Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1727f647-99fb-3b37-a9d4-671cb5ae75cb.roa
File: 1727f647-99fb-3b37-a9d4-671cb5ae75cb.roa (raw, json)
Hash identifier: OJY8j/Rxa3F3dF8/Ioj7E8/O7EzLxNXYB9mEnGDyaCE=
Subject key identifier: DB:4F:3B:E2:18:DB:AF:CE:AB:36:36:FD:E8:64:9B:F7:8D:EF:D5:91
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F43285848E9CBF278A1DEA9ABAC6EEA40
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1727f647-99fb-3b37-a9d4-671cb5ae75cb.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 5511
IP address blocks: 172.102.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:f2:78:a1:de:a9:ab:ac:6e:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=a587f3c7-656e-4cb9-84ba-8a67a85ca2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:a7:02:0d:10:d8:68:e4:22:77:59:04:c8:
05:3f:21:e4:e7:2e:04:ba:e0:1f:e2:ca:64:34:83:
ee:6c:94:bb:ef:e1:ad:59:a6:d4:f9:b4:01:ea:89:
a1:63:6a:18:ec:bc:92:e3:41:a6:bd:c2:cc:1c:c7:
2a:7c:d8:f4:09:7b:e7:a1:fc:02:df:17:6b:99:26:
29:de:bc:d9:3f:11:f6:14:d3:f6:98:93:f9:fc:28:
8f:a4:90:fa:b6:00:a4:3e:06:64:4c:79:44:b6:6d:
34:44:da:d4:a2:85:07:d1:a0:b5:87:f4:85:0e:ef:
55:bd:50:25:65:6f:6a:9b:c3:4c:10:43:c0:82:24:
70:04:34:11:d3:cd:27:4d:a8:9a:ad:71:eb:37:56:
a8:5b:4a:96:06:4c:cf:2c:dd:8b:52:c2:3f:12:37:
3a:f9:b2:b1:61:d4:2f:51:ac:ee:85:ef:84:84:6b:
b7:6e:c8:81:5a:03:90:76:6d:20:ef:b5:43:32:b2:
f6:ce:19:2d:e5:df:ab:6c:19:34:bc:10:4b:f4:78:
4e:8b:f8:f6:c4:fc:56:42:29:2e:c8:d8:19:b1:03:
a1:f0:b8:5f:de:a3:c4:69:9c:86:bb:aa:33:a2:2f:
77:20:01:10:f3:2a:29:76:ed:90:d3:99:e2:f7:d4:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4F:3B:E2:18:DB:AF:CE:AB:36:36:FD:E8:64:9B:F7:8D:EF:D5:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1727f647-99fb-3b37-a9d4-671cb5ae75cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
172.102.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:cb:ca:82:97:73:74:aa:82:d1:4f:06:9f:f4:fe:5b:87:96:
a0:03:ec:64:1c:61:dd:d3:90:6a:83:35:81:13:fc:42:52:e5:
f1:f3:93:1c:67:80:f0:c3:d6:80:d4:d9:7a:a3:52:8e:59:dd:
cb:6e:24:72:37:c6:4c:67:9c:d9:e5:6e:6b:d4:98:12:4f:ec:
ad:7c:76:55:12:26:65:c6:37:d8:9a:1b:6d:cf:e0:8a:3e:a6:
14:e8:2e:01:7a:76:ae:e7:f2:b0:02:b7:ca:ca:5d:01:89:02:
fa:a5:10:5d:dc:a0:7a:af:d5:91:01:6a:8a:68:6e:b5:5b:07:
a2:e3:47:2d:1c:f3:c1:b2:38:d7:1d:bb:03:e2:01:9b:79:31:
37:a4:a0:38:df:93:55:1c:ab:e9:a6:f0:66:40:a0:0c:62:c4:
95:41:85:d2:68:7c:67:44:ef:39:83:ff:66:fe:2c:6c:64:90:
09:49:29:7c:df:31:b8:e0:53:72:16:85:a5:b6:23:b4:65:7a:
4b:26:f7:a1:f2:24:af:db:8b:0e:57:02:1c:b9:b0:a3:32:d8:
6f:8f:a8:c2:f2:ef:a6:45:cf:c8:4d:18:4a:99:be:c5:ca:d3:
51:77:76:e8:60:91:c5:27:ed:c0:28:b4:d3:ee:25:2a:eb:b2:
c8:f9:ef:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:53 2025 by rpki-client