Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa
File: 2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa (raw, json)
Hash identifier: FIxfe2Gg4PPCWEVU+tbTRCm6PQondRz/lJEUpldY0zY=
Subject key identifier: 34:8D:64:FF:91:E6:EA:1B:B8:4F:76:79:65:4F:EE:A4:22:A7:10:38
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F432858494039445AAD63345839EF2980
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa
Signing time: Thu 20 Mar 2025 13:00:53 +0000
ROA not before: Thu 20 Mar 2025 13:00:53 +0000
ROA not after: Wed 18 Jun 2025 13:00:53 +0000
asID: 29802
IP address blocks: 162.220.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:40:39:44:5a:ad:63:34:58:39:ef:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Mar 20 13:00:53 2025 GMT
Not After : Jun 18 13:00:53 2025 GMT
Subject: CN=5e783cf3-14ba-481b-8ca6-9b6c75b8c65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:21:76:9e:dd:31:dc:37:28:6b:03:84:d3:d4:
10:2f:24:e3:0c:a1:3e:b9:4f:34:a3:26:5c:d3:9d:
c7:3d:8f:fc:aa:8e:eb:e4:25:85:5c:31:a1:72:ad:
63:81:2a:af:44:1d:46:d6:10:9d:48:08:5f:f6:f7:
30:6c:a6:35:ac:06:80:eb:d5:41:cd:91:30:57:af:
fd:50:86:9d:9e:3a:e7:41:44:9e:ac:98:9c:8b:a5:
4c:c1:2d:aa:54:7f:ba:58:0d:e6:5f:f1:67:29:a4:
f0:94:3d:d5:80:dc:ca:56:aa:40:dc:80:c0:d9:cd:
88:a1:f2:a0:90:fc:3c:a8:59:7b:cb:6d:56:85:31:
06:f3:39:c6:91:cc:ef:96:49:30:19:4a:c3:8b:0c:
82:16:f7:88:ce:7b:27:c6:f4:07:02:db:71:61:0f:
27:02:79:5b:42:fd:f4:56:76:fa:02:49:73:02:c3:
f1:c1:f7:b2:77:19:35:53:dd:a8:f2:67:1a:39:02:
70:2a:c7:4f:c7:71:07:47:6e:64:90:4e:ce:6f:90:
c9:f3:47:0e:e3:19:89:96:36:82:96:71:c5:79:02:
6a:ba:a5:5f:42:30:5b:ae:29:13:29:8e:0b:fa:af:
28:b5:77:e3:a5:4d:f7:a9:3d:99:bc:36:be:1c:5e:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8D:64:FF:91:E6:EA:1B:B8:4F:76:79:65:4F:EE:A4:22:A7:10:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/2af0d1ee-a4ef-3e69-b833-a09209768b4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
162.220.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:c8:52:62:ae:9b:26:e0:52:86:3a:53:cb:1c:1b:46:e2:3c:
b5:21:1b:9c:bb:2d:08:88:06:41:cd:88:89:fd:c4:18:f3:ef:
10:d9:32:33:f8:69:c2:9f:1c:e0:81:17:14:cc:c7:12:af:bb:
f2:a2:cb:ae:e9:f1:48:0f:1b:ab:d6:34:4f:6e:87:f6:76:e2:
63:99:f8:18:62:e3:d4:87:94:59:39:ec:e1:a2:88:a0:43:f1:
cc:50:41:19:c0:a0:52:b5:d1:68:36:41:5b:46:3e:9f:eb:4c:
b6:0b:9a:2e:5c:0a:4d:f8:59:c8:37:1a:dd:21:45:b9:a8:11:
26:b4:8a:ff:2b:ad:41:01:97:74:4b:0c:41:3e:41:17:f4:07:
d5:09:fc:b7:ec:ad:41:b4:13:0d:e8:e6:3d:c5:b1:a5:d9:53:
61:d5:0b:54:72:09:c7:63:6a:dd:9a:6c:dc:7a:83:c4:ef:4d:
07:d7:56:de:e8:02:41:c1:7d:44:d6:f9:1d:25:fb:b4:c8:1d:
39:cc:bf:12:d3:16:3e:2e:0e:06:ce:03:38:77:b9:40:f2:60:
b7:76:db:72:0b:fd:4f:dc:47:d3:87:fc:05:62:f3:ed:55:a0:
be:d7:b8:f0:00:c0:37:8f:ee:a0:64:35:f1:75:94:b1:72:eb:
e1:52:5b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:28:21 2025 by rpki-client