Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/4c5c95cb-9282-3a84-9dbb-c09e81a2dd54.roa
File: 4c5c95cb-9282-3a84-9dbb-c09e81a2dd54.roa (raw, json)
Hash identifier: yV3cHNFnqzFcEA2yDkEf2WD3TG6PD5i2Xs5bPtgQTPE=
Subject key identifier: 14:D9:6E:40:3F:5C:03:D8:47:44:7B:B2:0B:FD:01:02:F4:60:B0:8D
Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial: 010D0C9F4328584898D60F178E6409D508BCB480
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/4c5c95cb-9282-3a84-9dbb-c09e81a2dd54.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 399244
IP address blocks: 170.205.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:0f:17:8e:64:09:d5:08:bc:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=411ce670-5d9a-4b9c-abda-636c036415a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:2a:20:e4:c4:f1:af:39:d5:3c:99:76:ef:
35:f8:87:5e:12:a2:0b:e5:27:d9:91:98:98:18:83:
fe:cc:f0:b6:c7:f9:36:cf:32:94:18:a1:a3:c5:e3:
ec:3e:31:1c:99:49:1f:01:3f:18:02:dc:ec:64:32:
3e:19:dc:c9:89:ab:b4:ad:de:e5:66:fd:ad:77:60:
b7:49:eb:18:50:3e:d8:47:4f:cb:3a:bc:96:fc:70:
19:c7:9a:a3:8a:e8:6d:6a:03:8b:ac:8a:98:3a:86:
18:0f:52:40:e8:00:31:90:5c:40:73:bf:59:42:ca:
83:fa:82:ca:08:b6:26:a7:41:dd:46:82:cc:44:a0:
23:a3:32:bc:9a:c1:9f:02:3a:80:a1:4a:df:99:d1:
9a:1c:38:71:67:04:e9:ca:30:d2:b9:1d:aa:33:a1:
25:36:ee:d4:05:33:2f:e7:1b:5c:b8:1d:b8:75:0f:
11:18:b5:fc:0b:a3:8a:ee:76:3b:c2:a4:8f:32:62:
66:66:46:0d:a5:e5:c6:65:01:01:90:f3:2f:30:6b:
7c:2f:0f:5b:0a:bd:39:14:24:83:ea:c8:42:40:12:
0b:f8:28:46:ca:75:52:1a:46:33:ed:9e:b6:5c:42:
55:08:5f:a4:86:00:eb:73:01:59:f2:32:31:93:0a:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D9:6E:40:3F:5C:03:D8:47:44:7B:B2:0B:FD:01:02:F4:60:B0:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/4c5c95cb-9282-3a84-9dbb-c09e81a2dd54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
X509v3 Authority Key Identifier:
keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:0d:88:98:29:da:2b:51:4e:d4:0b:f8:8f:2b:02:ed:ff:69:
3c:07:0b:00:f8:8d:2a:94:61:43:d1:52:bb:db:ab:f6:6c:13:
00:3f:82:a2:ad:dd:78:73:b2:09:7c:fd:9b:14:69:96:4d:e5:
ff:06:6e:49:d2:da:8d:69:c5:7a:2c:d3:5a:e7:ea:c6:cd:3e:
27:ac:a2:79:ea:35:34:64:4b:12:1c:66:ae:34:75:f9:af:7d:
39:84:5b:d2:50:1d:35:58:62:a2:3e:5b:8f:73:7f:5f:be:65:
82:4f:c2:fb:aa:d9:f8:65:2f:c3:6e:04:6e:1a:a4:6f:eb:b4:
6f:d3:9d:e9:46:1b:7c:cb:82:4a:94:e9:c5:d3:cb:56:cc:7f:
ce:ef:2f:1f:9e:bb:6b:11:8d:de:81:23:77:db:aa:34:52:27:
4b:7b:57:61:bb:fc:69:b9:3b:b3:bd:1b:9c:06:66:99:01:68:
f2:ad:e0:9e:a6:e0:9c:3e:c0:cf:e9:90:00:fa:1e:c9:77:d4:
fc:c9:be:9d:71:83:4a:6f:ca:03:bd:a2:c1:8e:f3:6d:fa:e4:
74:4a:45:ef:4f:94:71:6c:ca:4d:7e:08:85:88:f0:c4:9f:3e:
c0:e9:cf:42:f3:96:af:fe:95:4e:f7:84:dd:f4:cb:c1:6b:47:
38:38:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:26:42 2025 by rpki-client