Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/343f8155-8809-32aa-a34c-6c055a5936f1.roa
File: 343f8155-8809-32aa-a34c-6c055a5936f1.roa (raw, json)
Hash identifier: 16lTZRraSM9KH6B1GZRjHam32hwhJPXsef2MOfrw9CY=
Subject key identifier: 75:77:05:16:4E:98:87:74:69:14:82:47:60:74:80:88:A9:94:9D:CB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848AF2B8B6707977F884F8B9900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/343f8155-8809-32aa-a34c-6c055a5936f1.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 33661
IP address blocks: 67.162.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:8b:67:07:97:7f:88:4f:8b:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=4249ad50-d87e-4a4f-9597-470b73b6b58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:49:f4:e5:2f:11:ee:5f:cf:88:c6:df:a5:4a:
5e:78:31:7b:c8:fd:b5:c8:09:79:50:7e:a0:ac:50:
0d:66:6e:1e:ee:50:83:02:d5:a3:3f:25:5e:aa:d7:
14:d0:75:be:5e:6a:55:98:15:43:43:8f:15:04:5b:
52:a4:51:42:d5:89:2e:1b:52:d0:65:1d:81:1f:fe:
9a:38:18:37:69:b3:76:41:4f:f6:09:31:87:4f:45:
66:6d:d8:48:d3:86:92:aa:ac:d0:96:3e:df:fa:0a:
cc:3c:08:5b:7c:a1:f1:5a:0e:99:0c:dc:c1:e6:5b:
7b:a2:38:20:22:58:3a:84:9a:13:93:3c:7a:19:3d:
96:d0:0b:d7:bc:53:26:52:e9:6d:65:ac:65:54:cf:
44:b1:8d:55:d8:71:85:59:25:f4:1b:81:b1:da:69:
8d:79:af:03:69:1e:5a:65:70:33:76:49:58:45:28:
2e:63:54:33:0a:5a:8b:b4:b4:8a:ad:ca:af:3f:1b:
cf:7f:50:44:43:c6:b2:df:33:f8:08:d9:45:11:71:
16:49:20:96:43:a8:fd:3c:00:b6:ab:48:cf:89:ea:
2a:ba:c7:f4:5f:fa:b6:45:20:97:13:a6:76:30:95:
f6:ca:2d:73:6a:d9:1a:90:a7:7a:4b:c3:ee:97:d8:
44:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:77:05:16:4E:98:87:74:69:14:82:47:60:74:80:88:A9:94:9D:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/343f8155-8809-32aa-a34c-6c055a5936f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.162.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:9c:5e:6f:e6:1c:24:d1:cd:18:ca:fa:bd:88:1a:3b:8e:f9:
e7:d1:77:15:4a:e2:68:72:d1:47:c9:d5:0b:fe:2b:8d:80:99:
80:d3:38:75:40:45:3d:34:87:8a:96:a5:52:57:74:34:c0:50:
1f:74:4a:98:f1:69:7d:e7:40:ac:f0:2e:45:65:b7:57:78:10:
80:6a:d0:54:07:10:47:32:ec:79:1a:1e:e5:44:96:34:ce:8a:
a0:2b:d7:d7:75:fb:3b:b3:52:18:3b:6b:ad:df:2a:fb:62:40:
0f:b9:af:9e:cb:ec:f3:47:70:2e:33:b7:7c:9a:1a:d8:1c:39:
d4:04:06:6e:03:89:fc:69:e4:65:2f:b5:d0:ca:c4:cc:ca:1c:
35:3b:fa:16:7c:9e:31:df:be:32:ec:68:4b:88:6a:50:0c:a6:
c0:23:14:80:65:77:da:5a:47:07:c9:cd:5f:ef:84:83:d5:e3:
35:cc:7f:64:71:61:a8:c7:a5:dc:b9:f9:ce:0b:7e:67:b9:2e:
a6:a4:b9:2c:30:73:72:42:2f:af:da:e2:75:a8:e7:37:85:86:
7f:58:46:6b:d4:96:39:d7:1b:49:1b:0f:bc:ec:69:25:ff:16:
ba:70:b4:85:08:4b:92:42:2f:fa:cc:db:ad:cb:a1:cd:e7:5c:
c6:38:30:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:35:40 2025 by rpki-client