Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa
File: 880de72b-888b-3dde-b1b4-c86038197a8a.roa (raw, json)
Hash identifier: EdB+QEV2DLonHtNTE/Ph9GCttkP8W4O0LgQ3P8HUzmY=
Subject key identifier: 4F:13:D7:30:F6:C6:46:20:53:8E:12:5F:5B:DC:02:B0:AD:63:84:7C
Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial: 010D0C9F43285848909804F47CD117C624FB2400
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa
Signing time: Thu 16 Jan 2025 15:09:35 +0000
ROA not before: Thu 16 Jan 2025 15:09:35 +0000
ROA not after: Wed 16 Apr 2025 14:09:35 +0000
asID: 396982
IP address blocks: 147.124.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:98:04:f4:7c:d1:17:c6:24:fb:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Validity
Not Before: Jan 16 15:09:35 2025 GMT
Not After : Apr 16 14:09:35 2025 GMT
Subject: CN=f008783d-7bb8-4ebb-a7c7-41e8c8d95858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:3b:3f:be:a0:03:47:b1:da:ac:20:17:61:
e7:1b:b5:0e:04:44:86:7c:54:c2:7c:f7:2e:fd:cd:
b7:a3:98:c9:b8:a4:74:74:dc:87:0b:87:6a:c8:6f:
dc:c8:08:42:a2:4e:06:26:61:50:b1:c8:1d:29:02:
ab:32:60:f9:a1:8b:6c:62:e8:cb:01:97:36:5f:9f:
51:83:ad:46:41:89:cc:8f:55:e2:bb:54:32:3a:14:
de:34:5b:0e:ba:7a:25:9e:14:4c:53:96:01:74:71:
06:ab:b8:5f:70:b9:46:81:3c:20:26:07:02:31:7b:
b9:ba:7a:d2:f0:94:4c:25:5a:fd:6c:ed:71:11:88:
2e:a0:84:73:64:79:69:7e:14:31:25:59:00:48:49:
f6:f0:3d:d2:91:5e:0f:28:8b:e5:bc:92:f4:cf:24:
8b:9b:c3:c4:49:0c:0e:06:d8:98:c5:20:11:7b:9e:
c7:02:8f:ad:d1:fe:20:d7:1c:47:f4:1f:df:de:01:
d4:da:c5:05:41:f1:22:71:28:b9:dc:62:e0:b6:70:
b3:bd:d9:c9:25:07:14:67:90:dc:5c:dd:f6:89:d5:
c5:48:b9:c6:63:d4:59:cb:1f:f7:97:82:bc:de:62:
68:c5:2d:7c:cf:ce:f4:4a:fc:ab:e7:7d:5a:58:c6:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:13:D7:30:F6:C6:46:20:53:8E:12:5F:5B:DC:02:B0:AD:63:84:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/880de72b-888b-3dde-b1b4-c86038197a8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
X509v3 Authority Key Identifier:
keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:ed:34:b1:2f:02:5a:a2:69:54:8a:01:8a:cd:3e:fb:29:6c:
c6:35:84:24:b9:0a:ce:78:ca:04:a8:b7:ba:f7:0f:92:c8:f9:
b3:9f:e3:8d:72:c2:94:62:c2:64:9a:f0:f5:7f:20:17:eb:7a:
b2:29:ae:8c:21:75:2c:0a:0e:18:61:06:2f:10:0c:43:62:3f:
56:05:71:a5:0c:b2:6f:6a:56:65:4e:ac:b8:8f:35:53:6a:bc:
29:2b:b2:c0:5a:ca:aa:45:eb:9a:9f:25:23:fd:fb:56:7c:b0:
46:a7:54:1f:7d:5f:1b:81:8d:30:cc:ad:a9:35:68:85:01:f4:
b4:2c:4c:dd:24:c8:7a:a6:25:5a:ec:80:85:45:31:12:32:46:
c5:41:6a:bc:9c:dc:0e:52:d8:0e:95:00:a8:f5:a2:39:ba:b3:
3c:bd:2a:17:45:60:f4:9b:11:ea:54:98:d3:10:c6:99:2c:2a:
81:b3:2f:48:db:f1:3b:cf:d0:4f:1c:f1:16:f2:c9:8b:07:2f:
94:a0:bd:23:34:30:85:ff:46:3a:c0:f7:13:ad:f7:80:89:ba:
05:c3:ae:8f:0f:9d:a6:72:c8:b1:35:ae:4c:41:75:2d:98:b8:
b6:61:1a:f2:da:9e:a3:22:87:11:d9:b7:84:3c:a7:34:45:32:
be:78:ed:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:36 2025 by rpki-client