Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/6cbc79c9-8cbf-30c1-890e-ab54e9688782.roa
File: 6cbc79c9-8cbf-30c1-890e-ab54e9688782.roa (raw, json)
Hash identifier: hfs+rt92y90RwgNSlHJqLXnq8tWL7FOGebkVoPXRcNc=
Subject key identifier: 73:CC:98:39:7E:3D:CF:77:74:43:DC:9C:BF:A4:E0:4A:4D:2B:14:B0
Certificate issuer: /CN=137f9174-32a4-4183-9e4e-4171f06758bc
Certificate serial: 010D0C9F43285848DA70FA0FE4FE2BE1051A07C0
Authority key identifier: 8C:A6:74:1E:32:A7:D0:64:52:8F:A0:B6:16:76:94:EB:15:96:9D:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/6cbc79c9-8cbf-30c1-890e-ab54e9688782.roa
Signing time: Wed 12 Feb 2025 02:00:39 +0000
ROA not before: Wed 12 Feb 2025 02:00:39 +0000
ROA not after: Tue 13 May 2025 01:00:39 +0000
asID: 12056
IP address blocks: 23.252.208.0/20 maxlen: 24
172.97.0.0/21 maxlen: 24
2604:2440::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:70:fa:0f:e4:fe:2b:e1:05:1a:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=137f9174-32a4-4183-9e4e-4171f06758bc
Validity
Not Before: Feb 12 02:00:39 2025 GMT
Not After : May 13 01:00:39 2025 GMT
Subject: CN=4ecf013a-b114-44b7-a673-a66ea59cae53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:50:ac:d6:2f:59:7b:6b:62:39:69:50:af:
50:2b:aa:23:2f:55:c0:0f:cb:86:2d:3d:05:3c:c7:
c5:a7:17:a1:5c:87:4d:d2:4f:4b:10:9e:74:1c:be:
40:26:c2:04:89:2f:d9:aa:e8:43:2d:5e:05:ec:fa:
b8:a7:9b:05:4a:de:d5:b0:91:ce:0e:44:af:2c:c8:
a5:19:7b:dd:76:2a:42:91:91:5e:df:5a:e0:11:88:
8d:60:11:10:f2:2a:33:fb:40:e1:ca:6b:d5:89:79:
c2:8a:a6:eb:3a:50:31:6e:6a:a2:8e:9c:70:70:dc:
71:a5:03:f6:15:8d:72:d1:a3:ff:76:ac:be:2c:a0:
10:90:79:69:d4:23:bb:f6:7c:1a:8b:7c:9d:b6:2d:
87:6c:07:52:63:73:39:a9:d6:bc:f2:b7:98:5c:fe:
6e:86:b9:9f:78:4a:71:92:e7:2c:92:96:cd:30:77:
d8:c2:56:09:ac:a0:59:b2:83:c5:77:62:0b:a7:72:
8d:0c:ff:aa:14:6f:77:dc:24:be:26:2c:47:0a:3f:
a9:62:64:14:3e:4e:20:e9:29:3b:28:f8:77:86:63:
b3:45:e1:d9:97:40:70:40:b0:22:b4:99:47:71:77:
ab:40:99:9c:4d:d6:ef:be:26:3a:0b:ea:10:b7:fa:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CC:98:39:7E:3D:CF:77:74:43:DC:9C:BF:A4:E0:4A:4D:2B:14:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/6cbc79c9-8cbf-30c1-890e-ab54e9688782.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc/137f9174-32a4-4183-9e4e-4171f06758bc.crl
X509v3 Authority Key Identifier:
keyid:8C:A6:74:1E:32:A7:D0:64:52:8F:A0:B6:16:76:94:EB:15:96:9D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/137f9174-32a4-4183-9e4e-4171f06758bc.cer
sbgp-ipAddrBlock: critical
IPv4:
23.252.208.0/20
172.97.0.0/21
IPv6:
2604:2440::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:72:72:06:fe:28:aa:2a:07:71:2c:e7:5d:c8:c8:69:e9:e4:
b2:03:71:cc:86:fc:3f:18:f2:53:53:d8:82:89:0f:7a:9f:79:
32:ec:1f:92:9c:f4:28:e6:79:1b:b0:3f:dc:11:bd:7d:a8:fc:
ca:93:04:68:35:1c:07:c1:16:d5:35:58:e5:ad:b0:c9:8c:69:
bd:95:ec:9b:fd:35:2c:be:bd:5c:5a:c7:9f:b8:17:67:06:24:
c4:39:74:31:e2:3f:ba:ef:87:96:89:42:7e:c3:4a:b7:a2:eb:
c3:40:42:8f:99:ad:f8:b0:d0:a3:43:ef:1d:56:57:7d:b5:37:
6f:23:e0:f7:b5:a4:a0:50:9c:dc:df:89:88:c5:53:75:9f:39:
86:2a:b4:85:ea:8e:95:63:18:df:2a:ec:f0:12:ea:91:05:4f:
58:68:e9:86:64:59:a5:c5:35:5a:92:b7:ca:3e:04:a5:eb:df:
af:11:19:40:0d:ae:3f:96:32:f0:82:72:ae:d9:c2:68:a4:68:
35:ba:22:d4:96:59:0b:7b:76:16:83:01:43:77:aa:dd:a7:e1:
a2:9d:63:ab:6a:7f:21:2a:64:9f:15:a1:89:49:8b:c2:10:47:
66:c9:02:16:a8:96:64:70:28:c0:30:a0:a3:f0:b3:ca:e2:5d:
a8:7c:65:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:14:45 2025 by rpki-client