Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa
File: 2d0193d3-f77e-31d9-a549-a3f230e8d931.roa (raw, json)
Hash identifier: uLCtP2af2quqqRG32NLP4BvidX4TDh9wfPQMESQIGAU=
Subject key identifier: E3:15:66:D6:EB:3C:14:BC:02:C7:4B:67:5F:55:59:3C:F8:B9:AE:F5
Certificate issuer: /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial: 010D0C9F43285848F1D1573A80095244D5067000
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa
Signing time: Thu 20 Feb 2025 10:58:30 +0000
ROA not before: Thu 20 Feb 2025 10:58:30 +0000
ROA not after: Wed 21 May 2025 09:58:30 +0000
asID: 9009
IP address blocks: 172.85.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f1:d1:57:3a:80:09:52:44:d5:06:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
Validity
Not Before: Feb 20 10:58:30 2025 GMT
Not After : May 21 09:58:30 2025 GMT
Subject: CN=2bc84123-832a-4a8b-92e4-62c049eaa298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:44:3d:6c:49:16:1a:c7:05:5c:7b:3d:f4:
ad:45:12:ca:bb:54:03:5d:67:8c:b1:5f:98:df:eb:
db:c8:04:48:91:c2:a5:c3:6b:29:82:52:13:8b:1a:
57:7f:88:79:74:27:52:cb:d8:ce:0a:ca:8d:9c:db:
ee:dd:d8:85:27:b4:74:0a:c4:cd:57:e1:fc:b9:7e:
4e:dd:1c:19:70:73:09:ac:53:e1:6e:fa:a4:03:ba:
5f:9d:3e:21:2d:68:25:7f:45:2e:fd:82:57:14:0f:
53:9a:e2:0e:a2:7e:1e:f4:92:7b:68:7d:bb:f2:7e:
df:76:a3:7f:52:74:44:9c:96:ba:14:31:cb:0f:44:
c9:a7:7b:86:3d:f7:6e:40:8e:b2:d2:a3:be:f9:78:
6c:d8:9b:94:dc:07:a5:f3:90:40:b9:46:37:97:ee:
70:a7:5f:91:ae:fc:bb:cb:3c:f9:50:f2:a8:35:af:
06:2b:03:5e:04:c6:fc:64:e2:6c:68:b5:af:a6:e7:
db:20:cd:19:95:b6:30:fd:a2:3f:bb:c2:fe:d7:ac:
3d:f6:64:51:32:48:63:0d:71:96:81:0c:1e:30:21:
6d:ef:90:b8:8f:79:9f:f7:fa:4a:dd:09:3b:5d:56:
cd:44:76:d4:5e:c7:d3:71:39:42:38:34:db:14:0e:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:15:66:D6:EB:3C:14:BC:02:C7:4B:67:5F:55:59:3C:F8:B9:AE:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/2d0193d3-f77e-31d9-a549-a3f230e8d931.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
X509v3 Authority Key Identifier:
keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.85.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:ec:27:34:5f:91:86:b8:64:d5:8a:f0:11:7a:b4:0d:e3:a4:
67:e1:4b:b9:ba:8e:70:59:f4:2f:6e:2d:69:40:f8:fe:21:d6:
6c:7a:c4:53:fd:25:68:f8:53:a7:4d:9a:03:e2:b9:eb:9f:cc:
97:f3:76:61:72:e3:46:26:ff:f2:db:89:c2:4e:2d:12:24:6a:
5d:3f:80:7f:71:df:90:0f:cf:f8:7e:e5:78:8c:d4:9f:9e:50:
21:31:4f:99:d8:68:c3:8b:7f:a2:34:3b:e6:4b:4e:f1:44:17:
48:1d:0d:6c:de:fd:26:8a:e3:d1:07:98:96:bb:59:49:64:84:
de:71:cc:0d:ae:65:a0:c6:4e:2a:5e:16:99:3d:00:04:fa:b8:
a6:58:32:35:48:4e:9b:4e:6a:3c:5e:f5:a9:12:7b:93:a6:cc:
38:0e:e9:f4:75:e1:5e:3f:fa:75:da:c9:1d:56:de:50:7a:32:
40:01:99:c9:2b:c2:10:ed:ed:9b:06:f6:85:a9:79:7d:14:ce:
16:3f:28:44:d0:47:da:90:d3:36:cb:5f:17:62:a8:d7:5a:d5:
45:a0:43:e1:46:b6:41:52:e3:e9:f7:f6:f7:fd:68:17:4a:7e:
e7:df:45:20:c3:11:8c:aa:3e:85:fe:99:bd:1b:d8:d2:f3:c3:
9e:af:06:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:59 2025 by rpki-client