Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bd85e14a-a941-3190-81ec-819309f5fa0e.roa
File: bd85e14a-a941-3190-81ec-819309f5fa0e.roa (raw, json)
Hash identifier: xVP08+rEr+0NkfEfROb2+jCQoKql+d+Av5YijRUgbrQ=
Subject key identifier: 7B:AA:6D:74:F0:5F:E0:C7:0F:B6:FE:17:7A:F7:97:7F:37:77:D8:5C
Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1
Certificate serial: 010D0C9F43285848B55889695D87FBFD95B1FEE0
Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bd85e14a-a941-3190-81ec-819309f5fa0e.roa
Signing time: Wed 29 Jan 2025 19:06:35 +0000
ROA not before: Wed 29 Jan 2025 19:06:35 +0000
ROA not after: Tue 29 Apr 2025 18:06:35 +0000
asID: 14618
IP address blocks: 69.67.168.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b5:58:89:69:5d:87:fb:fd:95:b1:fe:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1
Validity
Not Before: Jan 29 19:06:35 2025 GMT
Not After : Apr 29 18:06:35 2025 GMT
Subject: CN=1cfffb23-0372-4f4b-900b-72ede61bc202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:fc:04:08:ca:a4:0d:7a:0e:c9:5b:16:f9:
c8:dd:16:e9:95:74:f9:ad:ef:09:04:cc:45:db:3e:
51:d8:22:87:59:5c:3e:d3:29:f2:f4:5c:82:e7:f9:
19:5e:dd:bf:b7:9c:25:cc:9f:6c:df:c8:a3:40:40:
db:90:9a:d9:09:4e:5d:ba:ed:13:e1:d9:ba:4f:05:
ca:a7:02:d2:a7:e7:8c:f2:de:44:91:5d:79:1c:6a:
ed:6f:c2:91:fa:e3:f3:65:b4:f2:ea:c4:1e:6b:63:
40:3f:72:41:cb:ec:52:9a:40:77:c0:64:36:9f:13:
d0:d4:e0:a7:f9:b3:a6:e9:e8:77:dc:a2:e3:d4:f0:
78:e1:f7:74:4b:19:e2:b8:97:70:34:5b:aa:e0:36:
ac:5b:74:fb:8b:01:51:ee:55:3e:25:e3:d3:d1:21:
fa:16:59:f4:5c:14:63:ad:a6:a5:ef:d9:bc:f6:df:
23:96:3f:50:80:77:0e:ba:e0:f4:00:0a:be:4f:27:
82:12:6f:f5:df:f8:8e:27:9d:56:03:0a:ba:65:0d:
c9:b1:6a:78:be:96:47:0c:87:13:49:14:9e:ba:99:
83:8d:3d:36:b8:70:b4:54:51:2a:c7:34:bb:90:4d:
c0:8d:c2:fe:06:5a:66:43:c9:58:cc:43:84:07:7f:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AA:6D:74:F0:5F:E0:C7:0F:B6:FE:17:7A:F7:97:7F:37:77:D8:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/bd85e14a-a941-3190-81ec-819309f5fa0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl
X509v3 Authority Key Identifier:
keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer
sbgp-ipAddrBlock: critical
IPv4:
69.67.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:36:2e:88:c8:43:ba:a5:f3:18:34:87:c9:58:16:27:c2:9c:
19:e8:c5:d6:11:db:2c:d4:26:0e:7a:84:5e:25:97:fd:73:af:
62:19:3b:69:78:49:9a:bd:c3:13:21:63:2d:5d:d6:84:28:c2:
c0:4b:d1:ba:2c:a1:15:e4:e0:01:9e:8a:2c:39:62:6a:65:d4:
40:36:1c:14:96:17:f0:ab:61:f5:d7:7e:f9:31:e2:ee:3c:48:
0c:cc:ce:6f:0c:aa:48:2e:dd:2e:92:c7:2e:da:df:40:67:a9:
2d:a6:de:1b:70:73:d0:65:75:2e:d3:37:7b:a2:f5:15:48:9e:
1e:e6:dc:0e:05:04:bd:e5:b3:61:59:28:11:0e:e5:f1:9e:47:
3c:db:77:be:63:f5:d5:34:a3:ce:f8:56:90:e2:6a:30:d8:ba:
93:d1:fe:ad:82:f7:89:b7:20:d2:38:94:2d:9a:71:c3:e4:c8:
e8:df:22:03:4b:93:b0:8b:07:48:1f:fd:54:ab:d4:3c:6a:69:
e5:ea:36:6c:ea:c5:7d:c6:9e:3d:76:a1:6b:f7:d2:eb:42:f3:
37:6a:48:4e:71:9f:6a:f5:35:a8:32:0c:23:54:79:76:92:37:
c5:18:69:0b:00:76:a3:a6:60:52:d4:8e:5d:bc:2f:04:0a:c6:
41:96:74:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:47:01 2025 by rpki-client