Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/b6b08a1d-c41b-3032-ac31-e83eadb7b68d.roa
File: b6b08a1d-c41b-3032-ac31-e83eadb7b68d.roa (raw, json)
Hash identifier: hHDw+RQWHC3PxFhtquZxsyqnA++LK1aJZf0AmKv2l3w=
Subject key identifier: D2:68:B0:9E:41:92:69:35:19:55:DD:72:F5:73:29:3D:54:C5:27:76
Certificate issuer: /CN=28168b94-cad8-4dae-a00d-057ac35417a3
Certificate serial: 010D0C9F432858488815E7273F2B687981754780
Authority key identifier: 16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/b6b08a1d-c41b-3032-ac31-e83eadb7b68d.roa
Signing time: Mon 13 Jan 2025 14:00:52 +0000
ROA not before: Mon 13 Jan 2025 14:00:52 +0000
ROA not after: Sun 13 Apr 2025 13:00:52 +0000
asID: 46180
IP address blocks: 158.51.164.0/22 maxlen: 24
198.254.28.0/22 maxlen: 24
199.68.220.0/22 maxlen: 24
208.92.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:88:15:e7:27:3f:2b:68:79:81:75:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28168b94-cad8-4dae-a00d-057ac35417a3
Validity
Not Before: Jan 13 14:00:52 2025 GMT
Not After : Apr 13 13:00:52 2025 GMT
Subject: CN=3eda5492-69e9-4088-b876-7a7e331d9e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:c5:63:0c:90:c6:d6:14:a5:fd:31:b2:28:
2d:ef:4b:1b:30:c0:97:7b:72:a4:4e:c0:68:e4:36:
29:d1:5c:da:3f:c4:0f:f4:7d:f4:b7:4f:3f:ac:cc:
6b:2d:e1:32:b8:e0:f6:b0:0a:f6:88:37:e8:5d:b0:
79:e9:47:d5:98:40:64:1a:1c:3c:37:64:bf:f8:66:
4e:32:bb:56:58:6f:44:4a:55:d9:23:73:b8:a6:1f:
11:c7:2f:d7:2c:3b:45:27:e8:7f:71:5f:e0:8a:90:
6a:d3:b7:d0:1b:0d:1d:e6:10:29:fa:df:ce:62:66:
ba:0d:af:5d:c0:db:92:4d:22:fd:f0:0d:d7:11:57:
26:0c:4b:a6:47:16:c3:86:59:90:bf:51:4d:22:13:
2f:5a:67:50:9e:6d:42:53:89:54:1b:2f:96:f3:ed:
06:7b:c6:99:ed:f7:4d:fb:a3:77:3f:8e:7d:5c:3b:
10:b2:b1:fd:53:9b:a2:6d:f6:e6:e3:68:76:81:c5:
8f:60:e5:f0:4c:a0:d8:cc:b5:f8:03:ad:35:bf:6e:
3d:44:55:13:60:52:bb:9e:8e:0a:6d:ea:6f:94:54:
35:ae:6f:ef:11:71:ea:52:8c:df:24:9b:fb:d9:d4:
da:5b:61:c6:48:e5:4c:34:51:8a:d4:d6:16:ed:3d:
19:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:68:B0:9E:41:92:69:35:19:55:DD:72:F5:73:29:3D:54:C5:27:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/b6b08a1d-c41b-3032-ac31-e83eadb7b68d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl
X509v3 Authority Key Identifier:
keyid:16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.164.0/22
198.254.28.0/22
199.68.220.0/22
208.92.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:1b:ca:ee:a6:3c:90:2a:07:34:c8:b5:1f:22:d7:dc:91:52:
99:af:68:ae:75:18:f6:13:1f:48:bb:46:13:25:3a:87:15:b5:
db:8b:2c:ee:e3:40:16:1d:06:f8:f5:34:e5:47:58:52:7e:2a:
97:20:b2:56:3b:99:eb:23:1a:5c:1c:bc:67:be:78:84:40:11:
59:f7:c4:17:0e:c8:a6:a0:7a:81:00:84:b1:6e:b6:ec:93:d5:
44:fc:58:e9:e8:d3:80:18:11:d9:0d:14:a5:f4:34:78:9d:af:
23:fc:cd:e8:ba:1d:6d:90:07:3e:5b:c4:c6:0e:e6:c3:ae:a8:
32:a5:6b:c2:dd:1b:d2:fc:73:7a:b9:96:b1:4a:55:85:1f:eb:
0e:80:20:99:87:5b:c3:14:61:7f:a4:30:64:21:bc:e8:22:8e:
77:82:c5:85:be:f8:55:ab:d6:35:b2:98:17:58:7f:40:bc:18:
d0:02:6e:ff:9f:2a:c6:a5:f9:23:50:66:d9:88:89:89:08:e1:
95:41:99:bf:57:67:3a:97:6d:12:e2:c2:d9:9e:a7:1d:f4:ac:
35:8f:b3:91:1f:c9:bd:6d:6a:16:92:e1:eb:42:9b:52:82:ef:
c8:7c:d1:cd:7f:60:75:b9:d9:0f:bb:7d:96:08:cf:e0:14:9e:
5a:26:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:49:07 2025 by rpki-client