Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaecfca3-d1da-334c-8303-a1be6d98218d.roa
File: eaecfca3-d1da-334c-8303-a1be6d98218d.roa (raw, json)
Hash identifier: ZHWTHBTjtRkVhH8pjomgt69SFIQscsV2OTWd3lhn4BI=
Subject key identifier: 0E:71:93:9E:9B:5C:F7:85:35:52:ED:6B:61:64:F9:28:0B:5B:79:31
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB16C674CBDBA9A6410EBC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaecfca3-d1da-334c-8303-a1be6d98218d.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 174.160.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:6c:67:4c:bd:ba:9a:64:10:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=3f09ba1b-791e-4d88-96e1-80d7b39c389f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:91:2a:95:a1:3e:3d:dd:5f:1f:42:95:ba:
2a:d4:f6:35:bc:4a:0d:20:5b:8e:76:33:15:ac:b1:
3d:3a:2f:04:6e:bf:67:2b:1f:02:6a:c6:cb:46:af:
29:63:3a:68:36:7a:dd:68:f5:07:ad:8a:62:9e:29:
af:b8:c8:ba:dc:14:85:19:b6:0e:bf:2e:67:70:e1:
db:ac:72:d3:7a:c6:ce:b0:1e:0c:0b:db:4a:c7:76:
1b:14:1c:5a:35:84:12:08:cb:75:d3:50:66:3e:7f:
6f:38:f6:5f:5b:3e:cf:de:47:a0:f1:85:25:79:02:
c9:e6:68:06:ef:c8:fa:d8:03:40:22:e7:90:0b:e3:
bb:1e:bb:97:da:f8:79:9f:b9:15:c5:5c:b6:ab:06:
e1:b4:f4:72:37:88:16:94:ae:93:2e:74:2b:7a:14:
e8:1b:b0:41:ce:e2:29:17:bd:0c:59:00:d9:5b:8f:
76:f1:25:e6:05:61:d9:ce:4a:af:e4:9a:4e:aa:6f:
82:25:3c:ef:2e:9b:37:4b:a3:e6:cf:1c:9b:01:5a:
df:24:86:c1:cb:ff:c4:75:20:c8:4c:f3:79:29:7d:
90:fb:fa:1f:0f:61:c5:59:f4:16:08:f0:e1:be:d8:
09:15:df:e0:14:99:50:8d:f2:45:e2:47:f5:df:c7:
cb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:71:93:9E:9B:5C:F7:85:35:52:ED:6B:61:64:F9:28:0B:5B:79:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eaecfca3-d1da-334c-8303-a1be6d98218d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.160.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:88:43:82:28:cd:75:24:c8:50:c7:d7:b1:fb:e0:49:5c:f5:
fb:d6:42:69:75:7c:cc:8c:27:96:9c:ff:eb:f6:43:78:b6:6f:
59:ae:e8:7f:4f:3d:78:37:bc:43:60:f4:ee:55:62:76:89:09:
99:66:76:d5:7f:f0:df:78:89:95:83:3e:e6:2a:07:ab:27:26:
f2:f1:b4:2c:1a:3b:2b:4c:38:48:5e:d6:a4:98:2c:bf:be:a4:
38:78:de:11:67:60:cb:8d:07:9d:fd:b4:19:14:cf:65:89:22:
b0:9c:48:2e:bb:64:11:fc:93:d4:51:b3:95:f1:6e:df:b2:0c:
d3:3b:86:ba:e3:db:d5:a8:4d:32:c3:83:88:59:22:e9:ae:91:
9f:7f:04:62:68:62:d5:77:a3:58:c1:76:a5:5c:1b:0f:4d:3e:
7e:62:39:ed:91:ec:b3:f7:c8:67:b0:6e:38:48:a7:49:f3:f8:
9d:65:60:5f:ca:45:f2:c9:cb:4f:fb:17:00:49:8f:81:bb:d3:
64:da:9f:85:82:e0:8b:e7:27:79:45:5d:26:7b:8b:fb:22:c7:
f6:74:a3:e4:3b:01:63:46:f7:ff:1f:c8:aa:8a:bc:ba:e1:f8:
79:b9:fa:02:de:15:e9:f6:78:db:86:a7:a0:f1:ae:bb:3e:fd:
f3:6d:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:27:54 2025 by rpki-client