Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f7446f61-44be-35d2-94ba-fd19dd446575.roa
File: f7446f61-44be-35d2-94ba-fd19dd446575.roa (raw, json)
Hash identifier: xtM1jn+D+HomOzyFBguWW/oCxUQPkyOl2B+MLHQkHSg=
Subject key identifier: 5D:94:20:94:83:D7:F9:FA:DC:96:C7:8F:B3:D6:CE:80:8D:B3:C5:49
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584898D6086CFF8CBED9BD38AFA0
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f7446f61-44be-35d2-94ba-fd19dd446575.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 161.69.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:08:6c:ff:8c:be:d9:bd:38:af:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=3eaca310-6f46-4326-b15e-af845658f80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:be:32:4f:b7:06:34:65:94:3e:cc:d6:81:
82:62:ad:26:e7:56:ef:1f:d1:30:a0:84:9a:b3:d2:
7a:bf:0a:a4:9e:9b:62:d9:f1:18:df:a3:60:bc:81:
d4:71:85:c4:ae:d4:13:ce:06:24:fd:b5:96:12:ec:
a0:01:4d:7f:a2:a0:09:c2:4a:f7:72:19:30:c8:d4:
17:8f:92:1d:b5:82:b0:66:c7:c3:6d:9c:95:be:ad:
a7:ef:ea:2b:ed:e5:d4:95:ff:b8:45:0f:a4:f0:7b:
22:7c:6a:80:66:29:1d:d6:12:57:50:51:62:75:b9:
40:62:54:6a:84:32:f4:d1:e0:bf:ab:bb:e2:a5:9f:
04:d6:77:09:75:20:98:87:52:8d:ea:d5:ed:7e:65:
4e:a7:d8:86:c2:ef:50:21:01:c3:04:19:7b:45:98:
b3:5b:9c:3c:b0:04:a7:07:48:64:32:ca:85:4f:19:
53:13:25:25:d4:d2:f5:3d:b5:cb:df:a0:b4:5d:71:
71:b9:e5:d4:a4:4b:de:c2:ad:8a:f7:17:04:03:18:
0c:7d:00:4c:b3:c6:97:6d:47:1c:86:e4:b8:4e:44:
4d:f2:c6:4e:25:a3:6d:b1:cc:78:a5:97:48:c4:f2:
2c:fa:14:2e:8b:6e:72:d3:b7:fc:5b:e9:da:21:cc:
bf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:94:20:94:83:D7:F9:FA:DC:96:C7:8F:B3:D6:CE:80:8D:B3:C5:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f7446f61-44be-35d2-94ba-fd19dd446575.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:da:b1:9e:2b:d5:8c:44:cf:f9:13:cf:dc:3a:72:f5:9f:92:
75:e1:77:6a:e5:8b:10:65:9e:9d:e9:29:54:d8:b1:09:7f:dd:
26:14:17:fc:09:e3:ff:84:0a:a7:c0:e9:a3:ec:f8:81:97:da:
5e:02:00:29:e1:81:c6:1f:dc:25:82:11:97:30:49:3e:63:bd:
fa:77:63:45:c6:35:79:11:e7:e1:40:ca:20:65:aa:bf:3e:ad:
2f:e7:e5:e0:0f:e4:ec:db:bf:b8:05:9c:67:64:d0:94:b4:c2:
c1:aa:0b:ab:52:39:60:0c:18:b7:19:02:c7:d4:77:9d:14:97:
6a:29:8e:48:5d:05:b5:b8:a5:a8:f3:9d:55:b5:01:80:2c:5e:
6d:fc:3b:d2:1b:02:81:59:5f:8c:4d:a7:f3:84:de:d4:73:6a:
30:3a:70:2c:3f:a2:05:e6:86:ea:db:63:c0:55:8c:d3:e7:52:
36:b3:5d:94:4d:65:ea:ab:f7:fa:32:fc:35:a8:e1:c7:f6:ca:
e1:74:b8:b7:52:dc:d5:5b:92:33:be:cd:9b:2f:45:16:bf:84:
0b:23:a6:98:8e:e5:8a:98:3c:97:76:e5:59:3f:11:c7:3e:3c:
26:77:76:bf:3f:d6:9e:39:c8:a1:8c:49:e2:65:19:e9:26:66:
65:71:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:54 2025 by rpki-client