Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa
File: 9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa (raw, json)
Hash identifier: kfdXI5hH4ue7asgRcky/90tveWJ/Xzplizhc792+5Ak=
Subject key identifier: B8:44:A9:25:B5:DB:E7:D8:61:17:03:55:76:36:A2:D6:6A:65:34:77
Certificate issuer: /CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Certificate serial: 010D0C9F43285848FD56ADD9066D1767082CE680
Authority key identifier: B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 11550
IP address blocks: 173.243.176.0/20 maxlen: 24
199.96.120.0/22 maxlen: 24
204.89.253.0/24 maxlen: 24
216.249.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:ad:d9:06:6d:17:67:08:2c:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eaba830-0f15-4c36-99b0-0c14bf7ebf9e
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=4b2e0bb4-54a2-4b09-bedd-b79fce8793ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:e6:21:08:1c:77:aa:b7:8a:d1:ea:ad:50:
1f:3a:f2:85:14:c5:30:50:d5:e1:7e:6b:00:71:28:
77:51:13:fe:80:af:72:8c:fe:17:7d:cb:b0:f1:8d:
12:a7:14:7a:95:99:c3:6e:be:a9:07:bc:0e:d3:fa:
fe:82:89:0b:26:f1:5f:f0:75:64:75:d0:1e:2b:f2:
f7:38:93:15:41:9c:c1:03:a7:cf:0f:49:3d:69:7b:
09:5b:0a:aa:2e:6c:f4:35:83:d8:d0:4e:df:ce:fc:
a1:50:83:fe:26:4f:51:5c:97:1e:54:af:c6:7e:dc:
49:8f:d0:24:3a:3d:52:c5:9f:e2:e1:6e:4a:17:4e:
e5:6f:07:27:38:24:27:ae:4e:25:84:e3:3c:b8:94:
2a:c7:cd:e9:d6:d9:ef:56:59:56:bd:f2:f9:ce:8e:
f7:93:49:28:3b:5b:89:18:1f:b0:a9:f2:f8:d4:9a:
bc:8b:d5:23:b0:8a:3d:c1:b8:fe:db:d2:91:9e:25:
df:e2:6d:9e:e7:d4:94:2f:9f:e2:07:12:45:fd:3f:
92:19:1a:c9:88:f8:82:3c:8f:24:ba:19:77:49:98:
1b:8d:0b:64:24:51:b3:e3:4e:f0:e2:07:e1:af:34:
cd:5c:fb:b9:2b:b3:50:ab:1d:be:cf:4f:85:f2:b1:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:44:A9:25:B5:DB:E7:D8:61:17:03:55:76:36:A2:D6:6A:65:34:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/9dab2ff4-6e47-3e12-9a96-4cd70b4e8e27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.crl
X509v3 Authority Key Identifier:
keyid:B6:42:27:D7:34:26:9D:15:4C:4B:16:E1:52:6F:8F:C1:03:FA:31:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eaba830-0f15-4c36-99b0-0c14bf7ebf9e.cer
sbgp-ipAddrBlock: critical
IPv4:
173.243.176.0/20
199.96.120.0/22
204.89.253.0/24
216.249.64.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:a3:9b:78:87:61:3c:5a:28:db:dd:cf:87:29:f5:b7:c4:30:
3a:ee:0f:ac:20:9e:9e:23:cd:fd:d6:22:51:01:55:49:7d:e6:
b2:34:97:f2:db:94:2f:b2:34:94:73:df:bf:07:cb:f7:f4:33:
f2:9d:3c:08:5e:23:7f:8c:90:15:e9:35:32:05:e3:45:9d:0d:
f3:f8:c9:1e:1c:2b:01:9b:3c:47:84:13:77:30:f0:46:a3:36:
2c:40:52:d2:dd:d4:23:cb:e8:9e:3b:42:3a:f7:a6:81:9c:1f:
a1:da:53:85:bb:30:9f:5b:56:1f:64:7b:db:cc:76:c8:47:d5:
6b:96:50:e5:b6:f3:bb:f7:a6:c9:ff:28:4e:74:85:21:43:6b:
a5:c1:f3:90:04:96:bb:9a:57:c5:65:a2:4f:70:d4:8e:ab:50:
52:18:a0:45:b5:95:aa:49:4e:9d:ab:16:29:1c:0e:f3:be:e4:
72:29:02:12:f3:4e:05:8e:8c:79:39:6f:5e:6c:34:9c:87:c1:
52:a8:81:45:99:9a:41:6d:e1:83:41:5a:aa:78:fb:00:e4:3b:
1b:36:73:54:be:48:bc:9d:92:9b:33:64:d9:81:a2:99:d9:7a:
00:5e:b4:48:6d:62:21:8e:ec:cf:6b:87:64:f5:aa:5a:aa:a3:
e6:6e:36:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:31 2025 by rpki-client