Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1764c104-a616-3deb-af04-69c6cae09b7e.roa
File: 1764c104-a616-3deb-af04-69c6cae09b7e.roa (raw, json)
Hash identifier: GwgJx8X34eaLygzegLfEnLIqsoXF5JAUwQiAaKfVDNI=
Subject key identifier: 7A:B8:B5:AD:1F:17:1F:1D:C4:C9:B6:44:EA:70:27:36:B4:8A:04:8C
Certificate issuer: /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Certificate serial: 010D0C9F43285848960B5B03061472390E832700
Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1764c104-a616-3deb-af04-69c6cae09b7e.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 31898
IP address blocks: 153.84.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:5b:03:06:14:72:39:0e:83:27:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=8bf98314-6811-4fae-9948-3a1c3796d918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:e4:61:53:fa:b3:0b:4b:83:c5:88:ad:ea:
61:e1:a3:aa:65:fb:58:52:e1:69:28:68:c2:e0:52:
8f:5e:17:0f:d4:72:c1:cd:5a:e2:f5:f2:37:c2:60:
60:8d:47:3a:9a:a7:b5:5c:81:94:31:58:be:cf:f9:
23:11:02:dd:fb:c9:e5:35:35:47:5f:81:46:81:3e:
d3:74:27:2e:12:fe:d9:53:fa:58:0b:57:84:7e:06:
a1:5e:a5:c5:ea:a5:8a:66:fe:98:6d:15:86:1c:8d:
8b:cf:08:59:d5:1a:28:c8:75:98:19:54:5c:2c:b5:
66:83:95:49:d8:34:7b:2e:a0:a0:ed:1a:7b:de:73:
d2:32:8b:01:65:95:01:ae:83:e8:63:0e:c9:42:47:
eb:1f:16:b9:d3:66:af:39:ed:c5:1a:e2:e7:68:cf:
70:f6:dc:34:30:10:1b:fe:e2:91:59:13:9f:fa:90:
81:d4:df:da:0b:d6:67:ec:08:43:b0:36:d5:a5:81:
ed:9b:73:01:5f:d3:55:dd:ba:60:a5:ba:fc:70:5d:
83:5d:aa:1b:d7:b8:35:dd:86:f8:ea:a2:94:86:64:
e3:10:63:87:66:1a:ce:10:00:36:e9:31:6b:9d:b7:
4f:37:c0:e9:09:aa:80:f6:dd:00:df:a2:99:b9:c4:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B8:B5:AD:1F:17:1F:1D:C4:C9:B6:44:EA:70:27:36:B4:8A:04:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/1764c104-a616-3deb-af04-69c6cae09b7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl
X509v3 Authority Key Identifier:
keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer
sbgp-ipAddrBlock: critical
IPv4:
153.84.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:c3:d5:11:c7:bd:43:4b:39:b2:ac:bf:3e:26:d5:5d:d6:0e:
43:fb:75:77:9a:1a:02:11:63:c9:e3:e7:e4:e1:fb:65:17:b2:
81:f5:8b:6b:bc:55:8f:e2:52:9b:d1:f9:8b:50:2a:77:f9:44:
cd:57:6b:0f:f6:b0:a9:a5:76:87:0a:44:3b:1b:df:58:66:47:
52:48:59:ac:d4:76:64:c1:a1:cc:23:a6:85:f7:83:2b:1c:65:
ba:22:31:64:c8:1b:03:c4:2b:63:a0:5b:8e:7e:63:9a:ea:84:
80:88:5b:f0:f1:9d:48:74:46:bd:0d:81:8d:90:45:be:b8:61:
1a:b4:fd:db:68:50:26:40:29:ac:ec:bc:5a:7e:4f:b4:b5:82:
47:b7:1d:b4:a6:1f:49:f2:02:a1:d4:c4:e2:b7:93:54:13:1c:
d6:4d:01:38:21:55:d2:e2:e7:98:bb:a8:d1:4e:32:63:3e:be:
58:28:53:c4:ae:88:b2:28:ee:6e:07:ed:c6:a9:25:07:23:58:
36:80:89:f2:b5:87:c0:a4:75:3c:18:39:d5:92:03:35:72:6e:
71:40:ab:2a:0f:80:2f:01:33:32:08:3c:98:00:dc:84:ed:c7:
5b:85:c4:69:71:68:11:64:5b:47:49:a7:b9:69:a6:9f:a0:6e:
a1:6f:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:28 2025 by rpki-client