Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d83a73ff-bf34-46bf-a4a2-e4a266fc2aed/73ce7d49-4a2d-341f-b625-b758e67ebbe2.roa
File: 73ce7d49-4a2d-341f-b625-b758e67ebbe2.roa (raw, json)
Hash identifier: 32Lkin73mF5lSXQ22n/3ihpM7tuIC2nq6kz78Fbl1mc=
Subject key identifier: 17:F6:68:5E:79:D0:3E:D4:B1:B7:C2:94:EB:01:88:7B:46:21:B8:F5
Certificate issuer: /CN=d83a73ff-bf34-46bf-a4a2-e4a266fc2aed
Certificate serial: 010D0C9F432858494B64137266A74E43B18C9400
Authority key identifier: DA:2C:92:E5:DD:86:AE:5F:4F:6B:67:51:FB:4A:06:D4:2A:77:C5:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d83a73ff-bf34-46bf-a4a2-e4a266fc2aed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d83a73ff-bf34-46bf-a4a2-e4a266fc2aed/73ce7d49-4a2d-341f-b625-b758e67ebbe2.roa
Signing time: Mon 24 Mar 2025 13:00:53 +0000
ROA not before: Mon 24 Mar 2025 13:00:53 +0000
ROA not after: Sun 22 Jun 2025 13:00:53 +0000
asID: 10849
IP address blocks: 144.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4b:64:13:72:66:a7:4e:43:b1:8c:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d83a73ff-bf34-46bf-a4a2-e4a266fc2aed
Validity
Not Before: Mar 24 13:00:53 2025 GMT
Not After : Jun 22 13:00:53 2025 GMT
Subject: CN=739dc6cd-c1ba-4f5b-800f-788816bd8820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:28:98:db:d1:73:6b:ff:ce:8f:30:59:01:ba:
54:34:23:6c:0e:d9:a9:68:d6:bf:6e:69:c0:cc:55:
57:3a:f3:7d:9e:d6:3a:4a:7b:c2:11:8e:e0:a8:b0:
1c:35:c0:01:2f:1c:0a:e0:c6:ef:a1:39:d9:a7:2e:
61:17:c8:b5:cc:b4:98:ee:02:fc:54:8a:21:36:4c:
68:45:bd:38:56:f4:b5:76:6f:35:f0:57:7f:6f:c6:
91:f1:b1:65:8c:42:fe:e1:86:90:0d:cc:b4:7f:12:
22:d4:00:b2:fe:8b:e7:b2:ce:d2:8e:a0:fd:45:d5:
8f:a9:bf:d9:af:d7:dd:5c:53:fc:c4:76:e9:73:f5:
77:61:cd:3b:ad:58:40:1b:ac:d0:1d:0b:be:04:93:
37:c7:95:59:4e:42:7e:48:bc:ea:10:55:9c:43:83:
b1:7b:c7:92:09:f8:13:fc:00:d6:34:27:05:47:ff:
d0:ba:c9:d0:42:ea:69:fa:b6:f7:0a:ba:cc:d4:88:
29:20:3f:42:37:46:cc:32:ed:e1:8e:23:f1:81:a9:
6f:83:11:3a:b2:62:5c:57:65:33:d0:ba:9e:26:fa:
d5:cc:a3:18:d2:13:73:30:a2:d5:31:94:dc:6a:20:
e9:eb:59:b4:a2:b1:44:20:0a:de:fa:66:46:51:4d:
1b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F6:68:5E:79:D0:3E:D4:B1:B7:C2:94:EB:01:88:7B:46:21:B8:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d83a73ff-bf34-46bf-a4a2-e4a266fc2aed/73ce7d49-4a2d-341f-b625-b758e67ebbe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d83a73ff-bf34-46bf-a4a2-e4a266fc2aed/d83a73ff-bf34-46bf-a4a2-e4a266fc2aed.crl
X509v3 Authority Key Identifier:
keyid:DA:2C:92:E5:DD:86:AE:5F:4F:6B:67:51:FB:4A:06:D4:2A:77:C5:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d83a73ff-bf34-46bf-a4a2-e4a266fc2aed.cer
sbgp-ipAddrBlock: critical
IPv4:
144.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:e6:0d:da:06:7d:ed:14:61:73:d7:62:6e:1d:3f:4b:46:be:
91:80:58:35:a9:75:2c:0d:9b:27:09:74:96:95:f2:27:30:a0:
b7:38:93:2e:ad:ca:cd:c1:8d:bf:13:72:eb:e0:4b:dd:6e:31:
92:19:ff:80:a2:05:4f:7f:b2:cf:6a:3b:f5:b1:77:f2:10:22:
0b:a4:8f:63:f5:d0:5a:27:cc:d6:97:17:53:5c:89:93:68:fd:
22:66:5f:8e:00:e2:55:9c:74:e5:88:06:5e:c4:a2:ba:82:c6:
cf:df:6b:d9:e1:b5:e8:57:30:c8:da:3b:28:17:ec:2e:14:be:
48:06:d4:68:d7:ef:3e:9d:a7:51:40:1f:43:b0:79:6d:db:26:
0c:8d:a9:f7:a8:b5:d4:2f:09:47:ea:23:57:59:14:08:ff:76:
59:75:39:2e:b6:ab:aa:bd:31:0d:13:07:5a:61:f7:66:10:60:
ac:76:52:40:7a:34:0d:26:98:ac:4d:af:72:1d:9e:a8:95:8b:
fa:0a:41:62:c1:e6:3f:df:70:e3:88:7b:d1:6b:c4:7f:2a:c2:
36:54:9b:0c:2f:74:b4:b4:cc:1b:68:b3:32:ce:10:61:bc:b7:
78:5b:ad:49:62:8b:a1:a0:1f:e6:1a:f5:6f:d3:91:2c:52:55:
0a:8e:30:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:15:59 2025 by rpki-client