Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0569c218-bdee-3e98-84c8-c75d4d681486.roa
File: 0569c218-bdee-3e98-84c8-c75d4d681486.roa (raw, json)
Hash identifier: vxY4s8MLyX/i6RaUyyguSkZxHaInxbfZ4kt1LCGoMqc=
Subject key identifier: B1:35:A3:22:81:7A:A0:48:D0:DE:9C:5F:3E:ED:76:31:09:F2:7B:A7
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F4328584888EEF7305F745AE091475DC0
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0569c218-bdee-3e98-84c8-c75d4d681486.roa
Signing time: Mon 13 Jan 2025 21:18:19 +0000
ROA not before: Mon 13 Jan 2025 21:18:19 +0000
ROA not after: Sun 13 Apr 2025 20:18:19 +0000
asID: 5769
IP address blocks: 173.224.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:ee:f7:30:5f:74:5a:e0:91:47:5d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 13 21:18:19 2025 GMT
Not After : Apr 13 20:18:19 2025 GMT
Subject: CN=190d1c87-e24e-4d9e-a6fd-7fa1d26d8ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9f:5f:1a:68:ad:9f:11:2e:ec:a3:68:44:09:
17:21:3c:b7:99:86:7b:ba:b8:88:a4:aa:e9:72:ef:
30:05:a1:1c:70:28:e1:79:d2:09:cf:94:b0:a5:9a:
84:c7:7b:32:bb:78:ad:b1:01:ec:bd:a4:5c:64:23:
2f:5f:5f:78:b5:ff:7c:f4:70:77:05:98:fc:f4:98:
eb:a6:ec:fe:90:15:80:c4:1e:6d:9c:be:83:0c:e9:
8c:0e:4a:19:76:92:8c:0a:a1:e5:40:08:b0:95:2d:
a4:c8:c6:b9:0c:01:7a:92:a1:0d:a4:7e:dc:d1:8f:
35:ab:f5:a8:40:cb:8a:e8:94:dc:07:d6:35:e9:23:
11:c9:80:25:d6:f2:c3:bf:66:28:76:56:5e:4f:fd:
e7:85:1a:24:69:4f:f6:b2:ec:29:81:19:3a:45:ea:
69:09:67:9e:76:71:37:ed:41:c5:25:0d:db:97:b1:
50:b8:68:b4:30:4e:08:be:5a:a0:c6:9b:eb:5c:cb:
1e:c6:cd:3d:1b:61:ff:0d:c4:88:bc:9f:ae:63:97:
9d:b0:db:39:11:0a:34:b5:26:87:95:5b:7d:de:00:
2b:cb:2e:0d:be:df:94:56:d9:dd:86:27:27:f2:c6:
84:f0:71:f6:05:44:49:55:af:cb:5a:46:cb:8a:b3:
61:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:35:A3:22:81:7A:A0:48:D0:DE:9C:5F:3E:ED:76:31:09:F2:7B:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0569c218-bdee-3e98-84c8-c75d4d681486.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
173.224.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:9f:92:67:bf:3f:0f:ba:37:d9:88:98:20:56:c8:1c:b6:7e:
c4:42:ec:e7:93:af:79:09:89:05:5f:29:88:62:5b:dd:eb:dd:
ed:e5:6f:95:22:e7:35:29:1e:08:b0:37:61:9e:5c:cd:7f:2e:
5e:e3:cc:8f:d0:29:fe:ea:39:c3:01:1d:bf:e9:ed:62:19:d4:
44:a3:d4:63:7b:73:fc:20:30:93:fb:d0:f5:08:67:c3:a6:b0:
9a:d5:3c:ca:d8:b8:e3:8c:cc:bc:af:eb:2e:a6:d3:e6:57:fd:
82:f4:08:3f:2b:66:50:2f:f6:ac:44:a7:21:fa:67:be:29:fe:
01:9e:39:d2:cd:73:fb:e4:b4:01:ce:e8:ca:a5:a5:9c:b1:97:
0a:9d:d1:09:1b:a7:3d:21:32:29:70:76:02:cf:d4:04:2b:79:
2e:fc:9b:69:fb:17:b8:51:27:c2:c5:dc:e6:96:98:7c:b5:d2:
85:a6:0e:dd:b4:cb:e0:3a:8b:62:15:12:74:70:4c:0b:c7:d6:
ab:e9:3a:fd:5b:18:71:58:a8:11:1b:4f:dc:54:3d:a3:be:2d:
6e:3e:78:a5:e6:11:37:3a:aa:f8:f2:59:68:7a:2a:c1:bb:bd:
e1:c3:21:81:91:70:14:4a:10:6b:4b:7f:bd:35:e4:58:3d:36:
d1:3b:aa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:15 2025 by rpki-client