Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/69ffda9b-53c4-3041-a9b5-5190f126e6c7.roa
File: 69ffda9b-53c4-3041-a9b5-5190f126e6c7.roa (raw, json)
Hash identifier: JVC2GDcaR2F4dqJdy/X8G4ZIDmGe6lHSJKGvdTVPdnk=
Subject key identifier: A8:0B:BB:11:EC:1E:A9:0A:EC:83:B2:E7:25:F2:D7:34:F0:39:1E:F0
Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial: 010D0C9F43285848FDCBF5F1E1C5EAF870EDB900
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/69ffda9b-53c4-3041-a9b5-5190f126e6c7.roa
Signing time: Mon 24 Feb 2025 17:57:21 +0000
ROA not before: Mon 24 Feb 2025 17:57:21 +0000
ROA not after: Sun 25 May 2025 16:57:21 +0000
asID: 14618
IP address blocks: 170.176.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:cb:f5:f1:e1:c5:ea:f8:70:ed:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Validity
Not Before: Feb 24 17:57:21 2025 GMT
Not After : May 25 16:57:21 2025 GMT
Subject: CN=1a06d918-1294-42dd-b37d-ad6780661494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:a4:62:c2:3e:e6:40:c5:86:b1:5b:e7:3f:
2a:7d:d9:3a:23:c7:07:0d:cb:78:7e:e0:5c:79:59:
29:ac:3d:f7:81:03:87:48:95:3a:9a:d0:60:87:9d:
d8:84:b8:ef:66:e6:f9:50:fb:71:6d:83:55:c1:7c:
e7:dd:23:84:92:34:05:34:68:7d:66:31:18:61:b2:
2b:b7:84:bd:4f:1f:74:9c:7a:5e:32:df:28:bb:72:
8d:c8:39:c8:c3:ba:6e:2e:c7:dc:76:60:20:7b:59:
b8:8b:28:f1:23:75:cc:a3:83:a7:c7:2e:5d:7a:fb:
83:63:79:7b:d4:74:59:a3:72:eb:cc:15:73:2b:75:
d7:79:ef:1b:a0:98:49:9f:68:c6:32:17:f6:c4:ca:
ed:1e:08:58:5d:dc:cd:a3:98:9d:e2:06:f7:37:d9:
a5:69:bb:54:08:82:93:e2:3f:02:20:10:a7:c6:b5:
40:6f:56:ad:12:9d:38:a7:81:6e:88:80:7b:32:17:
c9:81:58:99:aa:4d:61:e1:82:a8:68:9d:64:97:57:
19:bc:f2:e5:89:9b:7a:2a:22:37:ea:3a:7f:64:81:
9e:e8:74:ff:5f:2a:1b:46:ab:61:18:75:96:ae:62:
ea:c0:bd:77:02:20:75:02:06:e4:bf:cc:e7:02:95:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0B:BB:11:EC:1E:A9:0A:EC:83:B2:E7:25:F2:D7:34:F0:39:1E:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/69ffda9b-53c4-3041-a9b5-5190f126e6c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
X509v3 Authority Key Identifier:
keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.199.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:e6:93:30:8b:b8:dd:ba:e6:c1:43:8a:05:f6:08:ee:55:21:
80:1f:58:5e:df:24:6c:5a:e8:07:98:de:eb:e0:e0:1e:08:0c:
14:5e:f3:17:a1:55:c5:5b:29:d5:4b:23:53:1e:6f:78:0d:f6:
77:bf:e9:7b:d6:88:2f:46:70:e5:d9:5c:a2:35:65:d5:66:18:
47:88:cd:99:ed:f0:63:1c:00:68:5d:2c:cc:a7:d6:ef:44:97:
b4:1b:31:85:c4:18:4a:1f:84:c3:7d:bd:a0:25:04:68:e4:d7:
5d:b0:5a:b7:59:ff:11:b0:f9:26:02:9d:15:0e:c1:ed:e4:e7:
b4:7f:a5:e2:9d:51:07:29:5f:d8:04:fb:de:d5:b8:4c:b2:0e:
90:d2:61:4a:71:ba:82:72:d9:73:d8:79:65:90:54:7c:03:9a:
7d:22:cd:5c:53:e8:5a:a7:de:f7:3d:68:aa:89:e9:57:65:c6:
b5:d3:ed:87:88:f5:0c:8e:f8:5e:4c:d1:5a:78:cd:33:d2:35:
1d:f2:15:3e:62:74:9b:8e:88:02:a9:64:0e:49:26:1e:98:f6:
63:43:99:c6:aa:73:92:90:be:a0:3d:ca:91:e2:93:6a:5d:4c:
c1:a7:fe:ab:c5:68:87:41:2a:a7:d5:00:4d:2f:02:e9:cd:d3:
bd:de:07:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:40:08 2025 by rpki-client