Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa
File: 420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa (raw, json)
Hash identifier: 7AAwX+t8w5VnL/o5TL+0FhPAnHupTmZn4n7a9vTpV24=
Subject key identifier: 0E:CE:E4:67:25:3F:E1:54:94:EE:8F:AD:07:F5:DF:39:40:7B:3F:7D
Certificate issuer: /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial: 010D0C9F43285849780F0F4FD0F1E20354104C80
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa
Signing time: Wed 09 Apr 2025 13:01:01 +0000
ROA not before: Wed 09 Apr 2025 13:01:01 +0000
ROA not after: Tue 08 Jul 2025 13:01:01 +0000
asID: 203
IP address blocks: 135.84.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:78:0f:0f:4f:d0:f1:e2:03:54:10:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Validity
Not Before: Apr 9 13:01:01 2025 GMT
Not After : Jul 8 13:01:01 2025 GMT
Subject: CN=fb4acbc0-47d3-4721-8246-6bcf8045e2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:13:95:ff:c9:a9:1a:9c:93:5b:5f:98:c4:
46:62:1e:21:ca:4b:cd:66:f8:c9:ad:a0:ee:67:8c:
40:13:94:00:92:6f:85:e7:50:01:93:24:ee:92:9b:
10:45:ed:b2:84:7d:5b:b6:22:ba:b0:a3:bc:7e:26:
15:d6:b0:93:ec:49:a0:ce:39:bd:a9:91:5b:df:7b:
fd:d9:0f:20:fe:df:50:bf:c5:b6:b2:35:28:8b:33:
b6:08:85:d9:9c:58:23:39:98:99:05:53:01:cc:e3:
77:55:25:c9:06:9e:29:fa:f3:bd:39:1b:22:f7:46:
79:ec:7a:de:2f:1b:75:3d:fc:fd:2c:ae:02:11:bd:
14:32:5d:c3:34:a1:fd:16:a4:e9:ce:0d:d1:b9:53:
f1:7d:00:03:42:e3:2b:6a:dd:e3:d6:06:d3:e8:1d:
3c:d8:8c:ba:99:26:e3:5c:ea:b7:44:09:5d:32:6f:
81:8d:00:f8:59:15:bd:6f:69:10:43:92:ba:70:83:
b4:43:84:49:9c:f7:a9:79:d9:63:03:f0:b1:92:45:
b9:31:f9:aa:c6:22:90:2d:82:95:3b:87:45:3a:39:
2e:c7:b1:29:19:b6:52:99:63:ad:8d:b7:6b:fd:81:
3f:e7:fb:26:e6:c3:af:72:5b:63:da:3f:99:15:d8:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CE:E4:67:25:3F:E1:54:94:EE:8F:AD:07:F5:DF:39:40:7B:3F:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/420c59c6-76f5-3a1f-ad30-ade90f37c6f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
X509v3 Authority Key Identifier:
keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
sbgp-ipAddrBlock: critical
IPv4:
135.84.120.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:3c:9d:41:f0:0a:d5:73:21:5a:c3:ae:39:35:ce:52:57:d7:
1d:90:63:a6:38:02:0d:f9:8f:e3:a7:11:0e:55:67:1a:18:10:
74:5d:c1:a6:20:dd:e4:fb:9e:1d:47:92:47:66:d9:86:76:94:
70:10:04:e8:11:4f:77:e5:a5:dc:a6:0b:40:a9:54:0b:cf:b4:
82:9d:60:01:65:d3:fd:ca:f0:da:9c:d5:f8:24:6c:f1:7e:97:
d5:a5:0f:e6:0e:2e:96:18:62:fb:8f:20:b5:83:11:26:fc:76:
18:8f:90:9d:33:9f:67:1a:ba:c3:c2:dc:39:52:1a:f4:a3:f4:
46:2a:a4:b1:ac:20:1f:cf:ca:78:d4:a2:0d:3a:1e:65:0a:eb:
a9:52:39:ec:e2:06:ac:34:eb:4a:4a:3e:f8:fb:ed:22:e0:d0:
2f:22:df:5b:bc:0b:09:0a:be:0a:a7:7f:94:c3:8b:f2:b9:38:
a4:b2:0f:59:d3:5e:25:c2:61:23:80:99:b4:0e:02:cd:25:20:
23:f0:74:15:e0:f0:97:ed:f0:c4:a8:13:8d:78:ce:ca:6e:5f:
66:12:6c:f6:91:53:c8:22:b5:f9:5f:c4:96:ab:2c:89:4a:6b:
b4:e1:f0:b8:57:11:7f:cb:c2:01:2a:9e:b0:ab:29:42:44:75:
e2:42:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:19 2025 by rpki-client on console.sobornost.net