Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/4dd2c61d-5b74-3f69-a18a-1170556b1992.roa
File: 4dd2c61d-5b74-3f69-a18a-1170556b1992.roa (raw, json)
Hash identifier: 6IkcUWPpkbtirYpxLj5D8ls5CyiCBkuBQc4qQcquS+I=
Subject key identifier: 4A:9E:4D:E2:6D:C4:99:BE:79:62:F0:6B:EA:AE:76:AB:1C:26:29:80
Certificate issuer: /CN=0b51ae6f-ea14-4884-8fd5-2317d0822e42
Certificate serial: 010D0C9F43285849002168F783ECF71AC9DBE200
Authority key identifier: 44:6E:AC:90:D5:3E:D9:7C:66:A9:24:9B:91:5F:34:49:44:32:BE:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/4dd2c61d-5b74-3f69-a18a-1170556b1992.roa
Signing time: Tue 25 Feb 2025 14:00:52 +0000
ROA not before: Tue 25 Feb 2025 14:00:52 +0000
ROA not after: Mon 26 May 2025 13:00:52 +0000
asID: 40940
IP address blocks: 158.51.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:00:21:68:f7:83:ec:f7:1a:c9:db:e2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b51ae6f-ea14-4884-8fd5-2317d0822e42
Validity
Not Before: Feb 25 14:00:52 2025 GMT
Not After : May 26 13:00:52 2025 GMT
Subject: CN=e35af0f1-eea9-4b97-8d7b-7c8839ce3f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:ed:5d:59:13:4d:18:5a:fa:56:8d:64:44:
ac:34:e5:96:e0:1a:4a:3e:2f:c4:95:47:a8:8f:22:
09:71:aa:2f:c8:d7:32:37:cf:77:36:95:1d:6e:ac:
b7:3a:f3:ee:fa:94:a2:ba:de:1f:ab:12:ef:59:f9:
4f:cd:78:8a:73:c0:72:20:0b:d0:7c:14:41:49:31:
03:ea:c5:61:c8:9b:ce:39:7b:d0:29:52:5c:dd:06:
03:07:ab:1b:64:e7:08:78:3a:50:54:ca:cc:3a:4c:
64:fc:00:dd:72:11:f1:2b:04:ce:5c:03:cb:39:43:
44:a4:c6:82:7f:37:9f:82:a1:db:09:1a:82:70:1b:
94:48:66:a7:2a:0b:26:58:d0:80:77:56:7c:1d:20:
03:8d:80:7e:09:79:c6:16:d0:7b:8b:82:2d:9a:d0:
ae:63:ce:67:f2:e9:e5:d8:03:7f:c2:7c:18:fd:87:
b4:31:fb:a5:0d:ba:14:bf:f3:56:ad:1e:8f:68:02:
68:ab:7f:eb:53:80:21:95:f6:aa:45:9a:cd:90:d3:
5f:f8:3c:d2:c2:f6:c6:18:70:ad:76:2d:19:0c:59:
e3:c2:b3:14:8e:7b:f1:49:99:28:00:f4:61:52:53:
30:5f:a1:83:36:dc:27:1f:18:f8:4f:dd:4b:64:72:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9E:4D:E2:6D:C4:99:BE:79:62:F0:6B:EA:AE:76:AB:1C:26:29:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/4dd2c61d-5b74-3f69-a18a-1170556b1992.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42/0b51ae6f-ea14-4884-8fd5-2317d0822e42.crl
X509v3 Authority Key Identifier:
keyid:44:6E:AC:90:D5:3E:D9:7C:66:A9:24:9B:91:5F:34:49:44:32:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0b51ae6f-ea14-4884-8fd5-2317d0822e42.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.50.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:77:59:ac:f7:15:01:f0:4e:0c:cb:24:10:64:cd:72:ff:69:
ce:7f:79:cc:d3:07:7d:78:29:e2:a4:8b:36:fa:8c:b4:3a:91:
28:71:25:90:bf:40:77:e6:79:9c:74:c4:b3:8c:91:54:f3:75:
4b:2a:33:eb:d6:80:9e:0c:5f:1f:fe:fd:74:0d:99:00:5e:98:
21:9d:7a:a6:71:8b:f9:60:c0:0b:1b:99:d3:4b:0a:f2:87:88:
7e:3f:0d:15:4a:a6:ff:d0:88:05:bc:09:d2:5d:c6:a7:0d:8c:
9b:6e:79:fb:90:72:cc:c8:1f:22:15:c4:5d:1b:f2:5a:9e:c3:
0a:95:5a:d4:21:49:79:25:41:22:6f:e5:a3:41:ff:7b:84:66:
76:0a:06:8f:df:77:96:c9:2b:00:50:7a:88:47:d8:5c:04:fe:
cc:21:4a:88:e3:d7:f4:64:b7:65:88:0b:7f:0d:9c:16:43:fe:
cc:d3:d5:5d:66:9f:5b:02:df:eb:3f:33:d9:83:21:21:6e:3e:
f7:c7:9c:af:72:80:4b:5b:ce:f8:41:ae:e9:87:97:b1:6c:d6:
8e:a1:cf:76:35:76:4c:07:de:1e:8a:88:44:f8:b5:6f:11:2d:
91:5e:07:31:9a:a2:79:1f:4d:b0:6e:0e:82:a8:7f:50:d3:db:
9c:57:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:11:05 2025 by rpki-client