Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa
File: 5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa (raw, json)
Hash identifier: HDd/5TsiJsAxDSBQSsFCJ2d4QMBQ06TuwoeNKwPSLzE=
Subject key identifier: 77:96:67:6F:F3:3C:76:C2:8E:FD:45:DC:93:DB:9A:A7:FE:CF:D4:84
Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial: 010D0C9F43285848BE862D1ADA4AE6EAE6AF16A0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa
Signing time: Sun 02 Feb 2025 02:00:39 +0000
ROA not before: Sun 02 Feb 2025 02:00:39 +0000
ROA not after: Sat 03 May 2025 01:00:39 +0000
asID: 396982
IP address blocks: 162.240.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:be:86:2d:1a:da:4a:e6:ea:e6:af:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Validity
Not Before: Feb 2 02:00:39 2025 GMT
Not After : May 3 01:00:39 2025 GMT
Subject: CN=1eba11fe-0278-494a-ad0e-b2a9841b5b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:4c:25:20:6a:0f:83:97:08:a4:51:84:90:
51:e4:d1:a7:f4:32:79:89:61:c7:78:c3:0d:35:2b:
89:45:5d:df:ad:41:b1:47:bb:c2:89:a1:c5:f4:dd:
ce:8a:f9:12:e8:ec:f9:83:3b:a2:77:27:c3:7c:e4:
8b:29:19:d6:85:5b:e8:50:86:99:14:f8:66:52:7d:
33:c0:fc:9e:c5:d9:b2:ac:f7:e9:57:75:2c:d7:39:
91:65:f8:90:b7:ea:6d:2e:89:a8:6f:cc:04:8b:21:
22:ef:ee:08:7f:04:64:48:41:d8:e9:c2:a5:91:55:
90:66:6f:75:cf:d7:35:e8:6c:0c:5e:ce:ac:86:95:
92:9a:be:69:e8:9d:f3:d9:a0:68:17:93:6a:c6:15:
e0:87:fc:eb:46:a5:b7:0b:94:83:4d:91:71:47:3c:
9f:16:09:3a:98:14:1a:56:59:58:e5:83:7d:83:94:
f0:e5:ea:d0:c0:c0:8c:4d:e3:7a:7e:a1:e5:ae:66:
01:58:81:71:d7:54:b3:27:e2:48:65:cf:8d:3d:f6:
5f:76:1a:8e:63:67:77:ff:1d:20:27:d1:7b:26:f7:
77:2e:8b:3a:b4:a1:bd:60:1a:f2:11:5b:21:16:97:
4e:a6:7c:32:4a:a1:72:b6:01:a8:59:18:a3:c9:30:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:96:67:6F:F3:3C:76:C2:8E:FD:45:DC:93:DB:9A:A7:FE:CF:D4:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/5576bbfe-1d66-3d23-b25e-56e5d337d3aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
X509v3 Authority Key Identifier:
keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
sbgp-ipAddrBlock: critical
IPv4:
162.240.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:b3:e6:23:e8:b9:be:28:7f:14:2f:c0:46:16:71:d9:d1:98:
49:d2:9a:dd:cf:47:ad:af:c4:f9:9b:1f:7c:95:16:2e:de:1e:
28:54:80:dd:ff:99:b7:50:bf:f7:a3:31:df:35:43:1c:b8:0f:
0a:be:be:66:bd:52:08:9d:d7:c0:20:a7:da:da:f4:10:b7:bf:
11:61:c7:5b:fe:e8:7a:da:4c:5a:89:ce:4e:56:02:37:fc:8a:
1e:24:d2:26:ab:4d:f7:18:0b:a3:2b:a7:9b:c0:cb:4d:22:23:
38:09:cc:98:58:58:2c:c5:0c:69:26:bf:60:5d:c5:4f:0e:bd:
69:32:72:b4:2f:06:ad:a2:33:fa:29:fa:cc:94:6d:43:54:78:
64:ec:61:5c:1c:5d:d9:bd:0a:ef:8f:06:ae:37:93:fe:e3:af:
22:e0:f9:6b:08:7f:71:fe:4a:20:37:62:d7:13:b5:30:67:13:
59:c5:4f:0a:4f:2c:13:6b:06:c1:37:5a:ec:65:ed:3c:dc:22:
8a:9e:cb:85:46:fb:97:42:35:86:ed:17:18:9c:99:0a:fa:ee:
43:b6:ac:f0:e6:1b:84:fb:40:e2:4e:3b:d8:2b:69:06:69:ad:
fb:53:70:6f:15:c8:ad:a6:c9:a4:a3:75:3f:c4:1a:ed:6e:c5:
8a:f2:b5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:07:21 2025 by rpki-client