Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/037804c2-e65c-3513-b219-6bff621c810f.roa
File: 037804c2-e65c-3513-b219-6bff621c810f.roa (raw, json)
Hash identifier: u/fmrpApe5fKufMgcH6+FU47ON3ty/QToT9ztMoOpIM=
Subject key identifier: 90:20:B9:A6:B3:ED:71:C8:26:32:7D:5D:E8:08:09:62:F2:77:DB:2A
Certificate issuer: /CN=7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158
Certificate serial: 010D0C9F43285848D211420B6989F95811784940
Authority key identifier: 28:F6:4B:EA:12:08:2C:FE:26:90:08:15:D5:3D:99:F6:12:C0:77:FD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/037804c2-e65c-3513-b219-6bff621c810f.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 400620
IP address blocks: 207.174.112.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:42:0b:69:89:f9:58:11:78:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=8b073a1e-61f6-4f92-b28e-3357acc8f489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:72:58:3f:6a:43:24:89:8f:40:d1:e3:42:31:
ff:53:74:e0:04:6d:68:24:68:4d:37:87:8c:54:b0:
58:14:22:aa:92:3d:24:75:66:62:e7:09:25:49:84:
7c:e3:1a:a4:a2:44:09:eb:d3:5c:87:f9:8c:eb:35:
eb:86:70:bd:b3:f5:7f:70:89:52:80:55:0c:30:81:
99:28:e3:2d:b1:82:12:84:db:9d:0e:cb:b8:c6:b7:
01:ff:8e:80:84:bd:5e:99:d2:fc:61:cc:59:d9:0d:
3c:b3:29:4e:d6:3e:0f:d2:fd:1e:29:1e:b8:57:28:
63:51:32:1f:38:3e:ca:b8:65:e5:64:f3:ff:97:b5:
db:d3:fd:fb:60:7f:1c:0e:36:f6:30:ee:63:4a:36:
b7:ef:5f:15:b3:72:64:2e:79:0f:9a:4e:48:ca:e6:
ff:f3:5f:a0:cb:63:6b:f9:df:4c:53:b5:72:1c:25:
5f:8c:99:c9:0c:96:d7:2d:72:03:0c:94:93:fe:b9:
1c:56:b2:25:99:73:0b:7b:ef:4d:90:76:25:60:45:
04:28:c3:6d:f0:a9:73:9a:29:19:c2:2c:fa:73:1a:
67:2e:d1:41:64:b6:39:f0:b3:b4:d9:88:f0:37:86:
d3:76:1a:fc:9a:ba:2d:6d:d3:37:31:72:dc:9f:7b:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:20:B9:A6:B3:ED:71:C8:26:32:7D:5D:E8:08:09:62:F2:77:DB:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/037804c2-e65c-3513-b219-6bff621c810f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.crl
X509v3 Authority Key Identifier:
keyid:28:F6:4B:EA:12:08:2C:FE:26:90:08:15:D5:3D:99:F6:12:C0:77:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7b76fe5c-ec2a-4bd7-9e0d-863a2ddf2158.cer
sbgp-ipAddrBlock: critical
IPv4:
207.174.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:5f:71:6c:f6:8a:35:31:db:e1:ef:24:73:9b:81:33:08:1d:
65:b0:ad:3a:af:8c:58:e9:38:fe:42:3e:1e:f0:81:31:5c:fb:
98:27:b4:46:3f:ef:ac:6a:39:fa:98:40:9c:b5:7e:6a:f1:9d:
cc:33:14:39:87:06:79:e3:46:22:03:ab:ed:e8:5f:5d:a0:20:
e8:47:b2:9b:fc:fc:4a:c0:c3:72:a4:08:f2:42:2b:dc:c2:07:
b9:15:46:f4:79:67:bc:31:9d:6f:c0:f9:70:c0:b7:db:3e:2a:
f0:61:44:cf:68:fa:f1:21:23:21:ee:b2:c2:f2:29:f8:29:4c:
86:c8:16:ce:f0:54:6e:b7:0a:5f:d3:4f:98:ee:62:ad:1c:8b:
49:38:1f:f6:5e:4d:b5:b7:37:b9:8f:ba:75:c8:3e:35:b9:a4:
0d:7f:b1:a0:80:23:eb:ee:67:39:bb:7a:9e:a8:d4:29:01:27:
f5:e8:8d:50:ef:3d:ff:be:25:60:76:8e:6f:df:f5:91:be:9f:
02:a5:99:45:20:c4:a7:6e:05:ad:fa:55:f6:31:d9:59:7e:d7:
7f:af:26:ab:1a:56:fe:33:7e:17:1c:f9:17:e0:79:03:83:41:
20:30:6f:1c:25:39:4d:bd:51:96:16:56:00:63:24:ed:7f:dc:
74:3b:5d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:54:04 2025 by rpki-client