Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/19c274b3-4227-3816-8fd1-74b230ab94b7.roa
File: 19c274b3-4227-3816-8fd1-74b230ab94b7.roa (raw, json)
Hash identifier: nMNM5AcS9LbN54e9XBM5pwsVS0XYgo6EirbH15clGc8=
Subject key identifier: 99:9E:28:DB:80:7C:30:AC:5B:10:F1:C2:54:31:7C:E2:10:01:23:B9
Certificate issuer: /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial: 010D0C9F43285848D6411E2A20DAF8E8EC4B7680
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/19c274b3-4227-3816-8fd1-74b230ab94b7.roa
Signing time: Mon 10 Feb 2025 14:00:52 +0000
ROA not before: Mon 10 Feb 2025 14:00:52 +0000
ROA not after: Sun 11 May 2025 13:00:52 +0000
asID: 399870
IP address blocks: 170.205.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d6:41:1e:2a:20:da:f8:e8:ec:4b:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Validity
Not Before: Feb 10 14:00:52 2025 GMT
Not After : May 11 13:00:52 2025 GMT
Subject: CN=458732ef-f89d-47f3-81a2-67e8596cc965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:a0:7e:82:ed:aa:ed:3b:db:2e:7e:9c:5e:
51:0e:4b:26:4c:f7:d0:77:95:4c:31:0f:d9:80:b1:
35:59:fc:a7:52:32:d9:b7:87:0b:bd:c8:60:c5:e0:
bc:f0:52:58:0f:ec:01:ca:d2:3a:e0:e9:80:75:ac:
bc:74:9e:b9:87:45:a6:ee:4e:43:92:87:82:c9:99:
ad:25:62:59:61:c1:d6:1b:59:70:2d:f0:0c:31:8e:
9f:2a:3c:c6:5e:92:93:63:cb:52:97:cc:4e:8e:be:
1c:0e:05:0e:3c:d2:6d:ba:25:aa:ee:56:dc:9b:7d:
fa:62:0f:1e:25:be:b3:ef:73:bd:f9:2a:4f:9b:04:
2d:25:fb:aa:b6:f9:5e:52:43:8a:72:ea:ce:0d:63:
f8:23:ae:9b:af:ab:68:71:2d:97:e0:12:12:8a:b1:
77:e8:ec:82:52:01:a0:e3:c2:d8:38:7c:71:38:23:
7b:cb:ac:e2:8c:6f:66:a7:03:c4:ab:d9:00:ec:a0:
69:b2:e0:a7:c0:63:08:7d:de:b0:30:7e:78:72:c7:
95:fe:f2:b1:47:dc:b3:69:bd:19:e9:7b:22:38:00:
39:9e:ff:6f:cd:db:70:5f:1f:7a:f0:88:5a:ba:3d:
75:c0:96:1b:e8:3a:42:31:3b:78:1a:7c:ab:3b:69:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9E:28:DB:80:7C:30:AC:5B:10:F1:C2:54:31:7C:E2:10:01:23:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/19c274b3-4227-3816-8fd1-74b230ab94b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
X509v3 Authority Key Identifier:
keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
sbgp-ipAddrBlock: critical
IPv4:
170.205.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:d0:44:9d:31:9d:0b:ab:d9:22:cd:57:71:e7:0c:6f:91:b3:
b8:f8:82:2d:49:c1:88:10:42:16:b6:af:bc:87:ba:e5:1f:ab:
c0:b3:88:79:87:c1:dc:bf:9f:fa:b3:dd:e1:01:d7:d4:32:95:
60:0f:1e:fd:ae:61:c5:46:18:20:fb:06:af:a9:82:37:01:8b:
61:25:38:84:95:02:ac:4f:34:84:56:f1:c3:1f:0e:fb:ac:80:
21:21:43:b9:36:8d:17:86:7f:27:47:b5:b6:a9:bf:b6:4c:d3:
14:e0:98:a5:ba:c6:27:89:d1:1d:8e:ad:38:0e:16:e2:89:4d:
1e:7e:1d:d2:9e:e9:f4:85:81:56:b9:0b:30:d9:66:f6:1e:3a:
e2:3a:fb:bb:ca:74:07:74:9e:d1:40:a9:16:95:51:e8:b6:ac:
11:d1:4a:d1:d5:ff:3b:10:c5:bd:e9:5f:0a:a7:fa:c1:bf:fa:
b6:a3:1e:ae:ea:05:a6:5b:32:6c:67:48:61:e1:2e:18:29:ad:
01:a5:f3:45:1b:19:af:cc:53:fd:1b:85:20:45:a5:18:d0:d1:
49:c6:dd:57:77:8b:c3:51:13:39:51:62:9d:4b:46:4a:3b:88:
cb:97:55:3d:5a:e3:26:ea:a7:6e:8d:8e:eb:e8:55:ab:70:a4:
14:81:12:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:55 2025 by rpki-client