Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/3e0dfc89-0865-3433-a7dd-a589567527ea.roa
File: 3e0dfc89-0865-3433-a7dd-a589567527ea.roa (raw, json)
Hash identifier: ubKT2AnXid3XIpnsic8Hx0d2cvZVe7YtLS2iEYJWbCg=
Subject key identifier: 88:B6:1C:FC:7F:A0:70:2E:2C:71:50:3F:88:B4:BB:B8:2B:F1:B5:1F
Certificate issuer: /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial: 010D0C9F4328584930DE75CAED1CE57641F99980
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/3e0dfc89-0865-3433-a7dd-a589567527ea.roa
Signing time: Sat 15 Mar 2025 01:00:39 +0000
ROA not before: Sat 15 Mar 2025 01:00:39 +0000
ROA not after: Fri 13 Jun 2025 01:00:39 +0000
asID: 398787
IP address blocks: 160.153.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:30:de:75:ca:ed:1c:e5:76:41:f9:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Validity
Not Before: Mar 15 01:00:39 2025 GMT
Not After : Jun 13 01:00:39 2025 GMT
Subject: CN=0baf77ac-a7e1-4e65-a5d7-ae1418642ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:ab:53:c2:bd:d3:89:bb:fe:d1:83:31:ef:
ed:2e:09:a5:ec:d5:c5:26:23:65:99:fd:27:0a:d8:
c9:fc:f6:d2:67:9b:4d:bc:b1:d0:e0:75:bb:8e:ed:
fe:35:f6:ad:24:97:cc:88:e0:5d:6d:1c:93:0f:4c:
8f:f9:45:af:fb:34:cc:61:b8:56:78:32:29:7d:bb:
45:51:0e:fb:6a:61:3a:dc:ce:78:6c:2b:a3:a8:8a:
75:ea:d1:ce:d9:82:8b:6b:b8:a7:a8:fa:c1:6e:eb:
55:7d:d6:f0:32:ff:ce:e5:a4:d1:9c:b9:c2:20:c5:
9c:5a:19:da:30:49:57:c7:0f:a9:f9:f3:3d:b7:e4:
7d:b0:02:28:86:76:a2:8f:95:01:36:5c:e3:8b:b2:
2e:83:5b:c1:ff:85:b5:a1:76:67:cb:af:d6:43:54:
77:9a:ec:b9:6a:b5:ba:92:d3:67:8a:4e:ee:67:d4:
c0:2e:1a:0e:df:bd:84:79:76:a8:4a:cf:e4:98:c6:
2b:72:3f:5f:8d:6e:06:55:a9:4a:1e:e2:36:3d:49:
3f:9a:83:a3:9e:83:1d:c1:76:44:30:f9:6b:05:25:
36:1d:7f:05:19:30:d8:28:88:cf:7d:b8:b9:59:ea:
2d:7b:57:08:68:b6:81:8a:f6:e5:24:df:3b:ff:90:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B6:1C:FC:7F:A0:70:2E:2C:71:50:3F:88:B4:BB:B8:2B:F1:B5:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/3e0dfc89-0865-3433-a7dd-a589567527ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
X509v3 Authority Key Identifier:
keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
sbgp-ipAddrBlock: critical
IPv4:
160.153.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:c4:47:cb:bc:3e:d2:6a:4f:a4:95:83:31:c0:2b:d1:4e:bd:
88:5e:57:c3:2b:3b:d5:13:0c:54:da:a2:24:9f:17:a0:d3:bb:
be:60:5b:51:ec:d8:08:8e:30:50:13:b2:41:dc:5e:15:8e:cd:
a3:ac:22:1e:c1:65:be:4b:fe:2d:6c:b8:5c:3d:dc:36:03:46:
cd:4c:ee:40:ad:38:f8:e2:75:bc:44:7d:7a:56:4a:f5:b6:25:
d3:a6:61:7b:5f:ed:71:7d:6d:8a:8e:83:29:26:7b:5c:5d:16:
7d:9a:58:f6:7c:3c:d0:f1:03:6c:d1:f6:3e:c9:44:fb:ad:38:
08:a2:f6:6a:35:fa:76:33:bf:34:ee:cf:4e:69:a6:e5:87:2a:
00:50:d5:a5:93:d6:08:5c:b9:0e:b6:7b:12:94:f8:05:c0:2d:
9a:7d:56:81:5d:0a:24:76:36:ed:f9:ae:33:fc:47:02:2b:ca:
26:ff:e7:36:04:bd:f7:26:10:56:9c:54:42:9e:45:33:ef:d6:
12:27:8c:2b:65:8a:fd:d1:83:77:24:28:d2:bf:ab:16:23:59:
2e:38:56:01:5a:f1:86:f0:41:1c:b3:e5:22:02:3b:08:b9:8e:
4b:23:ba:34:cd:5a:08:7b:0c:aa:7a:c7:82:25:bd:36:11:cb:
fe:be:32:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:09 2025 by rpki-client