Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/4d2308c8-35de-3c39-897c-a843a5157ecb.roa
File: 4d2308c8-35de-3c39-897c-a843a5157ecb.roa (raw, json)
Hash identifier: f5BYFc650QvrrKf5FaWMXgzMR08aPTHdos9gcxnKr9E=
Subject key identifier: B7:BD:C9:0E:70:D3:42:77:00:14:2F:2E:FF:01:AE:A5:DC:E0:A9:1D
Certificate issuer: /CN=e83c85e5-8535-4793-9639-6216c5afd18a
Certificate serial: 010D0C9F43285846B2F5156C92ABF5D742E4ED40
Authority key identifier: 49:9D:B0:7D:E7:A3:F6:88:C4:53:69:91:95:A8:D0:E1:6C:7B:44:3A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/4d2308c8-35de-3c39-897c-a843a5157ecb.roa
Signing time: Mon 29 Jul 2024 13:00:38 +0000
ROA not before: Mon 29 Jul 2024 13:00:38 +0000
ROA not after: Sun 27 Oct 2024 13:00:38 +0000
asID: 33438
IP address blocks: 151.139.122.0/23 maxlen: 24
173.245.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:b2:f5:15:6c:92:ab:f5:d7:42:e4:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e83c85e5-8535-4793-9639-6216c5afd18a
Validity
Not Before: Jul 29 13:00:38 2024 GMT
Not After : Oct 27 13:00:38 2024 GMT
Subject: CN=2a2bbedc-9375-48db-ade3-722152914968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:c3:09:57:9d:e3:41:ab:3b:fe:c8:f1:99:
63:41:78:9d:34:d5:c8:41:02:1c:6f:18:a1:7e:39:
ac:cf:b4:9c:4c:5e:f0:1a:1c:0d:9a:08:2d:c9:6a:
e9:33:6c:1f:54:8c:2c:e9:2c:57:b1:06:bc:45:e9:
a3:d2:95:e3:74:ff:1c:f2:8f:6c:a7:40:a8:b2:6a:
7a:1e:51:04:80:94:cb:75:51:58:8d:79:fa:09:bf:
99:89:3d:aa:68:0b:04:9c:b4:c0:b3:8b:35:08:2b:
93:ac:28:90:7f:7a:47:cd:c7:b5:52:ab:05:76:c2:
71:36:94:fb:5d:83:29:61:12:96:82:87:11:81:9b:
74:ff:aa:18:5c:c4:0e:20:ed:90:54:98:45:1d:0d:
43:95:61:6d:6a:fd:2b:f5:c0:22:4a:6a:77:24:ea:
f8:c2:77:70:ec:1f:3d:49:3a:4a:fd:b1:55:e0:d4:
b5:93:f6:56:29:02:d8:78:83:a9:0d:60:b7:56:82:
e3:f4:83:34:a2:c7:06:43:60:b7:c2:71:8a:a3:2c:
cd:ec:29:f4:24:6a:76:a0:16:42:91:57:c6:98:40:
61:5c:f5:45:ea:47:bf:f0:e1:fc:a7:be:48:f1:fb:
cc:0b:37:1d:59:02:bb:2f:89:1c:40:77:8e:26:08:
84:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BD:C9:0E:70:D3:42:77:00:14:2F:2E:FF:01:AE:A5:DC:E0:A9:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/4d2308c8-35de-3c39-897c-a843a5157ecb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a/e83c85e5-8535-4793-9639-6216c5afd18a.crl
X509v3 Authority Key Identifier:
keyid:49:9D:B0:7D:E7:A3:F6:88:C4:53:69:91:95:A8:D0:E1:6C:7B:44:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e83c85e5-8535-4793-9639-6216c5afd18a.cer
sbgp-ipAddrBlock: critical
IPv4:
151.139.122.0/23
173.245.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:e4:f0:e9:59:1f:7a:08:55:35:ac:ea:1d:49:a1:8c:92:c1:
48:12:31:39:d6:6a:30:17:4d:d8:c0:04:f0:82:52:52:89:0d:
6f:d9:54:7b:f7:33:89:86:b2:81:60:aa:97:b8:6e:6d:89:8a:
c4:fe:f5:46:fe:35:18:32:40:70:6d:50:74:2f:3f:1e:dd:ae:
95:a2:ee:b6:ed:93:59:c9:9e:6a:d6:06:5a:2a:2f:04:a9:61:
5a:a7:69:ba:44:71:92:70:91:f2:33:cb:bd:f0:dd:e6:23:75:
79:66:fd:61:d7:cf:c9:46:ba:7c:1f:d2:49:aa:d7:cf:fe:c6:
6e:06:81:00:d7:54:79:72:75:40:cb:8e:e1:c6:56:31:56:66:
f2:69:8f:f0:81:fc:34:c0:ac:f7:83:ed:ea:36:4a:9a:56:dc:
81:0c:52:ab:a1:ab:67:a6:07:cf:17:52:44:4a:fa:72:c9:73:
7d:8d:7d:de:bb:90:04:c8:1c:35:18:b7:5a:2b:ed:fe:0e:5e:
ef:3e:73:33:e6:19:72:b4:3f:93:d5:33:64:90:08:ce:d6:dc:
21:f6:07:85:db:41:15:08:76:bf:3f:03:0b:73:7e:0c:80:78:
d9:5d:f7:ba:bc:7b:c0:a9:c1:73:39:c3:c9:45:7e:e3:cd:e1:
61:bb:0a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 17:07:50 2024 by rpki-client on console-fra.rpki-client.org