Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/3392c9e4-e599-3cf9-b749-3c84f8b00cf0.roa
File: 3392c9e4-e599-3cf9-b749-3c84f8b00cf0.roa (raw, json)
Hash identifier: aXbslPXsaLoPBIXFjjdLulxuozuGn27t5oKF6PNLawI=
Subject key identifier: 82:C3:D7:1F:07:FD:53:91:ED:75:79:CA:20:A6:54:6E:34:3A:75:AC
Certificate issuer: /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
Certificate serial: 010D0C9F43285848854B4E3CC64F5642BCC10480
Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/3392c9e4-e599-3cf9-b749-3c84f8b00cf0.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 397654
IP address blocks: 172.86.230.0/24 maxlen: 24
172.86.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:4e:3c:c6:4f:56:42:bc:c1:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=6e7370dc-62bc-46ad-8db6-e90fcf7aa6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:bf:37:5e:6b:6a:05:26:99:66:0a:32:ae:
1b:ee:7c:19:a1:06:b4:8d:cb:6e:14:0d:a9:da:20:
06:4c:32:d9:e7:3e:9c:da:10:1f:fb:e4:45:a0:3f:
cd:eb:bd:e1:81:02:42:bf:e5:ed:f0:98:ca:97:37:
2e:b0:1d:8c:67:46:e4:13:14:35:16:f3:11:3a:7f:
59:f5:3a:a7:61:b7:4c:fc:93:f9:9a:5f:28:b3:c7:
f2:9e:05:90:cf:85:5e:ec:4b:60:23:86:7e:ff:e3:
bf:9f:af:0d:71:ec:56:de:82:cf:66:6f:5b:ea:d5:
41:a0:ee:53:a3:d8:17:d9:7b:ba:e2:72:6e:26:3c:
76:ed:e6:9a:1e:36:f7:bc:8d:b6:0b:50:cd:71:52:
38:f6:8f:1d:07:f1:e0:ca:63:fa:ce:eb:8e:31:3d:
41:ca:1a:1c:b9:4f:b3:86:6f:59:5f:fe:eb:9a:40:
1d:08:87:de:74:05:d5:b1:ec:61:1c:27:ed:56:f9:
be:d4:2f:d4:6c:f1:10:f8:38:e7:1c:8c:21:7f:13:
31:52:48:65:9d:84:b5:1e:56:64:7a:28:58:df:c4:
b5:86:30:26:c8:da:c7:ee:a9:d2:6f:a5:cc:03:3a:
f8:75:01:38:19:25:40:1e:86:6b:a4:48:3b:15:cc:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C3:D7:1F:07:FD:53:91:ED:75:79:CA:20:A6:54:6E:34:3A:75:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/3392c9e4-e599-3cf9-b749-3c84f8b00cf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl
X509v3 Authority Key Identifier:
keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
sbgp-ipAddrBlock: critical
IPv4:
172.86.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:2f:be:44:07:4c:52:5a:b3:fa:06:ac:42:a6:47:98:84:f7:
a2:61:4f:e4:e2:28:6c:b0:02:f9:8a:2a:23:d1:7a:51:af:84:
1a:1d:62:7d:97:ee:6c:e8:68:c5:99:a4:c9:bb:5d:32:23:e7:
3a:09:ff:f5:ee:96:d6:c1:ee:cd:1c:00:34:4c:9e:67:92:81:
d8:9c:01:bb:a0:ff:12:e3:a6:50:b2:de:3c:47:9a:dc:df:a0:
c0:e1:33:8a:0c:6c:9f:f1:a3:59:a4:8d:94:2b:20:dc:8b:c9:
8e:06:c9:e2:db:ed:22:73:7d:97:f8:fe:1a:01:6b:32:dd:22:
b4:d0:f4:fd:c1:c8:66:1d:eb:2a:52:a2:04:78:b6:8d:3c:b6:
1a:60:f6:19:0e:6e:4d:7b:5d:5e:b3:27:07:74:b7:1e:a3:49:
6d:30:a0:b5:18:89:eb:cf:5e:a5:41:62:4e:f2:d6:02:27:a9:
4e:08:7b:20:7e:be:60:f0:e1:d0:91:d7:89:3a:0c:ca:ff:b6:
21:80:25:e6:8f:e7:44:9e:78:7c:f3:53:91:b8:48:f0:ef:74:
46:5f:22:df:2d:41:35:d0:8b:65:32:b8:f2:2c:da:0e:27:46:
c9:9e:6a:bf:4e:25:2e:89:84:f3:4b:01:52:96:11:be:e3:33:
ec:f8:b2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:29 2025 by rpki-client