Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/840cb531-cc21-3eb3-9286-cda6c5a55992.roa
File: 840cb531-cc21-3eb3-9286-cda6c5a55992.roa (raw, json)
Hash identifier: ZI9xqhxh1AWC0LINREcXPQLSWz3yxsXwMEbAP2IhHzs=
Subject key identifier: 37:A8:26:E8:16:46:74:3D:DE:88:9A:04:87:6F:E4:EB:7E:8A:33:38
Certificate issuer: /CN=2bd92006-9133-44da-89c6-5e9014a854c9
Certificate serial: 010D0C9F432858493C09409E5ADACFE18221DF80
Authority key identifier: DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/840cb531-cc21-3eb3-9286-cda6c5a55992.roa
Signing time: Wed 19 Mar 2025 01:00:40 +0000
ROA not before: Wed 19 Mar 2025 01:00:40 +0000
ROA not after: Tue 17 Jun 2025 01:00:40 +0000
asID: 27489
IP address blocks: 160.79.127.0/24 maxlen: 24
2602:f966::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3c:09:40:9e:5a:da:cf:e1:82:21:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd92006-9133-44da-89c6-5e9014a854c9
Validity
Not Before: Mar 19 01:00:40 2025 GMT
Not After : Jun 17 01:00:40 2025 GMT
Subject: CN=130fc130-464e-4ec9-8790-ac042567458c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:23:47:35:f2:07:e1:bd:43:4a:81:04:fc:
f5:b2:c3:4f:83:c7:d5:9f:7a:c6:80:5e:1e:c6:3c:
62:9a:5e:ee:06:98:70:c0:a6:8b:bf:3d:7a:ec:a2:
b1:01:55:bd:ca:97:f7:ba:1c:09:33:e2:05:96:c4:
2b:5f:23:1c:31:fd:9b:49:cf:ea:3c:e0:5e:3f:b6:
6c:f5:ef:98:4d:40:e3:d1:d1:1a:90:a2:db:e2:6b:
16:e7:52:3c:3e:1a:a3:09:c2:f1:c1:f3:a3:ca:cc:
c9:e2:d0:3f:64:04:21:76:f3:2b:60:27:51:4c:04:
db:93:33:6f:e0:e2:63:c9:b1:ac:6c:10:96:4a:b6:
cd:b9:04:1d:f1:42:da:53:ae:c7:e3:ee:51:1c:e7:
43:5a:90:9f:71:87:88:f6:d2:63:10:66:72:f8:d7:
c3:55:7f:b6:ef:49:e1:eb:59:de:ab:cb:f8:81:e5:
37:19:04:3b:a7:b6:4e:45:0b:78:a5:01:ca:cd:b9:
0d:64:9b:c0:1f:5b:bb:92:68:15:30:a1:08:b3:85:
03:9f:85:c9:45:1c:6a:81:cb:77:ca:04:89:f8:59:
ff:a4:2e:6c:e6:b4:98:d1:ff:ea:38:e6:5b:c0:ea:
d3:64:4e:1c:4c:2c:5a:e1:e5:df:a7:80:6f:0d:5d:
3c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A8:26:E8:16:46:74:3D:DE:88:9A:04:87:6F:E4:EB:7E:8A:33:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/840cb531-cc21-3eb3-9286-cda6c5a55992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9/2bd92006-9133-44da-89c6-5e9014a854c9.crl
X509v3 Authority Key Identifier:
keyid:DC:1F:BD:E8:05:8E:29:0E:F9:48:55:86:F7:1E:69:7A:0E:DE:7B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2bd92006-9133-44da-89c6-5e9014a854c9.cer
sbgp-ipAddrBlock: critical
IPv4:
160.79.127.0/24
IPv6:
2602:f966::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:9e:ad:cf:4f:37:45:a8:86:03:31:44:36:96:2e:52:c0:fc:
c3:43:29:d4:ac:89:76:2d:2f:e1:3b:02:22:73:ea:36:71:4d:
5b:aa:3c:ed:ef:1d:30:e4:b5:64:2e:82:2c:71:6d:40:85:ee:
80:31:01:78:a7:41:59:90:9c:e2:10:2b:ac:1d:78:17:1b:49:
d9:46:cb:d6:e6:09:3e:76:7f:cc:fc:c6:a6:6e:5c:62:a0:1c:
31:4b:37:ab:22:a7:ed:7d:c3:81:21:21:64:50:eb:2f:7a:1c:
74:7a:a3:c7:9f:5c:05:3c:ae:26:eb:64:69:2e:a8:53:08:62:
43:77:39:f6:22:8e:be:0a:72:2d:4d:47:e3:0e:49:ab:7e:63:
18:4f:f2:1e:9d:bb:39:72:35:f8:9c:85:5e:43:ee:32:b1:ed:
08:20:64:7a:0d:80:28:2c:24:53:37:2d:4e:ee:9e:e8:9b:2b:
81:10:cd:c1:00:72:36:3a:9e:f8:e8:0d:2e:13:31:b4:5f:8d:
01:05:e2:c8:12:98:c9:5f:24:98:17:62:ab:c5:4a:1e:79:df:
1c:8b:0b:26:9e:f8:10:37:ac:16:46:d1:90:55:7c:e5:ca:3b:
f9:59:8f:1c:ce:32:0a:25:c7:eb:4c:bf:70:11:87:35:0a:6d:
bd:65:ff:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:08 2025 by rpki-client