Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
File: a6e045d3-3586-3be0-8f1c-ee95cb321013.roa (raw, json)
Hash identifier: j6UXelC+vUke4HXbx1UswzaRgo7eOghe3LCR6CALtgw=
Subject key identifier: EF:8E:14:82:C8:73:EE:DF:0E:90:81:AD:32:28:28:D4:B1:05:BB:3A
Certificate issuer: /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial: 010D0C9F43285849446940236CDA73F6C83D1580
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
Signing time: Sat 22 Mar 2025 01:00:40 +0000
ROA not before: Sat 22 Mar 2025 01:00:40 +0000
ROA not after: Fri 20 Jun 2025 01:00:40 +0000
asID: 5065
IP address blocks: 174.136.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:44:69:40:23:6c:da:73:f6:c8:3d:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Validity
Not Before: Mar 22 01:00:40 2025 GMT
Not After : Jun 20 01:00:40 2025 GMT
Subject: CN=66ccca0a-f6f5-489a-b01d-994fa79474c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:78:de:37:5e:e0:bd:d4:68:90:76:a8:4b:5e:
3f:98:57:ed:4d:b2:c9:ca:f0:7f:74:28:31:33:f8:
b6:1a:f8:c6:a9:70:bf:25:c2:8a:0a:c0:3c:c3:fb:
3f:ff:a1:fb:61:71:88:8c:2f:39:9e:a1:27:97:1d:
96:0a:12:56:86:5c:59:4a:82:e3:dc:a5:b0:3f:a0:
96:22:17:5e:c1:8c:aa:31:dc:d6:7b:56:e6:1f:66:
5d:dc:0f:42:8b:82:4a:6c:69:dc:3e:79:cd:56:b9:
8e:78:1c:ef:22:65:7a:dc:ed:40:91:a2:54:48:d9:
63:62:ea:e8:d2:8d:fa:f7:c4:d8:52:71:cb:d6:0f:
e7:fe:27:e8:97:90:b9:2a:41:f6:1e:c8:1a:f2:0c:
38:17:24:d5:39:2d:63:5a:61:25:e2:97:f3:75:d5:
09:a5:7b:e4:ac:db:9b:52:bf:fd:87:ac:74:ae:44:
19:9e:af:51:e0:61:a1:25:4b:3c:26:3f:78:9b:63:
68:ba:a8:90:3e:1b:5f:16:0b:c3:b3:ca:24:9c:4b:
39:fa:27:20:c5:e8:85:12:cb:b9:7e:97:65:4e:9f:
2c:b0:a0:d9:c1:ea:63:f6:4c:4c:b7:59:c9:39:e9:
df:46:ad:34:63:61:10:75:99:7e:e8:88:2b:e6:3e:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8E:14:82:C8:73:EE:DF:0E:90:81:AD:32:28:28:D4:B1:05:BB:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/a6e045d3-3586-3be0-8f1c-ee95cb321013.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl
X509v3 Authority Key Identifier:
keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
sbgp-ipAddrBlock: critical
IPv4:
174.136.232.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:dc:46:55:f2:ac:ae:a1:62:cb:21:03:57:2a:4b:99:8e:61:
78:1d:16:33:5f:d4:00:16:02:70:35:40:2d:06:dd:31:b1:4f:
f1:f0:14:13:1b:b8:e7:76:10:50:2c:64:f7:77:81:0b:32:d9:
65:d5:8b:87:a6:47:3e:3f:dd:d0:26:9b:5e:4a:82:a5:25:c5:
0f:20:30:02:71:3e:72:f6:54:70:5a:76:54:68:4e:50:60:a5:
40:5d:38:7b:30:80:50:54:8b:32:11:b8:29:72:c9:0b:cf:3a:
83:a2:78:14:56:d5:15:f1:c6:24:d4:fa:4c:e0:ea:d0:79:7c:
af:e9:25:98:67:c3:c5:b0:d8:fe:eb:d8:6d:93:25:c4:13:ab:
b6:18:fe:94:64:73:1d:da:13:a5:91:c0:69:6e:8b:39:ee:a1:
c1:41:88:1e:45:20:6c:8d:22:84:6d:05:d1:d7:94:8f:2a:76:
aa:f5:52:7f:be:2a:be:78:30:39:3d:4d:6c:46:4d:3e:f3:3d:
29:1a:1d:08:f6:5b:8d:da:56:76:40:e4:ff:78:99:a8:53:06:
28:21:c0:c5:b1:db:18:09:9c:4e:01:9c:ba:03:1d:36:9f:2e:
28:67:0c:4c:2b:57:68:61:9a:54:9f:a9:ea:46:81:4c:45:05:
38:15:3e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:26 2025 by rpki-client