Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/069fc880-e6d9-31b0-bf9a-8ef2432d6d03.roa
File: 069fc880-e6d9-31b0-bf9a-8ef2432d6d03.roa (raw, json)
Hash identifier: XiyswK9DYg/Yttddz/HSBDbn6d3ju3g+7ZqB3tFvvC4=
Subject key identifier: 38:3E:FB:CC:BD:2D:53:38:18:DC:55:86:0C:21:16:3F:70:8C:D4:16
Certificate issuer: /CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
Certificate serial: 010D0C9F43285848B35B6ADD2404C9BF2498B900
Authority key identifier: 68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/069fc880-e6d9-31b0-bf9a-8ef2432d6d03.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 7132
IP address blocks: 204.128.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:6a:dd:24:04:c9:bf:24:98:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=3f309688-a10e-4b77-a142-909534573952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a7:c1:ee:5e:61:b7:c6:8a:82:b2:3a:4c:00:
a8:23:6d:14:38:2a:b6:00:ee:c7:b9:3d:d1:d5:d3:
89:e1:93:74:91:2e:36:46:05:82:35:e4:86:37:13:
6d:b6:50:e2:54:c1:1e:40:ea:3b:b6:52:65:54:3f:
d0:a1:69:0c:62:eb:bc:b4:d4:d3:96:9a:35:d5:7a:
f3:85:a6:a3:22:e0:e3:99:c5:69:02:67:db:6a:74:
11:d2:ef:79:af:d0:ef:53:79:fa:b5:28:e1:fd:79:
80:06:7c:5d:ea:42:58:90:1e:16:7b:25:97:a4:cb:
99:92:e6:73:eb:d4:56:e7:35:24:3a:b5:6a:0f:fa:
17:64:b7:56:79:1f:42:56:fe:ae:44:d2:42:03:7f:
7c:2e:d1:4e:c1:6e:4e:ae:d6:67:e1:5a:5b:90:37:
90:40:8a:92:92:3e:86:a2:3d:13:3d:18:f4:4c:03:
a0:05:57:fe:7d:3e:a3:03:b1:49:dd:d5:ed:62:64:
26:fb:aa:45:ec:51:64:9c:77:d1:87:ea:38:4d:76:
e0:c2:ca:fd:5c:d4:8f:0f:d1:1a:ed:29:6e:ae:b6:
34:60:3a:c3:5b:ab:76:8b:30:d0:fe:fc:60:6a:44:
2c:fa:c6:3c:16:e8:52:b5:81:96:f3:c7:b9:ac:e3:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3E:FB:CC:BD:2D:53:38:18:DC:55:86:0C:21:16:3F:70:8C:D4:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/069fc880-e6d9-31b0-bf9a-8ef2432d6d03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl
X509v3 Authority Key Identifier:
keyid:68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.128.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:83:8a:b6:aa:fd:2b:65:d0:3b:a2:27:a1:02:85:79:e2:be:
fa:fa:91:02:56:9f:74:9b:c5:94:43:44:ba:65:44:a6:83:93:
23:24:d0:53:ea:cd:07:55:c7:fd:01:1a:c4:d8:89:05:13:3f:
3d:f9:2a:e8:4d:99:12:4f:70:4c:57:20:cf:c3:50:a1:09:b4:
f5:da:75:0f:59:92:0b:1d:6e:e4:62:8d:06:02:62:29:d1:3f:
8b:a5:ba:cb:bf:d2:d7:54:23:53:f5:90:b7:24:de:df:e3:34:
91:e5:bf:45:4d:75:82:5c:71:61:ef:3b:de:c2:8d:65:1f:a2:
61:dc:d5:4f:b3:66:1f:e0:97:bd:0d:a4:e6:95:9b:a6:e7:e0:
91:38:f5:fa:58:3c:99:a2:b7:93:81:a9:06:a8:2a:67:60:5e:
6e:fd:c0:3a:70:db:f4:f8:dd:c4:86:37:ab:f1:13:32:7c:f1:
fa:9e:2f:f5:7c:1e:0b:d3:48:0f:e4:c7:9e:9e:2c:5b:9b:43:
54:2d:40:02:9a:90:87:cf:c4:6c:20:a2:e6:c0:72:60:8c:14:
b6:ab:c1:33:f9:f1:e8:5f:ff:ee:62:87:fd:1d:98:e7:62:97:
78:a6:0a:1e:30:33:cb:5c:26:38:1d:c0:95:b7:ac:82:16:19:
57:33:63:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:19 2025 by rpki-client