Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0c6f1e55-adb4-339c-a85f-5c7779443c43.roa
File: 0c6f1e55-adb4-339c-a85f-5c7779443c43.roa (raw, json)
Hash identifier: jNiIFoBXlLh+H2db5zNvip1o5DsP/lD0bQfGD1QhnsM=
Subject key identifier: B0:4E:C6:C0:52:EA:5C:9F:C1:27:87:67:47:F4:B1:DF:7B:0A:3D:5C
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584902EC1B5015DC7DE5372AEE80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0c6f1e55-adb4-339c-a85f-5c7779443c43.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 16696
IP address blocks: 174.34.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:1b:50:15:dc:7d:e5:37:2a:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=1ea7ef11-0226-4513-acc3-be06ca5b8901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cc:41:70:b6:03:f8:e3:2c:7b:5a:ad:c3:9d:
77:40:2a:03:70:e9:7b:00:b6:50:96:d9:c9:6d:d1:
d6:05:d8:31:e0:b9:c8:d4:32:d6:87:1b:2d:47:a7:
dd:ac:cc:3a:71:3b:c1:bd:c0:17:c1:5e:cb:21:2e:
53:a2:eb:0a:ef:2c:5b:93:57:8d:2a:ea:c9:9d:37:
02:69:50:b0:f2:a7:94:21:c2:c8:e9:c9:1a:3c:6b:
aa:3b:40:84:42:53:11:b9:92:0f:7b:ba:ab:d3:65:
12:e8:37:37:34:e1:f8:81:e4:3d:dd:3a:1d:8d:dc:
83:82:3c:7b:84:ba:6a:c2:8d:c2:1e:94:49:7d:c5:
68:45:81:18:5a:c0:fc:eb:83:f2:e8:01:9d:e0:5e:
ee:e8:4e:c2:2e:f3:c5:f1:e3:f6:1f:82:39:ba:f3:
b5:b3:c7:c2:c8:bf:0c:e3:62:8c:6d:54:2a:9e:4b:
15:6a:c5:e0:8d:83:fb:25:b0:8f:ae:72:15:ef:e7:
b1:9b:fe:ef:48:d0:bf:48:e7:04:15:6d:66:dd:cc:
96:e2:94:9a:6a:85:52:bc:76:64:f7:2f:ca:cc:3a:
64:92:ea:69:ef:9c:2b:f0:dd:28:20:a3:df:88:ba:
56:c4:c0:df:83:93:19:bf:2d:52:e2:8c:4f:37:74:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4E:C6:C0:52:EA:5C:9F:C1:27:87:67:47:F4:B1:DF:7B:0A:3D:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0c6f1e55-adb4-339c-a85f-5c7779443c43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
174.34.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:6b:9c:64:a4:a7:a0:2d:49:db:9d:b4:6b:01:2b:65:23:42:
f4:ae:55:84:ad:a5:6d:ee:75:4e:43:0a:b6:7a:d2:23:52:d5:
94:2b:76:ec:82:e7:d1:b0:d1:3f:f6:26:cf:be:c5:c6:59:96:
8e:c2:01:be:25:f0:0c:3e:2f:8d:e1:02:44:08:48:d9:bf:b2:
bc:5a:fd:ec:03:8d:3e:e2:0b:39:60:d0:d3:ae:b7:ce:59:bd:
c2:b5:c8:3f:d4:53:e6:5a:63:e7:3e:e5:e8:93:a1:72:09:14:
8a:15:b9:ec:10:1c:69:0f:ce:db:08:ee:a7:19:2d:07:b9:35:
79:e4:5f:9e:c7:7d:a1:e2:98:a6:c1:87:14:80:1b:0e:5d:71:
88:d7:93:28:0e:53:31:1a:51:53:e2:b7:fb:ef:76:ab:0b:a9:
3a:5a:3c:d7:8b:ed:17:a4:81:10:eb:43:b3:37:ef:02:03:51:
56:21:b8:de:0d:45:f8:23:93:5e:b1:d2:8d:bf:c3:06:97:29:
cd:63:13:d3:98:31:6c:42:45:44:df:99:66:31:ad:f7:d3:18:
14:6a:33:71:00:a4:80:7d:32:64:5b:97:ec:61:fc:a4:b1:86:
fc:37:18:68:19:9d:00:71:dd:54:67:d0:5a:4d:99:cb:4a:12:
97:96:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:42 2025 by rpki-client