Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/658c637a-98ca-3728-8984-bd2a8f1d8035.roa
File: 658c637a-98ca-3728-8984-bd2a8f1d8035.roa (raw, json)
Hash identifier: JcKzLCYvuMdfeoopEAKy7YAdD5S+cLyBgs/IoqvXBoU=
Subject key identifier: 2D:0D:20:BD:EE:77:50:5F:E8:E4:7F:1F:91:86:FA:39:D7:98:98:D5
Certificate issuer: /CN=4ec5b803-bc8c-4215-9539-153e00d47df8
Certificate serial: 010D0C9F43285848A1360DC5F3DA32059765CB00
Authority key identifier: 31:88:E1:78:F6:38:DF:1D:3B:1F:5C:AA:FF:2E:5C:1F:91:D7:60:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/658c637a-98ca-3728-8984-bd2a8f1d8035.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 393463
IP address blocks: 205.153.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:0d:c5:f3:da:32:05:97:65:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec5b803-bc8c-4215-9539-153e00d47df8
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=6b3fd554-3144-4698-8389-2de63f2ae59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:f9:f5:55:48:7a:f8:8f:e9:49:85:da:1f:
f0:29:2f:4e:2a:76:77:0e:a7:9f:fb:83:0b:11:23:
3f:21:3d:56:67:99:54:b4:02:52:7e:ab:6b:3b:24:
0d:36:3b:8a:f8:b4:9c:e3:9f:11:ea:22:f4:ca:ec:
e6:5e:5a:b4:b7:9e:65:81:25:e4:b8:f4:d7:9d:bb:
9c:3c:dc:54:78:3e:ed:60:56:a5:93:74:a3:f6:08:
a9:f4:a9:72:d9:e0:07:00:d6:0c:bc:79:22:f3:a3:
d0:fc:4e:cf:56:5f:14:85:1c:14:e9:39:7c:61:95:
a9:a6:86:87:2e:25:4d:aa:8c:b6:15:c2:1a:57:1b:
b2:a7:1b:32:69:8f:39:36:d0:f4:11:8c:44:b0:d5:
1c:15:ec:13:58:70:94:30:21:98:0d:f5:61:2c:0a:
1e:fd:2c:30:f5:ca:d1:fb:9a:9c:9c:f9:05:6c:22:
44:2e:70:e4:94:77:b2:39:3b:e4:6e:60:01:d7:d2:
68:60:c9:e2:7f:6d:e0:ba:c3:c0:f6:ff:48:2d:8c:
65:2d:39:ee:03:d0:43:10:33:17:07:00:e5:0a:93:
09:d4:db:61:f3:e6:43:ce:5e:96:85:da:f8:84:5a:
54:b9:6a:de:b5:11:c0:99:84:c0:9d:bd:50:02:12:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:0D:20:BD:EE:77:50:5F:E8:E4:7F:1F:91:86:FA:39:D7:98:98:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/658c637a-98ca-3728-8984-bd2a8f1d8035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8/4ec5b803-bc8c-4215-9539-153e00d47df8.crl
X509v3 Authority Key Identifier:
keyid:31:88:E1:78:F6:38:DF:1D:3B:1F:5C:AA:FF:2E:5C:1F:91:D7:60:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4ec5b803-bc8c-4215-9539-153e00d47df8.cer
sbgp-ipAddrBlock: critical
IPv4:
205.153.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:7c:8e:af:a1:45:ad:73:a2:27:f8:11:a7:9b:c6:05:78:4d:
d4:55:2a:39:41:65:47:c1:01:61:9d:eb:65:f4:ce:3a:26:45:
2e:47:53:6a:e3:84:74:19:51:17:6d:e3:b9:18:52:fd:0f:d8:
a7:47:08:8d:8c:b3:9a:b7:cc:a3:04:6f:bd:18:f3:56:1d:36:
00:96:52:f7:ed:19:85:3f:30:c7:35:2b:f2:f4:3f:1b:11:da:
97:5d:22:4c:88:37:c7:6b:98:23:d8:4f:ee:a3:39:97:c3:36:
2c:4c:ce:a3:3e:9c:4f:37:fe:99:dc:8a:cd:3c:7a:83:e3:0c:
60:3b:ca:a2:e5:57:e3:34:47:50:b6:33:2b:03:f6:b2:3d:28:
30:3a:f9:84:62:b9:1e:e8:4c:d1:2f:59:b7:8e:f9:54:11:91:
9e:e4:57:70:72:46:59:ef:61:91:f1:b3:84:00:bf:70:f5:f3:
fd:dc:92:55:fd:9c:5e:c6:bd:c2:6b:d8:14:5c:c4:e3:9b:eb:
07:ef:09:04:19:db:3c:93:50:52:20:6d:56:3d:32:eb:dd:dd:
72:05:c5:13:ae:82:8a:e6:e0:79:7d:da:47:fa:69:2f:95:5e:
e7:31:60:1f:45:c6:a7:7e:cf:0b:02:c2:fe:88:84:13:4a:c5:
60:7a:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:34 2025 by rpki-client