Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ad31075d-6561-3431-956d-53bb1915b644.roa
File: ad31075d-6561-3431-956d-53bb1915b644.roa (raw, json)
Hash identifier: Wo61eyJ6cGEWuF4WSLddCNUNad9UKvA2zmwANUmaG7Y=
Subject key identifier: 3A:5F:3E:57:96:F6:13:AC:5A:D8:4C:F0:70:B0:15:3C:69:5A:38:16
Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial: 010D0C9F43285848E2D10EB6A52F589D856BED00
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ad31075d-6561-3431-956d-53bb1915b644.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 16509
IP address blocks: 192.161.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:0e:b6:a5:2f:58:9d:85:6b:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=4b9e554a-16ca-47c7-9500-b234aa9128d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d8:25:92:27:15:11:ef:21:b8:95:c3:fd:63:
8f:83:0f:4c:62:22:32:97:e5:d9:ed:2f:48:19:d8:
ce:d6:78:5c:ae:31:5d:31:87:40:1f:1a:21:9e:67:
9f:66:33:8f:82:f7:e5:5c:8f:e8:db:e1:de:f1:c9:
9e:c4:46:01:9f:3e:dd:38:2d:8d:45:d5:3a:0f:e5:
ed:d5:da:df:93:68:68:78:bf:f6:a3:37:cf:bf:71:
a2:1e:9d:9d:8d:70:c0:39:07:01:c9:ed:95:02:58:
cc:ca:82:99:df:28:64:a2:7c:29:39:b1:31:47:46:
fa:61:c2:ce:7b:7d:93:64:17:dc:d3:bc:7c:d9:de:
00:3e:b9:b3:d6:a3:6b:20:53:85:fc:72:59:fc:ad:
ed:24:40:42:0f:f6:37:77:df:f1:df:ba:12:99:d5:
1b:68:c3:e4:81:9b:ba:e5:2a:e2:2f:78:f1:a5:34:
b1:5d:0e:80:ec:d7:84:2a:0e:da:8b:02:5b:63:b5:
cc:7c:8f:37:c9:cc:6f:ad:ed:a3:ab:b3:50:5a:2c:
cf:b6:98:ad:89:0e:c4:be:23:0c:86:f4:cb:2b:04:
04:e6:8f:b3:20:9b:88:6d:1d:5a:0e:4e:0a:a7:58:
70:c6:ae:e7:4a:b2:bd:55:d8:55:6e:7f:e7:70:34:
9f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5F:3E:57:96:F6:13:AC:5A:D8:4C:F0:70:B0:15:3C:69:5A:38:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/ad31075d-6561-3431-956d-53bb1915b644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
X509v3 Authority Key Identifier:
keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
sbgp-ipAddrBlock: critical
IPv4:
192.161.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:f0:af:23:1b:df:e3:2b:31:80:e4:2c:dc:2c:3a:20:1b:c8:
da:ee:6c:2b:4c:08:48:ff:a6:d4:55:3f:e8:03:3d:bc:06:1b:
f2:46:d6:d1:65:b0:4c:54:c7:bf:56:ed:c7:05:06:e7:4b:5a:
3e:07:84:af:65:d8:33:8c:7d:1f:f6:77:b2:34:82:88:00:0f:
ec:44:25:5f:31:e8:6e:2c:73:34:56:ff:be:1b:3c:20:ae:cf:
b6:5a:be:dc:57:c3:69:c2:2e:b0:05:3d:00:06:c1:ff:e7:b7:
39:78:ec:ab:13:c5:4e:3b:17:a7:8b:13:5e:19:5b:e7:c1:90:
a8:74:3d:43:8a:df:1f:fc:06:8b:70:dd:e2:75:71:f7:fc:ab:
10:ae:b8:87:9f:8c:33:fd:17:5e:b7:f2:5b:52:8b:b8:38:4e:
06:f4:ec:db:95:88:f3:03:8f:83:b5:a5:a9:27:8e:06:a4:84:
bc:75:d5:3d:fb:5b:de:9b:07:17:b6:fd:db:1d:ff:90:24:a2:
9e:33:50:05:c7:52:3d:38:89:ff:3b:c9:93:a4:56:74:1f:28:
d9:0e:53:96:a2:69:66:ad:58:86:7e:1b:6c:cb:da:4b:75:33:
d2:4f:f0:b6:4b:fe:44:58:b3:d0:b6:cf:9e:48:3c:44:59:21:
b5:4a:6b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:04:41 2025 by rpki-client