fri 07 Feb 2025 00:49:03 +0000
ROA not after: Wed 07 May 2025 23:49:03 +0000
asID: 8070
IP address blocks: 170.85.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:57:f9:f1:26:ea:4b:ba:2a:fc:08:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Feb 7 00:49:03 2025 GMT
Not After : May 7 23:49:03 2025 GMT
Subject: CN=9f885cdd-cc54-404b-aa13-2ae6f62ae08d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:c0:73:9e:8f:84:dc:f5:72:d2:83:91:fd:
ee:60:ef:7b:bf:9c:fe:de:6f:e4:2a:11:0b:c2:44:
1a:86:0e:7f:e5:91:98:08:00:66:ad:2c:6e:4c:c7:
31:c2:53:be:38:18:d6:b6:7e:ca:70:75:55:fe:dc:
a7:e9:3e:cc:ee:81:88:4d:47:0d:84:65:f8:e4:4e:
c8:4a:e6:59:1c:df:79:8f:e9:38:51:96:84:10:db:
fa:54:95:8d:b0:87:e1:9c:01:66:5d:39:a1:78:35:
95:38:0e:10:63:36:81:39:c2:28:8a:ed:ac:6f:1a:
42:d5:09:d4:01:c2:89:75:fe:d5:66:0e:2b:6c:dc:
c8:f6:6b:5c:ad:f6:e1:9e:f1:dc:1c:9a:4b:35:0f:
d0:23:40:ea:4c:11:be:ab:1a:41:74:37:fd:d5:26:
70:75:ea:d1:71:10:89:b1:13:b2:72:aa:17:08:64:
14:49:7d:b0:bd:33:28:45:c7:d3:fc:c2:5e:35:21:
00:af:1f:d1:96:3f:f7:0f:ba:27:41:de:4c:2c:43:
25:9e:01:7e:a7:64:26:46:d8:0a:73:e6:0a:7e:ba:
88:ba:42:b9:12:cc:7d:49:e8:9f:60:a5:13:64:52:
61:80:f2:85:bd:aa:ca:11:3d:ed:6e:de:f3:7e:16:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EE:41:DF:60:20:87:CC:8F:7B:15:FB:82:D4:7F:2C:A7:63:7B:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/19061c41-5891-3f97-9d63-54bcf39601e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:6d:68:5b:19:7b:40:34:86:2a:b7:35:2f:b2:31:fe:b1:41:
75:80:09:8c:e7:a3:b7:bc:3a:41:af:9e:65:0b:29:cd:e7:fd:
b1:33:d4:69:d3:ad:c2:67:36:0a:50:62:e6:58:8f:8e:ae:8b:
a0:48:39:b2:5f:9d:57:59:94:34:4a:57:95:df:1c:ae:49:66:
84:ad:7e:ba:c0:e8:f3:bd:91:a2:40:ff:43:9f:e1:8b:0a:b9:
ad:d6:67:87:df:a9:2e:ed:9b:f0:a9:74:f3:a6:fc:43:54:2b:
da:e4:df:6a:4c:58:b8:55:55:77:ad:76:62:a3:ca:d0:55:11:
1f:27:c2:b1:72:33:04:7a:8b:46:12:b9:cd:ef:63:d2:8c:69:
0b:e3:77:87:34:6b:ec:a3:1b:cb:49:ad:42:66:09:52:fd:5f:
a2:e1:15:cf:31:f8:ea:b2:d9:53:76:62:21:ef:24:29:4b:78:
61:de:d0:48:4b:11:67:b8:c5:3b:5f:4b:5d:83:44:79:20:1a:
d3:04:37:72:9b:e0:20:86:77:ab:8c:15:56:29:0b:b0:88:7d:
91:a1:d3:d6:71:59:81:7e:9c:e6:5e:a7:31:a3:58:60:a4:02:
f1:ff:f9:d3:4c:16:4e:4d:a2:ce:ed:6f:3e:e0:7f:1a:a4:88:
fe:0c:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:36:06 2025 by rpki-client