Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/12231f80-ab8c-3b75-ba0a-46b23bdca25d.roa
File: 12231f80-ab8c-3b75-ba0a-46b23bdca25d.roa (raw, json)
Hash identifier: YKomFNulH247hCW09EtyIPVscAudJxvc3i7dNSV10FU=
Subject key identifier: 54:88:4D:05:0F:02:3C:B2:1D:E7:84:6C:2E:FB:E5:D3:F5:95:82:6B
Certificate issuer: /CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
Certificate serial: 010D0C9F4328584886B078F87A9807077CEA4B40
Authority key identifier: 4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/12231f80-ab8c-3b75-ba0a-46b23bdca25d.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 16437
IP address blocks: 161.199.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:78:f8:7a:98:07:07:7c:ea:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=3cf9c6cc-54b8-434f-928b-2865e3977daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:5f:48:80:a6:f9:14:1d:9f:ef:4d:c1:6a:
7f:f0:9b:de:c0:b4:70:3f:5e:08:b0:42:f2:51:fa:
1e:7a:0f:cf:1d:f7:42:39:5f:86:20:88:d0:43:a7:
71:13:da:10:90:2d:80:58:90:f3:07:6c:f5:75:fe:
59:93:e8:78:e7:0d:55:71:aa:3e:4c:01:44:4c:dc:
74:d2:b3:67:0f:24:7a:d7:c4:1d:50:4a:a9:fb:c1:
8f:c4:6d:56:20:a7:41:49:2d:6d:91:0f:78:c7:3c:
2d:30:fe:22:73:27:a2:e4:7b:67:17:31:1c:5b:82:
cb:6f:fc:ea:a2:14:83:f8:a0:7b:b9:2a:70:46:0c:
b3:37:af:31:52:9d:f1:7d:73:1e:74:e2:c3:cc:ed:
be:36:8c:7d:c8:e2:af:b2:fb:30:05:bd:dd:f1:ed:
c9:13:eb:c7:ad:42:5d:4a:ab:80:93:86:af:d1:ea:
e5:a1:e8:ae:15:d9:ee:1c:3e:4c:f2:0f:e8:c3:34:
08:28:ca:e1:9b:d8:64:9a:a6:01:9b:b9:a1:6c:5a:
4e:7c:2e:e3:f7:a6:62:b3:a7:66:b4:7e:97:c5:99:
9e:a4:df:fb:65:84:93:e3:8f:cb:5e:93:35:ec:b6:
6b:07:1a:bc:8d:a4:12:18:74:f6:e3:67:f3:94:34:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:88:4D:05:0F:02:3C:B2:1D:E7:84:6C:2E:FB:E5:D3:F5:95:82:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/12231f80-ab8c-3b75-ba0a-46b23bdca25d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.crl
X509v3 Authority Key Identifier:
keyid:4D:B5:2F:46:B2:3B:D1:0C:89:9E:88:83:77:12:B0:7E:2B:24:EA:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0bfdfe6a-bc2c-4180-bc5d-7bd6de5cfa62.cer
sbgp-ipAddrBlock: critical
IPv4:
161.199.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:89:d3:e0:ff:e2:f3:b5:5b:a0:0b:85:38:10:7c:99:c6:41:
e4:2f:46:dd:8a:f4:f3:d5:46:ed:c3:d8:30:36:a0:b9:08:a6:
cc:52:4f:69:24:23:d7:72:a4:57:fe:46:46:86:f3:68:75:17:
70:95:20:63:b5:ae:a9:03:78:20:01:8f:ab:c4:97:d8:9b:a4:
2d:a4:58:0e:f9:9e:02:ff:73:7e:19:52:aa:e3:95:a4:6b:3d:
8b:51:03:4b:6f:24:c1:7b:d5:c1:43:06:ab:fe:a8:c4:53:ba:
da:52:f5:2d:6b:8a:db:c7:06:3c:47:c1:bf:98:9d:54:bc:44:
a8:68:ae:79:9e:2c:16:ca:e5:43:f5:54:e5:99:d3:bc:16:f2:
85:31:7a:de:a1:38:14:3e:9e:b7:95:09:86:0e:fe:ac:1b:78:
b6:16:92:61:9c:42:e7:df:30:e5:9b:69:df:c4:3e:2e:b8:7f:
53:50:d0:2b:42:51:0a:5b:96:72:7a:a6:98:b5:b3:73:ba:ee:
fd:13:74:49:a7:42:f3:29:fc:75:6b:84:6b:a7:1e:01:08:ce:
42:3a:6c:9f:61:8f:31:c7:0b:13:62:45:7a:e3:37:0f:eb:24:
ba:24:2f:b0:91:ca:4a:13:f5:40:af:48:bc:3d:86:27:7e:23:
d3:fc:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:36 2025 by rpki-client