Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/407eb689-b5d3-3550-bce9-04f298590521.roa
File: 407eb689-b5d3-3550-bce9-04f298590521.roa (raw, json)
Hash identifier: RAxLV3FFEL5IiOfSNrNBiT/RiyDseaxGJP5Y/q6x6RA=
Subject key identifier: AB:CE:51:70:F0:A3:59:B2:6A:D6:9A:C1:3D:96:E2:27:FF:CE:8B:75
Certificate issuer: /CN=b93a83dc-e910-416f-88d0-d8d64914eb02
Certificate serial: 010D0C9F432858442E2EAE9A2FBFEA10BD7A5180
Authority key identifier: 82:1F:CC:49:43:33:69:AD:E8:33:EC:DB:1F:C8:39:D6:BE:98:14:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/407eb689-b5d3-3550-bce9-04f298590521.roa
Signing time: Mon 11 Dec 2023 14:00:20 +0000
ROA not before: Mon 11 Dec 2023 14:00:20 +0000
ROA not after: Sun 10 Mar 2024 13:00:20 +0000
asID: 3257
IP address blocks: 162.251.171.0/24 maxlen: 24
172.82.36.0/22 maxlen: 22
162.251.168.0/24 maxlen: 24
162.251.169.0/24 maxlen: 24
162.251.170.0/24 maxlen: 24
2602:fec5:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:44:2e:2e:ae:9a:2f:bf:ea:10:bd:7a:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a83dc-e910-416f-88d0-d8d64914eb02
Validity
Not Before: Dec 11 14:00:20 2023 GMT
Not After : Mar 10 13:00:20 2024 GMT
Subject: CN=ef807255-f0fa-4766-855d-ea776fc3a777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0f:9d:94:af:72:b0:ec:33:0f:ae:aa:97:db:
51:bd:14:c9:15:73:98:de:30:6d:f3:97:42:3e:48:
87:57:48:48:46:a9:74:cf:03:ec:89:fb:15:4f:f0:
76:e9:81:44:f2:1d:d0:ac:7f:70:52:5f:70:48:5c:
ca:7b:96:be:3a:5e:b2:be:6d:5f:3d:47:49:00:db:
db:4a:10:79:4a:56:3a:77:5f:ab:99:5f:14:8a:1c:
af:42:47:64:c4:31:26:75:58:81:be:7f:23:bc:a5:
d1:49:54:e6:83:b9:0e:4b:75:f2:da:a3:44:03:a3:
b3:0e:b1:93:5f:ea:e7:a0:78:69:c9:1d:30:47:92:
bc:66:7a:c2:a2:ce:91:d7:85:e3:3d:28:50:11:43:
eb:bb:20:12:aa:a5:21:8e:54:1c:d4:86:82:de:d7:
f3:c5:e1:d7:18:68:a6:fb:5c:cb:5f:25:a7:1e:98:
28:69:51:0d:f5:f0:40:87:b3:21:3f:a2:1d:44:88:
a9:23:cc:e0:92:57:5a:a3:94:06:11:91:f9:b5:95:
b3:be:9d:9c:31:34:06:ae:15:d7:cc:82:98:37:57:
d7:f7:84:bc:21:a7:f8:04:62:ac:8f:88:10:00:83:
28:3f:59:5e:82:4e:49:be:39:a8:56:2e:d6:1a:04:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:51:70:F0:A3:59:B2:6A:D6:9A:C1:3D:96:E2:27:FF:CE:8B:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/407eb689-b5d3-3550-bce9-04f298590521.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02/b93a83dc-e910-416f-88d0-d8d64914eb02.crl
X509v3 Authority Key Identifier:
keyid:82:1F:CC:49:43:33:69:AD:E8:33:EC:DB:1F:C8:39:D6:BE:98:14:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b93a83dc-e910-416f-88d0-d8d64914eb02.cer
sbgp-ipAddrBlock: critical
IPv4:
162.251.168.0/22
172.82.36.0/22
IPv6:
2602:fec5:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:46:2f:40:f8:8e:ea:6a:3b:e0:25:53:1d:d3:86:28:ab:b9:
b7:f0:f4:8f:2f:f8:47:93:b2:4e:44:20:f7:9d:18:2e:27:2a:
c6:b0:4f:7b:b2:ff:88:d9:ea:0a:97:d3:3d:da:33:e2:2a:77:
0d:88:e0:08:fc:22:e4:6f:42:5d:bd:4c:46:01:1b:b4:e5:fd:
f9:3e:4f:63:29:c0:7f:c9:54:60:05:de:cf:22:ab:46:dd:bd:
32:f5:df:3e:1b:d1:42:3c:0d:f5:be:cc:fb:33:fc:9a:23:7d:
9d:0f:b6:28:a8:4b:4d:43:00:f9:f8:17:f4:25:2f:19:7a:7e:
50:b0:68:d4:14:53:4c:c4:da:4a:67:07:11:0d:a5:47:a4:5f:
93:2f:ff:b8:c8:98:53:de:cb:74:ff:03:63:84:2b:4a:2d:75:
f7:75:4b:96:ac:4d:ea:aa:58:ff:87:f1:f4:25:d3:c1:61:0b:
aa:85:35:51:14:8c:6c:f0:17:f3:8b:42:3a:62:4a:9f:f0:d3:
8b:1a:de:6a:a6:4f:92:ad:f1:31:c0:10:96:fc:e9:6a:80:fc:
cf:54:30:44:06:62:37:29:01:74:70:a6:c2:e4:6d:df:e9:64:
91:e2:e7:d7:79:c9:43:c4:f5:4c:5e:88:46:1d:a4:b2:f1:8c:
e9:a6:77:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 21 21:59:54 2024 by rpki-client on console-ams.rpki-client.org