Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa
File: cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa (raw, json)
Hash identifier: M3gWaLvzKN85+lG7bChQY4MCxEomz3a83y5hb7ooal0=
Subject key identifier: 9F:03:DA:0C:CE:AA:7F:D3:4C:51:B8:24:48:D3:AD:1F:E1:35:52:32
Certificate issuer: /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial: 010D0C9F432858487A20716E66AD594BEE027480
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa
Signing time: Wed 08 Jan 2025 14:00:51 +0000
ROA not before: Wed 08 Jan 2025 14:00:51 +0000
ROA not after: Tue 08 Apr 2025 13:00:51 +0000
asID: 9084
IP address blocks: 154.1.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:20:71:6e:66:ad:59:4b:ee:02:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Validity
Not Before: Jan 8 14:00:51 2025 GMT
Not After : Apr 8 13:00:51 2025 GMT
Subject: CN=2c2f517f-2086-4a81-a98f-844e66737bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5f:7f:ac:85:ce:f9:8a:04:c4:08:04:41:db:
ae:b6:3d:ad:95:e4:08:33:e4:b3:6c:66:72:f6:b6:
83:7d:f6:02:3f:c9:e1:81:e5:fd:0b:22:fa:d0:c5:
53:77:fd:a2:79:f9:84:db:3b:8e:80:69:a8:49:23:
a8:07:15:7b:0b:69:20:2a:31:54:c2:f2:42:6b:e3:
9e:95:1a:55:f5:71:00:ec:c8:5a:df:c5:e5:16:7a:
8a:ca:3d:8b:5d:c4:94:cc:e4:3d:3a:fb:a1:e4:c0:
75:28:ae:85:7b:da:75:ec:e9:05:1e:e5:be:d4:ff:
e7:e4:28:f8:00:b6:44:b8:d1:4d:89:97:a5:99:4f:
6c:59:59:a9:61:41:db:39:a2:dc:de:64:89:4d:af:
18:65:c1:92:ef:38:d0:c2:fd:ef:45:6e:ff:e6:cc:
f6:77:0a:70:c5:85:9f:4a:39:2d:3c:bf:70:2c:88:
e7:ee:11:50:0a:78:00:a3:6c:ab:74:8e:eb:04:4b:
8d:58:21:d0:6b:9c:9c:14:f9:ba:04:b2:bb:a8:0e:
cc:22:2b:37:dd:eb:6b:ed:bb:0e:cf:90:64:b4:50:
76:ac:28:ea:a6:17:cd:25:62:dc:03:da:99:67:1e:
54:26:c4:f6:f3:24:89:dd:ed:7b:ab:a5:d2:6d:fa:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:DA:0C:CE:AA:7F:D3:4C:51:B8:24:48:D3:AD:1F:E1:35:52:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/cc28015c-38d8-37cf-9d4f-9fb06e88fc2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
X509v3 Authority Key Identifier:
keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
sbgp-ipAddrBlock: critical
IPv4:
154.1.174.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:d5:f8:c6:a1:01:61:d0:61:2e:cf:c7:cf:a4:39:46:de:60:
75:96:d0:44:29:bd:db:db:c3:55:26:f4:f8:e9:42:93:26:9c:
26:d8:dc:4f:d1:cd:83:39:6a:da:fd:49:52:e7:69:cc:f1:11:
9a:4d:04:64:db:3c:a3:92:6c:27:4e:dd:12:6c:0e:81:9c:67:
de:d8:5a:4c:42:dd:5d:d6:d4:1c:6e:c8:3e:32:10:f9:b1:50:
4d:d7:91:53:2a:5f:95:68:9a:1d:99:0b:3b:d3:5c:5f:59:ae:
7a:14:57:b4:9d:36:ba:15:1a:a0:b9:e4:03:06:07:df:80:0b:
b1:5e:4e:1f:7d:11:0c:0f:23:76:f2:22:b3:b7:52:74:c5:1c:
87:69:42:ff:5e:26:e5:81:af:62:3c:62:21:f3:39:11:67:b3:
ba:f6:98:c2:dd:a6:e4:23:71:2c:82:be:ab:70:f2:14:31:ea:
0f:e2:f2:ad:59:0d:1c:7c:fd:11:28:17:8b:18:75:36:8c:c0:
23:4f:74:f2:99:c4:af:e2:2f:55:1d:1b:fb:b7:b7:7b:8c:3a:
13:11:7b:03:3e:33:b3:ef:f8:65:1a:ef:e3:ea:01:48:43:e5:
dc:cc:a0:84:ef:a8:28:72:94:fc:55:5b:bd:f7:ae:67:f1:13:
45:dc:d0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:05 2025 by rpki-client