Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/839341cc-0aaf-3471-af94-3361bd95b2ae.roa
File: 839341cc-0aaf-3471-af94-3361bd95b2ae.roa (raw, json)
Hash identifier: npY6y6Ug+B5kt2UIUfuG7Nd7KcJM7qeFr5ABWdRmsS4=
Subject key identifier: 6C:FD:9A:BC:0F:F1:88:1F:8B:4E:F9:46:61:95:4A:6A:D1:E6:D8:FA
Certificate issuer: /CN=0abec8f8-ce42-427b-82b4-7accd51f9db8
Certificate serial: 010D0C9F43285848A29B493BC4ED3BD0BBC14400
Authority key identifier: B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/839341cc-0aaf-3471-af94-3361bd95b2ae.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 16509
IP address blocks: 168.203.5.0/24 maxlen: 24
168.203.6.0/24 maxlen: 24
168.203.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:49:3b:c4:ed:3b:d0:bb:c1:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abec8f8-ce42-427b-82b4-7accd51f9db8
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=6dd02918-9acf-4af0-a0f7-cf1b6119678e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:7d:a3:4b:64:bb:8d:ba:0f:20:dd:16:72:
fd:84:82:28:9b:73:61:42:33:cd:34:0e:23:97:38:
df:a9:1e:d8:77:f4:e2:66:2e:69:c2:d9:a7:4e:ef:
dd:59:af:4a:04:27:f6:9a:b8:1a:ed:c9:21:7b:21:
db:bb:02:9a:b8:3f:71:e8:c9:73:ad:29:e1:6f:54:
f1:e1:6f:be:74:3e:4c:c8:59:c0:09:f8:d8:c2:47:
85:8a:ff:c5:b3:49:3d:03:e8:64:41:6c:2f:60:0d:
87:02:60:13:bd:59:f4:11:b4:4b:88:12:df:64:e1:
5d:e1:a6:32:9c:6a:ac:48:20:bf:09:5f:e9:11:35:
e3:60:d2:68:63:a7:2a:c3:2a:69:0b:01:a4:83:f0:
96:85:05:8d:3b:cd:bb:43:97:31:83:8d:40:74:8a:
42:44:d0:a2:de:48:f2:86:c6:be:2a:58:1a:5a:c0:
c5:dc:2e:43:76:0f:1d:35:7a:d9:81:b7:6c:f3:98:
4e:68:e1:48:81:84:53:b7:9e:6d:3c:56:1d:0c:04:
aa:90:53:38:59:e2:90:98:5a:4e:45:90:5a:9e:f4:
ff:4d:6a:01:62:2e:c6:2b:08:ea:4f:80:b7:a0:24:
12:e4:2d:4b:f6:14:9f:a2:be:8a:0c:1e:03:a1:54:
44:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FD:9A:BC:0F:F1:88:1F:8B:4E:F9:46:61:95:4A:6A:D1:E6:D8:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/839341cc-0aaf-3471-af94-3361bd95b2ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8/0abec8f8-ce42-427b-82b4-7accd51f9db8.crl
X509v3 Authority Key Identifier:
keyid:B4:A1:3C:AE:F1:27:04:84:03:2E:13:D5:F1:53:6F:37:5E:98:E6:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0abec8f8-ce42-427b-82b4-7accd51f9db8.cer
sbgp-ipAddrBlock: critical
IPv4:
168.203.5.0-168.203.7.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:83:60:6b:ec:02:1b:8b:6b:93:d7:93:c4:9c:f5:54:10:24:
40:e1:39:25:88:fd:64:55:42:ed:13:b5:48:df:60:31:5e:8f:
08:9d:f9:1d:8b:93:d0:15:fd:2f:49:8a:b3:b2:18:65:1e:48:
04:88:81:0e:cb:4f:68:93:4d:0c:b9:84:d9:63:4e:ff:a2:5a:
de:22:fb:d1:ff:a4:f6:12:a8:d4:51:0d:5e:a8:d0:63:95:84:
6d:9b:0e:00:4d:2d:5f:cc:33:47:15:be:eb:f9:b4:1c:af:c7:
b6:f9:66:67:16:3e:2c:e7:36:15:78:99:32:a3:8e:4e:7c:d6:
a8:a4:ea:14:be:1f:ae:86:24:61:26:e1:c4:aa:08:9c:16:56:
af:0f:cf:a3:7a:53:1c:cf:fa:d8:15:e0:87:d7:e0:f4:4f:dc:
2a:0e:23:9b:b5:81:13:b3:0d:c1:be:70:b9:22:d8:8d:31:ed:
e2:d4:82:92:d0:c8:c9:4f:08:29:7e:67:18:b0:ed:5a:fd:ca:
84:63:cd:e5:7c:bb:74:9f:8c:61:a5:cc:03:e7:03:cd:5e:be:
03:3b:fc:41:c6:8d:ce:1d:bb:e4:ee:08:66:64:1f:7e:d2:6a:
68:37:da:96:c2:31:a2:2b:c7:0f:e9:f8:5b:ff:36:05:58:76:
e3:4d:6f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:01:55 2025 by rpki-client