Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa
File: cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa (raw, json)
Hash identifier: pkc/vbnEty5KznDpbQbDu7QOtyPBs84/pG54AQj+HpU=
Subject key identifier: F0:BF:1A:68:5C:92:9D:81:54:1D:58:AC:E3:F3:7A:C4:63:4A:06:38
Certificate issuer: /CN=590ea78c-91e2-45e2-b596-eeeedd529e3e
Certificate serial: 010D0C9F432858489A3B45C295859D2FAFF0BA80
Authority key identifier: 73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 11399
IP address blocks: 204.225.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:45:c2:95:85:9d:2f:af:f0:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590ea78c-91e2-45e2-b596-eeeedd529e3e
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=adbe7544-f710-4f0f-b543-a7692b5890d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:bd:dc:3d:4f:13:56:d9:d3:13:c1:0c:a1:
9a:2c:15:50:f5:e9:6d:00:78:83:72:b1:f9:ec:f3:
21:93:39:90:8b:72:f9:c3:57:95:32:ef:4a:9d:b0:
9c:0c:01:9c:ef:bd:78:2c:3b:d2:5c:05:3a:ba:d9:
7b:31:78:0c:90:4e:e0:1d:79:02:da:6e:2d:ff:d7:
b3:fe:05:69:04:21:4e:46:73:a9:3a:76:46:03:fd:
e4:f9:81:c6:66:e8:bd:b3:98:d2:53:b4:4d:2b:a9:
15:d7:ea:33:8e:86:9a:07:ba:a4:92:1d:9a:a6:b7:
cf:bb:09:3d:5b:8b:c3:a0:f7:27:70:2a:6c:71:7b:
ce:25:d8:01:5a:63:c0:7d:fb:73:42:32:c5:20:dd:
d7:ff:2f:65:49:96:36:27:e1:85:e3:7d:6d:67:30:
cb:55:38:ab:5a:7d:04:4d:83:f2:a0:8d:b8:fb:dd:
e7:19:de:15:84:23:54:bb:85:fb:5f:eb:cd:f1:2d:
82:ce:10:5f:14:08:ce:6a:cf:75:41:b1:62:7d:8d:
05:97:8c:5d:49:95:b9:47:2f:ff:76:90:d4:3b:c0:
2b:d5:cc:15:5e:7f:eb:b8:3b:5c:3a:0d:3c:1d:14:
bf:2a:20:cd:55:f3:4c:e7:d9:b6:bb:15:36:7d:7d:
17:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BF:1A:68:5C:92:9D:81:54:1D:58:AC:E3:F3:7A:C4:63:4A:06:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl
X509v3 Authority Key Identifier:
keyid:73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer
sbgp-ipAddrBlock: critical
IPv4:
204.225.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:57:f9:bc:4f:c9:50:78:6f:f3:0e:58:ba:43:ec:e9:b8:05:
cf:a6:26:38:38:8b:16:d7:66:d5:10:ab:e8:7b:02:13:90:7f:
51:c0:88:0a:50:f0:5e:ca:43:3b:9d:82:7f:54:d3:1f:02:36:
62:7c:6e:42:b3:0b:80:58:a5:7b:f8:04:40:17:87:44:44:a1:
2d:05:37:6c:97:36:ce:a5:de:82:e3:6d:3e:66:6a:7e:b0:b2:
56:5c:52:4f:76:25:62:36:3f:ee:45:92:a1:af:f7:32:a3:05:
76:3e:cb:9b:6b:74:0d:0a:fb:4a:35:67:95:3f:8f:d2:fb:ff:
f5:4b:d8:de:f6:ba:aa:b3:40:20:cd:24:9c:ef:34:f9:94:91:
ed:b4:16:96:e9:53:81:95:d4:80:cf:6f:47:7f:7f:f1:12:da:
7e:ba:25:d1:a5:98:d1:e0:67:d6:5d:90:50:2a:0f:34:72:67:
b8:8d:e2:70:fa:c9:0f:2d:f2:6b:65:21:ef:46:48:48:74:b4:
18:58:52:ff:1c:f1:06:d0:ce:42:23:a7:88:cc:ef:e8:16:6f:
7b:3e:a3:ab:e2:47:70:93:36:67:cc:82:e9:85:19:52:25:9d:
2f:a7:27:05:67:b1:a1:65:a6:a1:16:46:14:af:13:46:3c:78:
3f:33:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:38 2025 by rpki-client