Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa
File: 70876b56-c403-3345-8194-f6fcf917a625.roa (raw, json)
Hash identifier: fHrDHKjqR/DhfLr6fkuN+0N1fSsXngBAA1knwgz0G0A=
Subject key identifier: 85:56:0A:61:B1:71:1A:C8:5F:85:EB:77:E2:FE:6F:3F:31:70:D0:A4
Certificate issuer: /CN=94543699-4d50-4a37-8000-038c38671a86
Certificate serial: 010D0C9F432858491246A5EF96A2ADDEDDD96D00
Authority key identifier: 03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 22115
IP address blocks: 172.111.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:a5:ef:96:a2:ad:de:dd:d9:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94543699-4d50-4a37-8000-038c38671a86
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=31ed2b39-2002-47ce-97e3-94ec21c5d81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ae:f6:69:b4:d6:03:59:6e:f1:69:d4:72:fc:
8a:4a:e0:f8:ce:de:44:a7:b3:e3:d7:d5:70:30:2e:
e7:f2:04:53:8c:ed:52:8e:79:e8:46:35:34:75:3d:
fb:27:0d:e1:98:da:00:17:b7:42:0f:d9:7c:7d:6b:
74:91:32:96:3e:bf:ec:88:68:7c:e0:b5:e4:05:16:
36:c7:87:cc:43:12:a8:a3:49:64:ab:e7:eb:e8:57:
7c:a2:56:f6:01:3b:ca:00:b5:29:85:86:e7:cf:2f:
c9:7e:a3:9a:ba:8d:0e:70:78:16:4b:d8:91:50:2a:
da:eb:57:63:61:0f:15:a2:ef:6b:84:5b:ca:68:71:
ee:a0:01:cc:e7:88:36:21:54:10:05:dc:69:b9:a6:
cf:5e:f2:7e:2e:03:59:77:ee:95:e6:9a:55:46:a5:
6e:da:c5:ff:78:31:0f:20:aa:4e:e6:08:f1:82:c0:
f9:8d:ba:5b:92:f1:2c:32:4f:14:de:3e:a0:70:60:
d9:7e:12:5f:9c:fb:2f:f6:87:04:54:9a:57:e2:da:
d6:8c:d2:e7:f8:a3:30:e7:ff:31:a6:4a:74:43:87:
4b:a1:9d:de:0b:a6:32:34:dc:48:0f:42:3b:ba:1f:
4b:70:8c:a8:9c:2b:d8:24:98:df:27:e4:7c:3b:f3:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:0A:61:B1:71:1A:C8:5F:85:EB:77:E2:FE:6F:3F:31:70:D0:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/70876b56-c403-3345-8194-f6fcf917a625.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86/94543699-4d50-4a37-8000-038c38671a86.crl
X509v3 Authority Key Identifier:
keyid:03:F9:93:D0:3A:C4:C9:F5:95:7D:21:84:67:FF:6C:5B:D1:56:81:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/94543699-4d50-4a37-8000-038c38671a86.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:f0:6e:4b:3a:fa:65:c7:08:17:43:b3:44:26:8a:61:11:d1:
5c:15:e9:50:7c:0e:1b:d3:9b:5c:a4:c1:7c:40:dc:11:3d:e7:
cc:3e:f2:7f:03:c1:ab:3c:b9:a8:62:1b:f5:c5:dc:42:02:d2:
9b:a2:5b:f1:d8:af:3d:5f:e2:ff:ef:1b:ba:14:34:59:01:b6:
7d:e4:65:88:b6:eb:2b:2c:73:16:9a:7c:13:cf:71:d4:1d:0b:
4c:bc:b8:dc:3f:12:48:eb:df:fe:06:e5:06:69:0b:b8:42:26:
f1:1e:bc:6b:2c:5d:7a:2d:21:b7:3e:85:18:e9:56:e4:03:20:
ba:b9:88:58:e9:64:4a:8a:54:f1:46:98:a8:e1:57:83:77:06:
84:53:f2:0a:06:47:6c:8e:08:fe:4a:a7:0f:fa:f3:23:d3:fc:
3d:9b:4e:ea:e1:89:19:7f:4a:7a:27:dc:68:d7:76:3c:ee:d3:
24:94:1d:a3:d5:20:04:23:cc:20:54:7c:ba:3c:df:52:99:fd:
71:a9:65:ee:81:9e:bb:15:a2:5e:33:2e:b7:3b:5b:26:1c:f3:
31:bc:54:24:a8:f7:38:45:f9:5c:0a:3c:e9:8c:0f:08:75:bd:
9d:67:31:b7:9f:18:4e:7d:9d:97:ae:80:c6:93:8f:4d:58:e1:
20:b7:4c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:44 2025 by rpki-client