Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa
File: 17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa (raw, json)
Hash identifier: 7fDRjVqxw2xMQFq8edXi6z19cRqWeXwDgXnR8z4hAD4=
Subject key identifier: 26:A9:4B:B6:4C:F8:6B:0D:97:74:36:F0:7F:03:62:75:C1:37:4A:BF
Certificate issuer: /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial: 010D0C9F432858494B6417B8E6790E2E2FB3D280
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 394285
IP address blocks: 174.137.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:17:b8:e6:79:0e:2e:2f:b3:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=ad914df7-b3c8-4b25-9455-4e5b7363573c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:9e:13:6a:53:37:0e:be:8e:f9:b4:38:0c:
b1:07:de:68:c0:c0:c3:fd:05:ca:ad:36:09:bb:4b:
a6:5d:57:89:dc:a5:00:27:41:4b:42:f7:25:92:3e:
3c:c3:5e:06:d5:97:a2:e6:63:45:56:48:7b:da:8b:
8a:33:f3:5b:df:08:ad:8a:67:ed:8e:f2:3f:e4:1f:
71:82:88:5c:7b:82:4e:f3:b2:b5:8a:cc:b9:37:4d:
4c:24:83:a3:9d:62:a7:51:00:0e:e0:f6:14:9e:48:
e7:7b:b8:bc:d4:31:6b:72:88:47:ad:90:02:17:f1:
9b:27:62:9d:3c:48:5c:1d:ba:cd:01:a8:8b:49:e5:
7c:c4:61:55:6e:61:1d:22:c0:5d:d8:81:a8:a7:1d:
66:65:f4:81:9a:a3:a0:d8:6a:a4:31:91:b6:fa:e5:
f3:14:c1:60:25:00:69:99:7a:f6:5c:55:3e:56:10:
ac:52:be:7f:25:34:31:bd:74:ed:d2:c3:34:80:eb:
b3:77:6c:b1:51:dd:cf:e0:5c:40:4a:a1:f0:55:22:
1c:d0:3a:2a:92:8e:08:3f:c6:ae:33:ae:ec:da:1b:
65:65:3d:80:d8:8d:4f:5c:67:5f:ce:ff:7e:dd:68:
82:93:cb:eb:ff:1c:25:3e:bb:f6:10:19:40:41:8e:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A9:4B:B6:4C:F8:6B:0D:97:74:36:F0:7F:03:62:75:C1:37:4A:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/17d3a4e3-71f8-382c-83a4-3475ad6301c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
X509v3 Authority Key Identifier:
keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
sbgp-ipAddrBlock: critical
IPv4:
174.137.102.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:f7:97:bc:55:dd:a9:3a:08:12:e0:e6:76:2e:4e:a8:1f:1a:
f3:37:51:33:0f:65:73:ac:89:38:fb:37:08:e0:2f:29:1f:23:
4c:ca:28:a4:9f:d3:be:43:ee:72:05:05:66:56:17:8a:2b:df:
bf:8a:32:92:b7:15:e7:91:90:fd:48:c4:8f:b0:88:63:01:35:
1c:cb:2f:34:a1:b3:b5:73:79:d8:6d:01:6d:b1:8c:3f:e1:b0:
f0:04:43:6e:85:28:41:40:5c:8f:a2:c4:45:ca:83:2f:5d:69:
31:49:91:d8:92:db:bd:39:a4:c9:b8:19:00:57:25:a0:d6:c5:
90:43:98:2b:f9:7f:29:58:1e:8b:fb:b4:41:80:a0:52:7b:42:
d6:74:95:63:e1:96:42:06:5b:bd:1c:a2:ea:73:6f:29:72:f2:
1f:4d:29:c4:6c:0d:ee:14:51:18:8c:08:57:9a:8e:92:c0:84:
84:4f:25:d4:73:83:87:53:03:2b:83:8e:89:e2:16:8c:a5:65:
93:d0:f7:8c:77:88:a1:bc:f3:95:c9:69:b2:11:81:85:03:97:
0c:96:db:63:ad:e3:7a:ad:4d:29:8a:8b:63:24:ea:95:69:35:
26:89:cf:fb:6a:30:44:99:cd:b3:07:78:7f:bb:68:b5:16:c9:
1f:8f:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:06:44 2025 by rpki-client