Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3d4b8873-99c7-3779-be80-e7aec489c7ba.roa
File: 3d4b8873-99c7-3779-be80-e7aec489c7ba.roa (raw, json)
Hash identifier: 0Ri86Ki34pyWrthM5U9pQZl0rzRbrYiRLBrdslc7Kmw=
Subject key identifier: 5F:E0:42:57:CE:A7:82:43:59:BF:C3:93:74:65:CD:40:33:27:15:D4
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858489123551A83984DA147A6AB80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3d4b8873-99c7-3779-be80-e7aec489c7ba.roa
Signing time: Thu 16 Jan 2025 19:50:17 +0000
ROA not before: Thu 16 Jan 2025 19:50:17 +0000
ROA not after: Wed 16 Apr 2025 18:50:17 +0000
asID: 22652
IP address blocks: 173.231.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:23:55:1a:83:98:4d:a1:47:a6:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 16 19:50:17 2025 GMT
Not After : Apr 16 18:50:17 2025 GMT
Subject: CN=ae782a08-04ec-4b58-8fa4-8d50dd60ad67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:39:a8:6a:30:f7:12:9c:c5:04:49:58:94:
1b:05:ef:54:b5:35:7e:a9:0d:16:56:ee:f5:0c:43:
5f:8f:bf:c2:19:88:6a:04:99:e9:50:ef:8f:a0:62:
35:aa:08:94:fb:6c:84:40:6e:57:19:99:8f:8e:eb:
74:df:e5:85:60:64:45:2c:11:d6:2d:27:74:16:82:
6c:5e:1b:f9:85:f2:ca:c8:fa:9d:67:7c:cf:5b:07:
af:b6:81:d0:59:57:a6:aa:9f:9a:bf:9d:46:e9:91:
ce:29:04:6b:db:32:73:ec:9f:b2:93:9a:21:9d:b8:
ea:7f:a0:26:a9:00:1f:66:dd:33:e1:db:60:42:6b:
14:56:79:bb:e7:45:38:1b:02:76:24:45:ea:22:40:
ec:37:af:dd:e0:ad:6c:4a:1b:7f:18:23:09:69:29:
24:16:b8:0a:66:72:c9:f1:13:83:c6:36:fd:41:7b:
35:62:5e:ff:79:a2:23:2c:ae:cb:bc:98:74:49:85:
2b:96:af:e5:52:ec:c8:11:33:1a:04:6e:0f:9c:5a:
c0:40:1c:52:fb:bd:aa:be:89:13:62:2e:74:75:fa:
a8:b7:bd:f5:55:68:d6:48:a0:eb:4b:11:73:d2:14:
fe:93:8e:86:73:23:fb:15:80:c3:ca:0d:3a:52:43:
17:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E0:42:57:CE:A7:82:43:59:BF:C3:93:74:65:CD:40:33:27:15:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/3d4b8873-99c7-3779-be80-e7aec489c7ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
173.231.126.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:76:9d:e2:b9:cf:ad:f7:62:49:63:86:d8:42:89:30:3e:0b:
3a:fb:cc:ac:7e:c6:f0:8f:dc:60:c8:8d:aa:3a:24:14:7d:50:
1d:71:29:16:d2:6a:1c:43:95:49:cf:9c:18:c1:8f:03:0d:35:
09:9a:63:0e:ae:f9:2b:75:ed:1e:43:07:06:55:94:19:70:1e:
c3:aa:1e:e2:1a:d7:ea:13:04:dd:b6:72:c3:56:f6:c8:93:33:
8e:17:ca:5a:13:07:b2:9c:89:d1:d4:cd:12:a7:d7:b5:c3:58:
81:ab:15:ff:02:09:6f:31:97:27:b6:6b:59:6e:08:de:a7:b1:
bf:e3:50:06:8d:83:04:0f:61:67:c8:a9:80:1d:bd:1b:73:14:
96:d8:76:0c:11:a2:c6:2f:71:15:8a:cf:f6:7c:32:6f:19:f0:
fb:d5:48:a9:3a:eb:36:64:42:a5:ea:18:26:b1:c5:07:73:fd:
b2:fd:e9:7a:fb:ac:81:2f:52:3e:07:c0:3f:9a:20:51:7e:dc:
63:52:22:d8:69:84:61:a5:00:a8:f0:52:9a:68:7d:cc:6d:64:
97:9d:10:9e:ba:6f:8a:85:2c:7e:4d:5f:8b:88:f6:36:ef:ae:
44:6e:e1:8f:57:bd:13:78:dd:ae:b3:ec:8f:57:31:7c:d7:c4:
c2:ce:f1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:32 2025 by rpki-client