Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa
File: 8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa (raw, json)
Hash identifier: WQQC9Xy/Y2WdAPwGGPcY34JL9cganiZNAAahtGBEWHg=
Subject key identifier: 5F:A3:61:F4:19:34:8C:20:90:D8:B5:83:D9:44:79:9A:D8:DC:C2:88
Certificate issuer: /CN=8d3868d4-1e91-4773-9cef-51b84f43c20e
Certificate serial: 010D0C9F43285848FD56ABE4A9E4CF022F721FC0
Authority key identifier: C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa
Signing time: Mon 24 Feb 2025 14:00:52 +0000
ROA not before: Mon 24 Feb 2025 14:00:52 +0000
ROA not after: Sun 25 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 162.213.126.0/24 maxlen: 24
162.213.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fd:56:ab:e4:a9:e4:cf:02:2f:72:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3868d4-1e91-4773-9cef-51b84f43c20e
Validity
Not Before: Feb 24 14:00:52 2025 GMT
Not After : May 25 13:00:52 2025 GMT
Subject: CN=853b6ecf-35d2-4244-877f-222c884c641c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7c:23:3d:9b:2a:80:85:da:98:26:e4:a4:2c:
06:d5:0a:76:ea:0d:c5:55:b1:0c:c9:00:5c:d5:5c:
db:51:7b:19:1e:72:81:2a:e2:b1:37:ed:60:42:55:
fe:04:4b:f2:11:08:f9:66:ed:29:e6:1b:63:1c:04:
4d:2c:4a:4b:95:68:fb:f0:6e:f6:46:53:21:50:7e:
37:cb:a6:46:54:16:14:cb:f0:50:24:cb:25:21:8c:
bd:bf:14:15:ba:c9:32:d2:86:75:0d:b7:d6:f5:3e:
43:a6:39:fd:c8:cb:5e:b8:3f:04:38:62:fb:bf:b7:
af:b8:f5:5f:1e:a1:4e:9a:ce:78:63:41:6b:99:d5:
14:9b:27:68:4f:50:c6:03:73:3f:f7:06:cb:8f:e4:
80:ea:e1:46:a7:4b:47:75:ff:e3:79:8a:ea:19:24:
6f:62:cd:98:3c:a0:79:51:e2:70:db:e1:fd:af:82:
9b:17:d6:4b:21:86:6d:6a:0e:b5:b6:a1:00:5f:39:
1d:1f:fc:5d:7c:2a:14:ab:c8:0b:e2:82:2d:b3:4a:
6d:bc:81:b4:57:ca:49:db:4f:b0:b1:34:66:73:8b:
1f:87:96:d9:83:aa:9b:a1:6a:e4:4d:7e:2d:1a:64:
6a:93:72:a9:ba:ef:f3:13:7d:09:8c:9e:50:dc:63:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A3:61:F4:19:34:8C:20:90:D8:B5:83:D9:44:79:9A:D8:DC:C2:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl
X509v3 Authority Key Identifier:
keyid:C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer
sbgp-ipAddrBlock: critical
IPv4:
162.213.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:ce:96:5c:4a:32:1b:a9:26:78:1c:5e:59:8a:bc:2f:78:2d:
64:46:a4:7f:eb:fe:7e:dd:87:a2:ae:7b:a1:56:9a:9d:91:80:
ab:86:34:70:8e:b8:73:31:ab:ed:97:5b:48:e1:50:f0:d3:dd:
c8:7c:77:a5:be:c7:2f:ac:63:72:05:9a:80:d5:0e:1d:54:9c:
49:ac:68:e7:3e:4b:2a:ab:47:8f:5b:ce:eb:da:49:fb:f3:ff:
42:47:09:1c:02:8c:8f:9c:f2:3c:19:1c:24:af:19:27:c9:64:
84:b4:43:66:8d:e1:90:0e:a2:c5:97:1e:8d:85:75:b2:dc:18:
5a:3f:53:68:32:b3:83:21:2f:ee:e0:16:7f:db:1c:9c:f9:b8:
a7:17:50:4b:b0:92:d3:ef:52:9c:8a:d5:d0:83:e5:3c:a8:02:
c4:f4:d7:5f:08:8a:d3:51:1d:a2:8d:44:c9:19:b0:60:c3:a2:
7b:ba:07:78:19:9f:1d:33:0a:bc:79:12:62:cc:7d:71:6e:c5:
c6:e5:ce:17:13:6d:66:35:22:a1:68:ea:d2:1a:7e:d4:12:f0:
38:47:b8:f1:d6:ba:e7:e4:15:fa:7d:41:14:14:8a:9a:47:35:
b6:a8:dd:07:e2:62:10:fc:9f:8d:01:49:f8:3d:11:97:72:69:
31:de:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:25:06 2025 by rpki-client