Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa
File: c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa (raw, json)
Hash identifier: swpuapsZiTampM7nvJKO4Yo7Ovr5IkoG609jEqQ+e0c=
Subject key identifier: 17:D9:B4:E3:6F:9C:6E:DB:54:8E:55:B1:E6:5E:F7:4E:41:8E:29:90
Certificate issuer: /CN=b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a
Certificate serial: 010D0C9F43285849287E648D84E363A147DFE4A8
Authority key identifier: 17:C7:42:F1:4F:6E:98:39:C0:8E:99:BB:AB:53:4B:F0:27:8C:9F:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa
Signing time: Wed 12 Mar 2025 01:00:39 +0000
ROA not before: Wed 12 Mar 2025 01:00:39 +0000
ROA not after: Tue 10 Jun 2025 01:00:39 +0000
asID: 400295
IP address blocks: 174.136.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:28:7e:64:8d:84:e3:63:a1:47:df:e4:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a
Validity
Not Before: Mar 12 01:00:39 2025 GMT
Not After : Jun 10 01:00:39 2025 GMT
Subject: CN=f5704216-7095-4644-8647-b5c53f7fefd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:1b:d8:8d:26:f3:86:4c:f7:af:6a:09:8c:
77:9e:14:da:22:84:32:c8:ec:78:35:6c:8e:0e:02:
44:88:53:50:36:11:9a:c0:44:45:18:6f:5f:92:7e:
b7:b0:b2:4d:73:60:0a:87:35:94:89:f9:28:38:ab:
49:29:ad:c2:fd:ae:d0:3f:97:08:c5:6d:d0:4c:09:
41:0d:09:cd:60:6d:cf:29:c5:04:e6:7d:43:62:4b:
b1:1a:23:0c:61:26:c6:3f:7c:1e:79:23:d5:2c:9b:
97:bc:32:96:c7:50:37:8f:d5:27:c6:97:d7:c1:0f:
a0:e8:25:dd:0a:6a:22:16:31:8a:9e:62:07:b7:fc:
7b:06:14:2e:c5:c4:a6:8a:ca:7a:1c:09:95:69:5d:
6b:43:a0:57:04:ec:c4:21:4c:e5:fd:75:4e:f3:3d:
e4:5c:08:b2:8d:02:0d:b0:e7:47:68:d9:f7:c7:47:
d0:bd:8d:65:51:f7:09:51:37:c8:28:ad:e0:20:5e:
76:7b:bd:e0:d1:9f:b4:92:b6:b2:4e:d7:26:58:3e:
f5:a7:b8:e0:73:79:21:08:bc:71:60:54:93:ea:8e:
55:fd:81:8d:5c:5d:8e:92:e4:03:01:3b:1e:d4:86:
15:c2:b6:4d:94:8e:7f:5a:c5:06:0d:07:23:bc:64:
c6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D9:B4:E3:6F:9C:6E:DB:54:8E:55:B1:E6:5E:F7:4E:41:8E:29:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.crl
X509v3 Authority Key Identifier:
keyid:17:C7:42:F1:4F:6E:98:39:C0:8E:99:BB:AB:53:4B:F0:27:8C:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:51:c7:51:20:3a:2e:a1:e1:38:ad:b8:73:dc:6e:97:5e:87:
f0:08:79:5e:92:a1:7e:6e:91:7c:51:3e:93:9e:b3:8d:bb:34:
9f:f5:52:6b:b5:6b:44:c5:4f:7f:d7:8a:a2:9e:d5:bf:04:ac:
29:52:a5:87:89:c6:9d:12:03:0e:0c:13:12:f9:44:95:fc:30:
40:a4:e2:19:0a:7c:49:8e:6c:d5:66:49:04:76:c7:cb:d7:dd:
18:bc:05:1e:59:5c:4a:17:a6:d3:df:79:28:2c:9b:ee:3b:5a:
2f:70:1a:c0:d2:de:d0:fd:f4:06:ce:3f:17:c8:95:93:e5:db:
21:fc:6f:2e:81:75:d3:df:23:01:4e:4f:39:df:0f:02:35:f2:
9a:0b:b8:64:90:50:0d:c9:db:c5:ca:5d:0a:fc:de:f0:22:c0:
a0:93:51:77:d6:19:b7:f6:8c:29:75:7e:8c:4f:04:a0:06:bc:
ff:21:df:a4:0f:d0:25:e2:f2:63:00:af:1e:03:70:2b:3a:f2:
08:32:60:c0:ed:4b:a4:bd:2a:51:e7:d0:f1:07:3e:e4:6e:76:
8c:ab:9c:cb:7d:fe:22:e7:4e:f5:57:dd:e0:7c:da:28:59:2e:
f0:b5:2b:68:d5:a1:00:08:ae:43:c4:54:26:0f:af:cc:21:e2:
08:89:84:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:45:14 2025 by rpki-client