Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a380aade-7722-3a12-9ea5-626f30f2431a.roa
File: a380aade-7722-3a12-9ea5-626f30f2431a.roa (raw, json)
Hash identifier: 4so8Fx4QXGWUuzJzjpUOFhC7/S05RE9gbCeg3YcssPo=
Subject key identifier: 69:58:BD:EE:42:7D:69:F5:CC:CD:26:FF:2D:FC:70:0C:53:2D:05:55
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F4328584957F414F04275E98800887900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a380aade-7722-3a12-9ea5-626f30f2431a.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 151734
IP address blocks: 216.122.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:14:f0:42:75:e9:88:00:88:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=a1133267-45af-4737-a02b-a97b9d712058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:88:82:d0:4d:d0:ab:fa:56:f7:d7:50:07:
4d:dd:c3:1d:e0:18:ed:e7:6e:af:89:7d:63:ce:b7:
f3:6a:67:0c:f0:fd:6b:cc:30:c0:f8:36:10:59:28:
8c:95:4e:93:1f:ca:58:9a:08:63:a1:43:7f:e4:1c:
4a:b2:b0:11:5b:83:42:3c:45:c5:08:d2:2f:0e:24:
0c:49:99:32:90:da:c2:ac:ed:54:13:c7:27:de:1f:
0e:bd:57:51:3b:b0:74:2e:f6:2f:e6:9b:be:92:32:
af:30:5f:a1:ca:e9:04:9f:71:f7:36:42:68:45:7e:
d4:a2:2a:01:3f:ad:36:c0:fa:1f:0f:ba:a3:f5:c3:
c5:34:fb:75:2e:4b:3a:10:73:23:a7:ed:68:1e:16:
c6:7e:17:bb:ca:bb:21:20:77:64:e9:97:88:0c:9f:
61:19:f9:de:be:73:0b:6d:be:65:8a:4b:74:a3:11:
ba:d6:41:80:55:c5:15:74:9c:a4:e0:1a:d6:b0:8d:
c6:81:93:bd:b1:80:44:2f:6e:53:e2:ab:5f:4c:c7:
94:f8:e5:aa:e6:24:5d:a9:00:a0:cd:9e:03:96:c9:
95:23:e2:27:9e:d5:2d:dc:95:7b:9d:cb:99:45:9d:
30:d0:12:ff:b2:91:f7:9e:50:48:9b:1a:9e:d9:82:
5e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:BD:EE:42:7D:69:F5:CC:CD:26:FF:2D:FC:70:0C:53:2D:05:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a380aade-7722-3a12-9ea5-626f30f2431a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.122.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:72:7e:fb:6f:31:fa:67:0d:17:2f:a2:0b:1a:a2:55:d3:8b:
80:92:e3:e3:a1:75:67:9f:e0:34:5e:77:3b:75:03:8d:08:a1:
cc:8f:81:3a:0c:b4:2f:3e:16:f8:76:bd:8f:e4:46:12:19:1f:
aa:08:d0:ec:06:0c:32:39:cf:9d:2d:68:83:1a:b0:20:97:33:
48:09:49:c0:55:bc:ae:5c:85:d1:5f:50:59:d0:3c:60:08:a6:
fc:c2:92:64:34:6e:06:2e:64:01:a5:a6:06:ec:09:58:51:00:
ef:ae:8a:aa:e1:98:7e:e5:7c:4c:e2:d9:09:52:e1:94:ef:2d:
35:28:0f:63:b3:f8:be:13:ec:7d:a9:2b:bd:cc:7b:af:4b:22:
74:3d:6a:02:7a:92:39:36:51:80:9f:f2:b4:6c:6c:ca:ef:3f:
d6:f0:e6:17:6a:93:0d:c1:2b:b3:69:49:d8:2e:2c:97:50:e4:
b8:89:39:b8:30:1e:56:fa:cc:06:1e:11:e7:42:ba:7a:65:b9:
6a:b2:33:f8:1b:f9:a7:aa:18:40:39:87:a1:67:8e:cc:92:28:
ec:86:7a:69:f4:55:ac:82:40:4a:71:64:d5:a8:ab:15:0a:6c:
a8:56:f6:a2:a0:fb:1d:9e:c3:6b:02:62:61:5e:c1:b7:a5:12:
e6:c8:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:40 2025 by rpki-client