Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/be1970f7-d094-3bfe-9756-b8318013ce04.roa
File: be1970f7-d094-3bfe-9756-b8318013ce04.roa (raw, json)
Hash identifier: 5qaMD15cu5QhvIaveWK4/TraXaPst0g2hTIdCi9Vahc=
Subject key identifier: FD:24:C7:86:F4:DF:1A:EC:B8:FF:A5:9F:F7:2D:30:BC:83:37:2D:D6
Certificate issuer: /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial: 010D0C9F43285849350E96B1140A8CEAC79F6CA0
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/be1970f7-d094-3bfe-9756-b8318013ce04.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 87
IP address blocks: 149.160.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:96:b1:14:0a:8c:ea:c7:9f:6c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=9a7a1840-2387-455b-a6bc-d6bd878e1831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:13:56:85:40:9f:de:53:3c:4e:29:89:8a:88:
45:20:2e:34:e2:48:e5:5f:37:9a:40:d0:4c:44:7d:
a4:20:94:81:66:0d:37:e4:97:ef:10:02:f8:ec:64:
9c:1b:c3:6e:80:c3:99:d3:5e:43:7e:9a:dc:93:ba:
1e:57:77:62:8b:d4:7b:df:a6:39:53:37:92:1c:e0:
9e:b6:d3:4b:45:70:1c:d8:27:40:1c:d8:6c:22:4d:
21:56:ce:9c:f8:15:04:8a:01:f5:8d:bb:a0:00:b9:
b7:61:b3:54:09:c2:4d:bc:4f:6e:37:c0:b7:db:d8:
43:8a:ca:66:80:2b:e4:d9:72:0b:b0:b2:c1:97:2b:
86:33:eb:62:fb:6f:d0:63:9c:be:5c:3d:d1:5c:f3:
86:79:cd:e9:71:04:70:dd:6a:a9:70:21:71:ad:12:
e4:a9:72:f1:3c:aa:e6:4b:ad:fd:93:b1:d8:69:b6:
83:0b:e7:5a:a7:be:73:ac:c6:d8:8f:cb:cd:b3:3e:
79:86:47:0c:d5:1c:77:35:92:17:bd:1e:86:61:d2:
4e:45:ba:21:49:86:41:36:fe:bb:bb:b5:66:f6:c4:
3c:a6:02:7e:07:f8:20:72:85:bc:c5:ea:a9:e4:17:
64:c3:cd:1b:cd:39:4e:3e:c9:f7:b0:0a:f7:61:b6:
98:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:24:C7:86:F4:DF:1A:EC:B8:FF:A5:9F:F7:2D:30:BC:83:37:2D:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/be1970f7-d094-3bfe-9756-b8318013ce04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
X509v3 Authority Key Identifier:
keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
sbgp-ipAddrBlock: critical
IPv4:
149.160.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:fe:3c:42:4a:4c:80:61:39:aa:8b:13:eb:f6:05:40:82:44:
7e:b9:12:da:0f:cf:8e:45:e8:70:59:87:c6:06:cd:58:24:b6:
c8:94:03:c4:48:fd:20:cd:82:e6:1d:df:a6:c5:c9:1d:2e:42:
be:10:ca:49:39:22:73:94:ed:bd:ef:90:32:3e:42:3a:f9:25:
2b:5e:c9:ad:9a:74:56:33:e4:a9:39:5c:65:a5:54:0d:b5:a0:
c1:e8:82:70:ed:e0:4a:d1:36:60:ae:31:a5:a8:07:f9:3e:a5:
13:e9:4f:ee:70:26:a1:a9:96:51:dd:ef:fe:45:71:3e:ef:31:
82:33:3a:a4:04:89:ca:d9:02:f3:a5:e2:01:61:5d:d8:05:eb:
f7:ca:5e:3d:f1:2a:80:18:1d:2a:84:89:df:45:e8:48:a8:83:
b9:d2:02:a6:93:23:a8:4c:ae:48:9d:7d:aa:9c:07:e1:a5:04:
c7:d3:26:37:a0:20:82:4d:24:bb:30:54:b9:82:cc:6b:d5:21:
69:ae:82:75:d0:ae:d3:36:91:36:39:8a:54:a5:83:c0:44:9f:
3c:b6:93:eb:88:1e:29:9c:63:17:07:04:c3:2e:e3:2f:d1:93:
d4:66:4b:44:ca:18:62:0d:c5:ad:b8:01:66:c2:e0:9d:83:25:
24:7a:ec:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:14 2025 by rpki-client