Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/44317ae9-344d-3b8c-9ed1-37939fb83b58.roa
File: 44317ae9-344d-3b8c-9ed1-37939fb83b58.roa (raw, json)
Hash identifier: ArWTaajeGxokQ+I2OCepJv+sE0zT+IHtOEX4AG33m9k=
Subject key identifier: 7C:BB:A4:82:B4:96:E7:41:81:78:32:45:AC:ED:5A:DC:00:60:40:5B
Certificate issuer: /CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
Certificate serial: 010D0C9F4328584913AEC3590EC63E35EDAF19A0
Authority key identifier: 10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/44317ae9-344d-3b8c-9ed1-37939fb83b58.roa
Signing time: Tue 04 Mar 2025 14:06:19 +0000
ROA not before: Tue 04 Mar 2025 14:06:19 +0000
ROA not after: Mon 02 Jun 2025 13:06:19 +0000
asID: 16276
IP address blocks: 40.160.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ae:c3:59:0e:c6:3e:35:ed:af:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6866e4a0-5810-4bb4-9c54-7f703ccf4289
Validity
Not Before: Mar 4 14:06:19 2025 GMT
Not After : Jun 2 13:06:19 2025 GMT
Subject: CN=cfdfcdfe-7825-4fc2-9edf-ebc320e13e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:11:42:af:cf:2e:8c:a7:1e:52:60:b6:01:
3b:6c:58:8e:e8:63:c2:13:dc:10:b8:46:31:fa:e1:
3d:3e:6e:05:3b:af:ca:59:8b:30:16:d4:27:e8:27:
5e:07:d7:8f:88:8e:bf:1c:e7:62:fb:7e:b0:5f:0b:
9e:12:d6:81:b6:7c:b8:9e:d8:68:5d:9b:1d:b6:c6:
70:7e:12:d7:06:27:1e:e6:a2:74:b2:07:18:f4:4d:
49:fd:df:1d:bc:ba:09:17:a4:c4:94:f3:5a:eb:8c:
8d:62:95:ce:10:93:07:d9:f7:2a:82:55:c1:89:7c:
62:3c:24:a6:97:c8:89:fc:72:2e:61:5f:be:f3:cc:
2d:f0:af:c9:d5:11:3c:17:4c:66:05:3a:b7:d2:44:
d6:a1:c8:ac:87:ad:8a:97:3b:fa:dd:d7:43:56:10:
8e:be:3c:dd:b9:08:36:0f:1f:84:ab:c6:79:62:4e:
44:ee:54:60:dc:84:5f:d6:b2:bf:94:aa:ce:f6:e1:
7a:54:d5:4c:c2:9f:8e:f9:4c:a3:14:99:ea:05:d0:
3f:fa:78:24:ed:82:c5:cd:98:ca:c5:41:7e:53:ec:
08:8f:ca:c7:0c:ac:cc:4e:d4:c1:af:7c:d3:e2:77:
15:85:e3:48:4e:8b:14:38:76:13:5c:74:4b:4d:3e:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:A4:82:B4:96:E7:41:81:78:32:45:AC:ED:5A:DC:00:60:40:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/44317ae9-344d-3b8c-9ed1-37939fb83b58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289/6866e4a0-5810-4bb4-9c54-7f703ccf4289.crl
X509v3 Authority Key Identifier:
keyid:10:7B:A7:0B:58:8F:FB:01:75:CA:06:79:82:18:CF:41:F5:BD:16:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6866e4a0-5810-4bb4-9c54-7f703ccf4289.cer
sbgp-ipAddrBlock: critical
IPv4:
40.160.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:f7:93:8a:ef:90:d3:d1:55:3a:33:0a:49:35:83:21:26:6e:
86:4e:2b:cf:6b:d5:38:9f:24:9c:db:14:12:6e:4c:fe:00:d2:
b4:ca:b6:3e:7b:c3:5e:8a:72:9e:a0:a0:cc:fe:b5:2d:a1:89:
30:e6:3a:79:90:15:99:6b:67:ec:c8:6b:5c:60:88:29:30:96:
e0:a1:eb:63:e8:4b:34:35:54:0e:d3:7f:64:28:61:10:64:1f:
0e:72:87:a8:4b:d3:af:e0:6f:3d:2c:53:00:11:58:f5:22:f4:
f3:2e:09:bc:c5:b9:09:c8:ba:c2:55:89:18:cc:90:91:d6:55:
ca:fc:53:dd:ab:e1:a2:69:c8:d1:cb:86:95:a6:15:91:2c:7d:
22:e9:d9:8a:c6:ec:ec:b2:12:23:29:7e:14:31:26:c8:29:90:
0f:d5:88:04:75:b9:17:c4:a3:0a:c2:3a:af:ca:3c:67:f0:63:
ea:62:01:4b:7c:d2:ac:85:8a:f8:ba:21:e9:98:27:dc:dc:f4:
00:6f:d6:21:d6:3f:1b:75:69:73:92:b8:bc:2c:16:79:e3:e3:
ad:29:59:b0:9a:0e:89:4f:be:81:d6:68:ea:b2:ce:5c:b6:7f:
61:d8:17:f0:f4:46:fd:17:86:1c:a8:53:c0:68:d4:0f:6b:28:
cb:76:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:03:54 2025 by rpki-client