Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/b090fc5f-3898-3c66-b20f-d906ad75a3c9.roa
File: b090fc5f-3898-3c66-b20f-d906ad75a3c9.roa (raw, json)
Hash identifier: FrbJnCAk9Ba5jKxwaIpM6Sd8GTjTHA2buoX0GTipjmI=
Subject key identifier: F3:7D:15:79:6E:56:3A:50:16:E0:89:30:80:DF:4A:59:30:6B:5E:FA
Certificate issuer: /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial: 010D0C9F4328584900214DBAFFF8E8C49D5C3C80
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/b090fc5f-3898-3c66-b20f-d906ad75a3c9.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 170.176.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:4d:ba:ff:f8:e8:c4:9d:5c:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=b5da50a1-2025-4320-979d-80d22f27e5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:1e:62:c6:2e:b6:ff:bc:8a:77:28:8d:c6:
77:de:b0:62:a4:d1:6f:29:9c:d6:a8:cc:a1:5f:b6:
d7:d0:dd:9d:9b:7b:6e:00:d3:21:00:f3:05:24:fb:
6d:bb:0d:a9:dd:34:cf:60:d0:b9:8b:0a:bc:a9:5d:
8d:8e:5f:86:9a:9d:9c:b1:cd:83:90:42:b2:77:55:
b2:f3:be:34:52:60:21:fe:1d:d9:33:44:79:52:bd:
b1:dc:dd:8c:e9:f6:ba:1b:12:6d:78:35:91:71:f2:
a4:1a:c5:f2:08:af:c6:b1:92:18:5d:f1:57:41:be:
6e:05:54:dd:84:38:95:d8:4c:cb:30:43:1e:8b:be:
89:a1:fa:13:f3:0b:aa:e7:08:1e:27:9c:8f:be:27:
3b:d9:bd:bc:cc:f0:4f:d8:b0:7c:26:9b:e5:fe:27:
a2:05:7a:d1:21:02:1b:2f:18:50:d8:45:1c:1d:43:
b0:51:59:dc:24:77:3c:dd:dd:b9:6d:44:b0:de:7e:
f5:0a:ce:f2:22:be:e9:8f:21:91:e7:d3:03:00:d8:
ee:2b:2c:7b:72:72:68:46:1c:e1:cd:3e:19:e6:83:
b6:bf:32:0e:34:24:95:a0:c9:a4:00:6f:29:b9:05:
e0:99:90:b3:ae:ea:97:05:a2:2b:cd:65:14:da:f5:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7D:15:79:6E:56:3A:50:16:E0:89:30:80:DF:4A:59:30:6B:5E:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/b090fc5f-3898-3c66-b20f-d906ad75a3c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
X509v3 Authority Key Identifier:
keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
sbgp-ipAddrBlock: critical
IPv4:
170.176.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:e4:51:27:c7:9c:48:05:ac:06:bd:c2:79:ec:65:65:5e:34:
0c:52:d7:5d:3e:87:6b:8a:6b:9e:b3:56:06:87:25:f2:6b:7b:
7f:24:c4:db:54:cd:4a:69:f9:e5:f7:13:ad:ca:7e:9f:65:08:
5d:e3:d2:9a:06:58:81:cc:60:e6:f6:f7:ad:ef:87:60:35:e3:
4a:11:65:69:0a:fa:07:11:e4:a2:cf:f9:3c:5b:95:f4:52:cf:
45:57:34:11:43:5d:e2:5c:50:5c:41:4e:88:f1:6a:1f:e9:84:
f8:f4:d2:03:a4:b5:a1:cc:d5:cb:16:b4:ad:28:32:93:4d:89:
26:3d:e8:56:bd:bc:f2:6a:99:29:b9:88:4f:e7:d3:d8:2a:7a:
d1:25:20:63:f4:64:d7:0a:35:2f:d6:0f:c9:3f:37:0c:b0:80:
d1:e9:43:26:51:4d:ff:a5:e6:98:ed:ae:88:ff:08:ba:92:58:
39:02:37:ca:89:c5:0b:91:52:41:cd:63:52:b9:27:61:c4:17:
63:9b:59:57:e3:03:7e:8d:48:85:1d:a5:41:49:ff:3e:d7:9b:
51:71:d3:f6:73:c5:58:9d:56:6e:17:ca:94:1d:ce:f5:d5:50:
e2:2f:6b:e2:94:da:65:be:81:b6:1e:99:19:03:c5:ea:4c:35:
21:80:4c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:30:07 2025 by rpki-client