Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa
File: a08f2739-bc57-3f01-8de6-25e8506410f0.roa (raw, json)
Hash identifier: GZptkhE9LJziILDvr/PqUOxNtFRbyomiKs5wHzHYAvY=
Subject key identifier: B2:1F:73:FD:B2:88:00:5C:7D:A1:68:C7:A2:D9:04:E4:D5:5C:0B:80
Certificate issuer: /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial: 010D0C9F432858493ED3CEBCA41A71DBDA6E5B80
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 15092
IP address blocks: 161.199.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:ce:bc:a4:1a:71:db:da:6e:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=dc01d5d6-e17b-46aa-982e-414758279771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:66:62:e6:0a:bb:5a:d7:5f:b9:13:35:e0:
ed:cf:8f:08:f2:de:1e:4f:98:d2:b7:30:d1:f6:f3:
e0:9e:33:bc:3f:50:9f:a3:f2:09:ce:35:69:b0:a5:
b0:21:64:e9:ca:49:be:2c:5d:cf:f5:60:1c:de:62:
42:2c:ea:0b:34:75:5f:c8:6e:da:1e:07:82:fc:49:
23:24:8e:ef:44:55:4d:86:2c:e1:4f:e2:74:47:fc:
95:fb:e0:6a:fd:32:ea:7e:70:47:06:dc:bb:c9:e0:
47:5f:88:32:f5:b1:59:ba:84:ff:4a:d9:92:29:92:
5d:ab:cc:34:0f:36:6c:ac:14:d4:ee:1f:a0:cd:3c:
c1:47:1b:c5:f0:08:ce:8e:2a:e6:e9:02:85:08:83:
31:9b:c6:2b:09:57:9e:c3:27:19:a9:f3:d3:fc:ff:
5e:04:93:fd:94:30:b3:6a:91:06:11:0c:ad:b9:03:
a2:88:7c:59:4c:84:5e:66:69:40:fc:b5:0e:9b:58:
b2:c7:f3:93:57:15:01:bc:6f:7b:8f:21:07:2e:a5:
4b:05:da:1a:39:d2:0d:51:ea:c5:7b:94:45:f6:db:
01:3b:25:2e:54:11:7a:f6:2c:2e:28:f1:3b:ed:a6:
ed:36:21:ed:cc:9d:33:a8:84:9d:50:24:f9:5d:a6:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1F:73:FD:B2:88:00:5C:7D:A1:68:C7:A2:D9:04:E4:D5:5C:0B:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/a08f2739-bc57-3f01-8de6-25e8506410f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
X509v3 Authority Key Identifier:
keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
sbgp-ipAddrBlock: critical
IPv4:
161.199.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:12:d8:0d:29:e5:d0:95:e2:95:2f:0c:ac:43:19:d0:d4:eb:
09:e6:06:47:d5:e0:ce:44:3a:74:c4:b6:2f:1c:a2:e4:5a:fa:
f0:f2:5c:ee:90:11:e0:b9:75:07:f4:77:98:e3:c5:e2:51:7c:
73:38:54:95:03:50:35:76:98:9c:66:32:0a:65:ad:8a:e5:db:
7a:cd:a1:70:8d:9f:2d:c5:7a:2b:e2:57:0b:49:e8:5d:11:ff:
30:28:4a:07:df:87:e5:8e:b3:f5:99:51:a8:24:9d:cc:d6:55:
73:4f:15:29:08:c1:09:8a:1a:b8:c3:4b:84:6b:24:5a:b1:82:
e2:2c:eb:72:05:c5:3c:bc:54:7d:24:1d:d7:47:fc:aa:56:e3:
1f:43:62:f7:51:7b:1d:67:e2:20:2c:ee:b5:5e:20:77:9c:0a:
99:3d:3a:ce:f8:44:0a:ce:20:94:44:4f:24:ee:ea:c0:60:89:
4c:22:b2:46:dd:6c:99:4f:39:3f:4c:7c:ed:22:70:f4:ac:f4:
99:cc:a2:6c:39:8a:ad:81:33:94:ee:74:4a:b0:49:11:f9:1a:
7b:1c:6b:de:08:61:d3:08:8b:9a:be:32:e9:ff:5e:4e:9c:33:
f9:86:79:11:55:2d:d8:47:91:df:7b:ad:6c:8e:4d:3e:d8:59:
cf:53:e1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:41:41 2025 by rpki-client