Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5af02877-cfb6-3e11-ab01-56751afb3817.roa
File: 5af02877-cfb6-3e11-ab01-56751afb3817.roa (raw, json)
Hash identifier: ZB1A9CB4q3l3cJOdqHJ5THFhC3s8n+PYK0yllHsjWvE=
Subject key identifier: 60:0F:88:4E:DD:9B:5D:B4:09:40:1E:F8:ED:55:8B:E3:39:3C:6B:D5
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584898D6031DF65527D5342841C0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5af02877-cfb6-3e11-ab01-56751afb3817.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 161.69.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:03:1d:f6:55:27:d5:34:28:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=01224eb3-30c3-473b-a647-8a880ea47f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:d9:68:3d:64:3f:18:7e:d9:d7:00:27:b3:
ac:49:d2:22:2b:16:e6:43:1a:ee:75:f3:0b:85:af:
10:7b:7a:e3:fd:22:9f:98:63:b5:de:b0:02:81:8c:
8b:0b:20:73:14:3e:44:86:6d:15:11:b0:47:d1:1b:
54:43:91:87:7a:5d:a5:e2:32:9a:68:79:d0:e8:83:
a2:61:c7:25:58:2f:27:32:da:b5:f6:d1:ee:90:10:
ca:7d:47:77:76:56:b7:ce:fd:74:b0:80:aa:70:0a:
b7:ab:a6:f2:2c:e9:00:e9:a9:38:87:b3:f1:32:1a:
5b:24:18:4c:05:ab:1e:c4:2a:ae:00:e8:9d:51:7d:
7b:42:b2:5d:ef:eb:99:0c:ec:7a:13:6b:88:49:ae:
37:42:08:50:a7:80:9a:8b:4c:e4:0d:9d:4f:41:7a:
dd:81:8e:43:2c:0d:da:5f:0e:16:5c:ce:d0:45:1b:
e6:5a:ca:53:07:b8:3a:d7:dc:17:fc:ff:b7:bc:4a:
2b:3b:86:d7:36:b5:ff:89:03:e0:9f:b5:5f:bf:0b:
70:40:59:80:dc:eb:8b:91:38:20:b8:50:59:b9:37:
ca:b3:cd:79:73:ea:c7:3b:ca:27:bf:e1:d0:fe:44:
3b:6c:79:97:aa:81:a3:b0:a6:c4:5d:30:42:6c:4e:
b3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0F:88:4E:DD:9B:5D:B4:09:40:1E:F8:ED:55:8B:E3:39:3C:6B:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/5af02877-cfb6-3e11-ab01-56751afb3817.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:49:e7:2b:b3:fb:65:99:39:65:d1:b9:a5:b3:70:98:1c:16:
e1:6b:06:7c:0e:75:fa:66:d0:8b:1f:12:b8:90:8a:0f:81:b6:
ae:e9:27:9a:d7:e7:b6:10:3e:e3:4e:55:9c:82:4f:27:75:d7:
b7:82:d8:47:6e:e1:33:8a:25:7e:c7:f0:7a:b8:38:92:d7:8e:
96:f8:13:f1:54:43:27:72:07:60:f2:3c:37:95:7b:45:1a:bd:
03:c3:39:a3:34:63:67:bf:5e:e5:80:92:d0:ea:53:8f:0c:91:
35:b6:16:5a:22:ee:7c:53:86:ac:69:23:97:da:17:07:3b:8d:
1d:d2:9f:21:a8:37:cb:33:74:1e:56:0b:f5:2d:43:11:4f:f5:
3c:95:7d:f3:2e:1d:45:cb:bc:ea:3e:52:de:e3:eb:2f:5f:63:
82:9b:ae:52:1b:2f:49:e7:6a:72:bc:35:3c:6e:f8:86:0a:9c:
f6:84:a7:b5:3d:1f:30:43:d4:b9:51:1a:2a:e3:83:9f:27:76:
0c:db:df:9d:fa:d1:43:10:a9:c5:47:5d:b9:af:4f:77:67:94:
03:b8:19:9e:ad:67:f5:60:59:de:cb:e4:b7:c2:3a:06:4f:aa:
b6:bd:a0:fa:84:d5:e2:79:9d:4d:23:d0:1a:02:fb:0c:78:c6:
8a:2c:00:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:09 2025 by rpki-client