Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/ae6c81a2-f3d6-3c3b-b934-91ecb9ced64b.roa
File: ae6c81a2-f3d6-3c3b-b934-91ecb9ced64b.roa (raw, json)
Hash identifier: 8hbITmntyu3qmACtBnIZfJlmHa6bd7ekSY5b3w4aaS4=
Subject key identifier: 4A:2A:D7:EF:87:F3:B0:BF:D4:76:3A:DC:56:57:40:95:8A:B2:C2:F3
Certificate issuer: /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
Certificate serial: 010D0C9F4328584949FE93622E1F13693B45BB80
Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/ae6c81a2-f3d6-3c3b-b934-91ecb9ced64b.roa
Signing time: Mon 24 Mar 2025 01:00:38 +0000
ROA not before: Mon 24 Mar 2025 01:00:38 +0000
ROA not after: Sun 22 Jun 2025 01:00:38 +0000
asID: 398655
IP address blocks: 204.108.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:49:fe:93:62:2e:1f:13:69:3b:45:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
Validity
Not Before: Mar 24 01:00:38 2025 GMT
Not After : Jun 22 01:00:38 2025 GMT
Subject: CN=e61c0c73-7755-4603-9926-d361056db4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fa:93:eb:7a:fa:46:1b:cb:2f:bf:1d:2e:88:
e0:e6:a5:4e:74:b9:c4:ab:b0:d7:75:d8:34:47:e6:
d3:5d:ce:8d:c4:01:d5:d2:31:fb:b8:e1:15:83:dd:
97:77:d4:79:b7:c2:71:55:4e:e3:c4:e5:93:a3:8e:
b6:33:2f:e2:74:9a:6c:ec:28:e8:40:92:d9:68:cf:
6a:23:2f:99:d0:3f:de:a7:12:92:4a:bc:28:f6:bc:
0b:0f:16:3b:26:7f:34:72:07:f6:e4:7a:87:e0:d8:
2c:fc:aa:18:eb:74:01:d1:e1:dc:f7:70:2a:c1:bd:
20:00:b8:37:e3:5b:f8:af:c2:f0:c3:e8:36:1f:15:
98:3d:e7:c5:9a:37:d9:1a:b5:2f:24:8b:f2:7b:b1:
78:51:87:e3:7b:60:c1:fc:c9:f8:8d:c5:cd:31:30:
52:53:27:72:15:14:a4:c7:19:ae:12:ae:62:e0:c6:
13:ff:df:ff:07:d1:65:1f:55:07:13:a3:f2:49:46:
f4:7e:35:45:17:d1:a0:e0:0d:df:e5:dc:60:b5:81:
f6:10:e2:6b:56:0f:e8:b8:2f:ef:23:c8:c1:22:e8:
3a:b6:17:9b:99:9b:95:84:f4:11:88:1f:e2:09:43:
93:e7:52:2c:f8:e1:39:dd:cc:e0:29:fc:be:b7:99:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2A:D7:EF:87:F3:B0:BF:D4:76:3A:DC:56:57:40:95:8A:B2:C2:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/ae6c81a2-f3d6-3c3b-b934-91ecb9ced64b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl
X509v3 Authority Key Identifier:
keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
sbgp-ipAddrBlock: critical
IPv4:
204.108.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:cb:f3:bf:aa:81:2d:c7:30:52:28:89:70:dd:00:d9:a3:5a:
0a:28:00:0b:b8:e3:95:ab:00:95:f2:41:be:e1:c3:d1:77:06:
dc:78:da:e6:71:e1:dd:03:45:c5:7e:a2:fb:32:f4:aa:e2:10:
f2:2b:bb:65:4c:9e:15:18:2f:64:4f:a8:25:c8:04:7c:62:02:
74:41:80:32:c2:b5:79:bc:e1:17:52:ce:66:41:ad:6f:7a:be:
1f:b5:df:86:37:71:12:bb:c2:d9:59:0e:15:9b:b7:e3:78:72:
8a:3e:34:9c:78:8e:57:16:f0:73:76:f1:f1:a6:1c:67:99:14:
36:57:b1:d2:af:55:b0:31:16:23:6b:88:7f:64:4d:d4:a5:4d:
24:46:6b:91:dd:37:d7:5d:fc:3d:81:23:d6:ff:29:55:59:99:
92:7a:ed:a7:e9:55:15:c8:89:cc:03:c1:2c:fe:ae:c9:de:a7:
d3:6e:11:2e:5d:19:7d:d8:d1:b6:ef:f4:20:dd:0f:74:a9:23:
d5:16:5f:ad:35:28:2e:c0:25:0f:71:4a:0d:d3:0b:4c:ce:01:
0b:4b:a9:ad:35:05:13:bf:51:eb:e2:76:11:e5:10:50:e9:30:
9a:99:cd:87:b7:e9:9a:be:83:49:45:96:54:13:43:5e:e8:6e:
26:5f:bc:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:38 2025 by rpki-client