Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/acf39d2e-15f6-3ff1-909b-2602b55e1d0f.roa
File: acf39d2e-15f6-3ff1-909b-2602b55e1d0f.roa (raw, json)
Hash identifier: uUrPo0I//KRcv4tjsKNrvue6d+ZepiB64NUPca4l4KI=
Subject key identifier: 30:52:59:D6:45:92:E7:19:99:2D:59:A5:29:D0:7A:C9:0F:9C:A1:73
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584953C44CF607E409F5D0BCB980
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/acf39d2e-15f6-3ff1-909b-2602b55e1d0f.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 11290
IP address blocks: 162.244.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:4c:f6:07:e4:09:f5:d0:bc:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=62c2e7d4-1f36-4cd7-bff4-65d5ae5e1f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:44:52:9d:9d:3f:29:f9:2b:03:19:24:a4:
20:91:8d:8c:3d:f7:d3:ed:7f:f1:6a:70:60:67:6d:
aa:eb:28:8e:0d:25:31:80:f8:94:05:75:49:74:63:
1b:cf:02:b8:99:92:67:1e:ad:96:29:c6:dd:bd:29:
35:1b:ee:b2:e6:4b:ab:e1:69:3f:60:1c:da:d3:6b:
fe:94:4a:29:cc:b1:b3:8f:45:85:f6:0c:2b:1e:da:
09:36:f4:2e:08:0d:d9:f8:a1:43:aa:da:bf:a3:18:
8f:31:ea:9d:cf:95:90:0b:0f:bb:48:82:e7:5d:87:
1f:8a:39:4f:bc:5f:21:a5:b8:7b:c3:e8:c4:de:3d:
7a:6f:62:42:1f:fb:cd:1f:91:51:16:22:65:29:58:
d0:57:76:84:8b:c7:48:39:df:b4:31:31:ef:65:50:
73:4d:b8:50:d8:2a:4b:4b:ea:c1:37:c7:ae:98:4b:
56:bf:45:bb:1a:20:ce:4f:ee:06:be:5f:90:02:47:
35:34:64:ce:d0:18:8f:dc:68:a1:c2:6c:2e:dd:c0:
2b:e6:df:e8:4a:5d:53:0e:02:7d:b8:62:23:ef:d3:
8c:0d:a7:0e:42:00:4a:a1:e2:50:3f:ac:04:4d:8d:
ac:11:88:18:a0:5c:4e:80:dd:85:6e:be:5f:0d:a7:
1d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:52:59:D6:45:92:E7:19:99:2D:59:A5:29:D0:7A:C9:0F:9C:A1:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/acf39d2e-15f6-3ff1-909b-2602b55e1d0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
162.244.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:d6:aa:90:87:86:64:97:63:e9:72:53:77:f9:e4:8e:52:17:
0c:d0:88:8d:92:4f:c5:ac:fd:b9:93:8d:b9:0a:b3:80:5f:26:
91:53:df:3c:e0:b3:7b:e2:98:19:88:83:85:d6:99:e8:a3:95:
31:bc:27:1e:23:26:b8:dc:bc:1a:f7:ff:60:77:15:6c:9b:06:
fb:11:84:72:13:07:1e:4a:70:f1:a3:68:50:7c:ff:a3:6c:84:
04:a4:32:44:2f:43:5c:6a:66:04:b1:ef:23:62:30:e6:f4:f6:
43:b8:14:a1:f6:33:8e:e2:81:ce:f7:e2:41:4c:0f:82:3b:da:
32:53:d8:da:bb:fb:44:8e:29:b0:75:a6:f6:c4:66:9e:16:41:
a7:f8:0a:0e:40:19:93:07:24:70:4a:c1:87:a0:fb:3a:53:82:
4c:ce:05:50:86:35:d2:ff:9a:1a:5f:62:31:63:82:a9:97:1a:
ce:03:9f:e9:cd:98:55:eb:9d:f6:6b:39:8c:e0:a2:ed:2a:f6:
c5:63:99:61:dc:3c:ae:d5:4b:dd:22:a1:4e:e2:cd:b7:4b:e5:
31:a1:0f:15:86:d8:ed:81:8d:4a:34:9b:5e:3a:34:80:69:4d:
8d:c3:6d:26:ed:cb:6c:65:a2:40:a0:de:52:8a:bd:70:da:66:
0a:13:59:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:22 2025 by rpki-client