Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa
File: 7489abd9-d972-3502-9bfe-8f60dd4caa20.roa (raw, json)
Hash identifier: AaBYpc1eWAcb6Jcy5uF7qtfgTi5PROskIqyuiclMMPg=
Subject key identifier: AC:1F:0E:FE:EA:0D:0C:F1:2A:E2:A6:44:8B:26:C4:46:95:1E:10:72
Certificate issuer: /CN=aac421ae-305b-4a29-aacc-176ba3fca213
Certificate serial: 010D0C9F4328584902EC0A50A3BF57AB38EA9880
Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 16509
IP address blocks: 168.100.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:0a:50:a3:bf:57:ab:38:ea:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=451a1abc-9d96-4a81-990f-da7dfb12449b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:2d:22:ed:4d:71:19:12:4e:1a:11:00:47:
92:bb:71:60:c5:f8:52:fe:f3:bf:77:96:d4:3a:30:
21:55:88:41:61:b7:10:b6:6f:11:d2:64:90:ba:18:
7a:53:6b:b6:8f:af:05:e4:61:8d:41:0d:8a:30:99:
ef:99:20:5a:ad:64:60:98:6b:0a:57:fb:78:40:d3:
8e:86:3f:be:39:d3:90:3d:f0:51:0c:22:aa:1e:9a:
c9:8e:e6:3f:f9:ae:05:65:24:e1:08:22:d5:fd:c6:
d1:23:85:26:c8:79:b9:02:67:1a:16:b4:5b:50:e3:
b4:5e:bc:09:1b:3e:b0:47:06:5f:d5:62:88:ea:45:
26:22:c2:07:f2:f1:00:2c:85:b0:dc:d0:e3:fb:9d:
ea:1a:8e:96:40:7a:f2:1a:71:a9:1b:8c:43:e0:10:
7d:01:07:8a:6b:a1:e2:e1:f4:5a:02:0d:20:a3:da:
d4:3f:b8:94:32:66:c8:f4:71:fe:e9:b9:39:b1:0b:
aa:31:86:a2:61:fa:e3:e6:56:b6:e8:25:8e:5f:e8:
05:c1:3f:4c:ad:b0:b5:a1:f7:70:4e:1f:d7:a5:20:
b3:31:bb:02:96:c7:1d:fd:2e:d2:3c:d2:72:87:94:
08:99:a1:e5:cb:cd:e4:9f:85:86:97:66:2f:d4:bd:
2f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1F:0E:FE:EA:0D:0C:F1:2A:E2:A6:44:8B:26:C4:46:95:1E:10:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/7489abd9-d972-3502-9bfe-8f60dd4caa20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl
X509v3 Authority Key Identifier:
keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer
sbgp-ipAddrBlock: critical
IPv4:
168.100.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:2f:81:14:d8:9c:81:a0:74:0e:cf:99:d8:2a:5a:07:05:5f:
b5:0f:90:11:1e:32:c9:58:84:5d:79:4b:b4:88:0b:a2:dd:89:
a4:1d:36:4b:31:8d:3d:df:2d:62:6c:07:e8:e4:2d:32:49:12:
ca:c9:09:51:00:f4:3a:ca:5c:1d:93:3a:a3:07:55:d1:bc:07:
89:ac:e5:11:f5:6e:2b:bf:44:b6:e3:97:04:d2:74:44:ba:36:
d6:62:98:6b:99:59:93:fe:0b:fa:ff:47:df:62:2c:6c:14:21:
47:58:82:8f:7d:d4:a8:46:c0:a7:63:66:36:86:6b:35:7a:b7:
89:ff:3e:c2:1e:96:5f:c7:fb:50:0c:9c:cd:33:e4:bd:3a:46:
df:6f:2f:d7:dc:4b:0b:12:28:eb:f4:74:9c:7f:18:29:8c:da:
77:9b:e8:19:c5:d5:b5:de:0e:9f:b4:56:85:a4:73:3c:8f:97:
57:30:88:40:7f:3a:89:21:96:bf:68:bb:33:43:73:1f:aa:f6:
6b:aa:e8:97:18:b5:b7:13:10:33:17:c9:ac:5f:75:3f:cf:59:
62:18:e2:a5:fb:2e:85:20:fb:a4:61:4e:d1:fb:d5:76:83:8d:
98:83:36:26:f6:30:ce:a9:f1:5a:eb:13:12:74:79:cc:22:7b:
15:dc:18:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:08:06 2025 by rpki-client