Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa
File: 661e319d-f202-3bc1-bec8-797d7d57a136.roa (raw, json)
Hash identifier: qDqi6yiC93RJxC49OTQgT1rLzizP1EDuUHSmTbEbJ0A=
Subject key identifier: 31:8E:CD:F7:0F:34:15:8A:99:CF:95:98:74:75:5F:81:82:48:EB:07
Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial: 010D0C9F43285848E9CBD91341870BB392BCC080
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 62707
IP address blocks: 173.243.224.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:d9:13:41:87:0b:b3:92:bc:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=893cc6c2-93a1-4759-a3c9-609bf2fb7a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:00:9f:79:99:cf:1c:35:08:2c:31:c8:09:
be:aa:c1:9b:36:57:9d:59:fa:bf:ad:64:12:d9:64:
23:98:88:70:f3:f0:fc:97:37:62:9c:32:13:ae:a1:
01:3d:94:be:a4:47:77:91:3d:10:e8:be:66:50:53:
c6:fb:ba:ba:97:0f:72:94:13:1f:42:44:2c:8c:46:
02:e6:b0:55:24:9b:16:4a:e3:ac:34:84:de:69:5d:
38:bb:63:84:8b:ad:ff:c7:c5:3f:f1:fc:68:0e:8c:
5e:6b:53:55:5f:e6:b6:cc:73:44:ee:ef:fd:f4:b9:
a2:90:f6:3d:f9:1a:1a:9d:0f:a7:01:82:14:4b:ba:
ea:55:b6:02:30:bc:91:f1:c3:aa:fb:e9:f8:92:07:
ba:4f:ab:dd:b0:49:01:21:a7:1c:09:cc:ec:90:ca:
d8:62:fa:15:90:1a:38:b4:dd:cf:0d:33:25:08:85:
33:ab:b4:aa:e0:e5:43:04:49:33:83:29:32:37:8e:
27:70:cb:25:11:1a:dc:8d:71:89:57:3b:c3:3e:ab:
e3:36:75:13:dc:c8:2b:9b:2f:bc:44:f3:51:9a:d7:
aa:b6:eb:33:45:e0:b1:92:8d:ac:89:a6:8c:e5:b8:
78:84:80:b1:f9:23:ce:c6:71:11:1f:fc:2f:26:c7:
f4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8E:CD:F7:0F:34:15:8A:99:CF:95:98:74:75:5F:81:82:48:EB:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/661e319d-f202-3bc1-bec8-797d7d57a136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
X509v3 Authority Key Identifier:
keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
sbgp-ipAddrBlock: critical
IPv4:
173.243.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:12:27:e7:c1:67:ac:0d:a7:4b:12:d6:87:56:ac:eb:e8:46:
fc:14:0a:92:e5:ad:bd:0c:00:c4:17:2e:c6:1e:f5:e2:7c:9f:
af:23:6e:4f:51:de:bd:e0:c0:b5:ed:34:b6:86:28:83:41:e6:
cc:4f:cd:a2:87:83:47:af:1f:50:ce:92:60:4d:33:45:f5:43:
5c:69:3e:71:fa:d3:db:2e:71:6c:1b:63:f8:c2:a7:a9:96:6d:
5c:1a:f7:ba:dc:82:c1:3d:af:34:1a:ad:14:63:ad:3f:28:8d:
ca:3a:73:ef:e6:65:f0:1d:ca:0c:76:35:71:23:39:34:95:4b:
20:f3:31:d8:5a:d7:d8:d6:95:65:5c:f4:91:24:f2:1f:a4:bf:
47:b7:5b:86:f8:f8:52:8f:cf:47:40:d2:a9:1b:cd:d9:c5:7c:
96:47:a3:d8:c4:e4:56:f5:a0:a1:6b:dc:4a:31:be:3e:24:e7:
11:95:67:3b:41:d0:c0:72:7c:d3:93:3f:ce:49:b9:85:ae:7e:
01:c0:2d:9a:97:d3:d3:23:ea:18:8c:3f:46:0d:16:b5:24:85:
86:09:66:77:5a:66:70:e8:9a:89:19:d7:28:f2:a6:af:18:a2:
18:e9:30:e2:5e:1c:a8:99:f8:63:29:83:5b:5a:74:f8:84:cc:
9a:b6:2b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:31 2025 by rpki-client