Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/1a1e9bb8-241c-3d74-8541-4fa190680d9e.roa
File: 1a1e9bb8-241c-3d74-8541-4fa190680d9e.roa (raw, json)
Hash identifier: ewAw4aVmz0pp9dOK83RdQtfyAaLG7onx63xHg+Yjc4k=
Subject key identifier: 1C:3B:73:00:0F:F1:87:66:A2:04:80:69:AC:4E:E8:3C:C5:20:2A:CB
Certificate issuer: /CN=69233f52-8a17-4eb0-ae6a-62c861686718
Certificate serial: 010D0C9F432858482EC00BBCCC4B7CD4978E6C00
Authority key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/1a1e9bb8-241c-3d74-8541-4fa190680d9e.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 174
IP address blocks: 167.253.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:0b:bc:cc:4b:7c:d4:97:8e:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69233f52-8a17-4eb0-ae6a-62c861686718
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=f37f52a3-22f8-46fd-bd72-52c32cd4a00e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:ac:4a:5c:ac:80:23:c9:7b:3d:25:7b:fa:
37:60:80:4e:55:37:ad:cc:b2:80:81:58:aa:f6:09:
a7:d5:a4:c0:01:69:12:e5:a0:af:2b:8e:5f:6d:dc:
2b:ad:e5:61:6a:2f:b4:46:3f:20:5a:eb:d3:7e:bf:
e7:20:db:12:83:52:20:63:73:31:0a:37:f1:f6:a6:
81:5d:7f:8d:96:7e:0e:3e:27:62:72:4a:84:45:93:
a6:fb:4d:6d:68:60:1e:d1:b8:66:20:03:30:10:10:
ca:84:b0:37:a9:be:ba:ab:1f:f7:73:3c:5a:97:dc:
b2:d2:bc:8e:e0:af:21:8f:6e:58:4e:d7:59:58:41:
9d:e9:e4:be:b2:8e:aa:1c:83:9f:c1:6a:f8:30:4e:
12:89:1a:2b:57:ce:6b:b0:07:76:0d:b5:26:1b:ee:
6b:e0:57:91:dc:03:eb:71:41:f0:9d:3b:95:9a:91:
0e:da:de:62:a1:90:d0:63:d0:05:4e:52:3c:11:3e:
26:73:9d:38:cc:bb:bf:d5:f0:c2:1e:19:4f:20:2f:
b6:73:88:75:2a:69:1b:04:18:75:7e:6f:6a:f5:02:
c1:c2:a8:be:94:11:b9:b6:06:b8:d5:3b:c5:83:28:
ba:a1:6e:4e:87:73:fc:9b:f7:be:04:2a:b5:22:2a:
80:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3B:73:00:0F:F1:87:66:A2:04:80:69:AC:4E:E8:3C:C5:20:2A:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/1a1e9bb8-241c-3d74-8541-4fa190680d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl
X509v3 Authority Key Identifier:
keyid:79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:26:a0:aa:d6:5d:a0:d0:f2:85:45:c7:b5:72:39:4a:11:e0:
96:08:3d:78:b1:e6:66:2a:f0:34:06:e7:ba:06:e9:f3:f5:68:
b8:01:d5:44:43:97:fb:63:01:86:de:80:03:18:23:0d:bb:fd:
23:a1:9e:03:6d:de:af:37:17:b8:9d:1b:d8:88:5d:ed:1e:a0:
38:06:45:9e:63:d3:f5:df:07:3e:75:fb:42:dd:93:3f:b4:43:
10:4c:8a:04:c0:47:26:57:a7:10:f8:aa:69:a3:b8:49:6d:af:
72:9e:03:87:14:46:d1:b4:42:43:a8:08:a9:f6:72:47:9f:f3:
ea:d1:67:92:c6:f3:18:44:84:9e:4f:9f:1a:ee:5d:72:b8:b2:
1c:49:a2:3d:ff:2a:4d:6a:e1:ad:e5:94:5a:ef:75:b6:d7:49:
18:62:5c:7f:38:5c:86:78:46:8a:90:e2:39:5b:ff:87:ac:1e:
c9:fa:08:5b:a6:fb:f5:37:e9:23:49:8a:72:24:02:2c:6f:8d:
53:28:46:a5:6d:ad:28:1b:cf:c6:32:68:7d:bc:36:e0:46:15:
11:d8:5e:d2:ec:ce:0a:a0:b7:66:83:30:f5:be:11:6a:7d:49:
e5:a7:2f:f2:4b:1a:bc:f4:60:fb:b5:bb:8c:f5:07:fa:e8:bd:
cf:f4:46:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:10:31 2025 by rpki-client