Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4a64df62-3227-303a-86d3-3a8f9afba845.roa
File: 4a64df62-3227-303a-86d3-3a8f9afba845.roa (raw, json)
Hash identifier: wwSXKMXrpdZUoZtkFxJ8E/BWIjNKyR7VikKWOetwWWE=
Subject key identifier: DF:28:A4:CE:D0:B5:08:D4:C9:87:87:70:D0:3D:0F:D7:AA:C4:14:20
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F432858493ED3D8DC67B0671048B070C0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4a64df62-3227-303a-86d3-3a8f9afba845.roa
Signing time: Thu 20 Mar 2025 01:00:39 +0000
ROA not before: Thu 20 Mar 2025 01:00:39 +0000
ROA not after: Wed 18 Jun 2025 01:00:39 +0000
asID: 20253
IP address blocks: 162.222.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:3e:d3:d8:dc:67:b0:67:10:48:b0:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Mar 20 01:00:39 2025 GMT
Not After : Jun 18 01:00:39 2025 GMT
Subject: CN=e437e2ae-0d75-44f1-a1b9-65f7d3cff046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:0d:a2:5b:fd:85:8e:98:d5:c0:d3:80:ff:
a7:94:56:71:c5:04:19:14:93:59:f0:bd:9c:07:83:
c9:37:f3:5f:3f:45:88:f7:bb:da:1d:9a:15:c7:83:
2b:2c:6e:10:8f:fd:98:da:4b:e1:66:3e:eb:15:e2:
f7:27:fd:49:27:0e:05:fc:13:ab:b4:77:f4:ae:f2:
32:44:47:f8:9e:54:53:44:c9:14:b3:1d:ec:a3:5b:
08:eb:c3:4d:ea:9f:56:7c:03:db:df:e3:f9:c6:af:
1a:e3:48:d3:ee:9b:68:3c:0e:11:0f:f2:8a:dd:59:
f5:8f:96:8b:3f:1f:24:e2:f9:d8:b7:89:00:78:a4:
1d:7e:19:88:88:a5:85:fc:fa:23:fe:dc:22:94:4c:
6b:fc:06:ad:09:5f:28:89:72:d9:81:3b:cc:9b:db:
09:ea:63:0b:9d:71:ac:f7:85:31:09:fd:fe:20:a7:
b7:de:06:80:b8:3a:17:90:e0:0c:d3:86:49:96:19:
74:2e:55:03:c8:ca:4b:9b:cf:aa:a6:1d:90:03:07:
8e:62:f0:d1:2a:90:35:29:04:55:b5:74:c6:25:d2:
35:67:67:26:81:1b:4c:3d:12:39:fe:ce:3a:ab:54:
83:95:c6:5e:10:9e:d2:91:d8:0a:d6:21:d1:9c:de:
a1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:28:A4:CE:D0:B5:08:D4:C9:87:87:70:D0:3D:0F:D7:AA:C4:14:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/4a64df62-3227-303a-86d3-3a8f9afba845.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv4:
162.222.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:59:2d:f9:8d:34:89:09:4e:fb:af:02:6a:89:c2:52:0d:f3:
27:77:1b:eb:de:b1:11:dc:a2:58:ea:da:c8:5f:b1:53:e3:4f:
b3:71:3f:73:4c:a8:62:05:ff:a2:45:6c:e4:96:59:99:09:0f:
25:de:91:e8:17:ee:38:47:8e:9e:7d:53:8b:d9:b6:25:e4:80:
89:da:58:a0:04:05:1d:e6:77:09:d6:e2:fb:93:1b:83:a6:43:
60:24:93:b2:1f:e2:86:d1:1d:71:ca:69:0d:40:3b:67:d2:16:
84:54:79:58:75:dc:d4:10:03:e4:2a:c3:ec:8a:04:65:ee:3f:
43:85:45:50:ac:f7:41:d4:a4:46:f3:7c:e2:f8:75:8b:52:fd:
db:03:0c:2b:8a:ec:53:ab:a6:4b:e2:b5:63:ab:28:d1:84:0e:
15:76:76:e0:c1:46:37:4a:4f:3f:21:66:bf:34:24:8c:55:c9:
81:24:9f:71:ab:ea:fe:bf:64:2e:da:2f:2d:bb:56:48:17:37:
7d:73:6e:5a:c6:ca:ce:df:aa:a7:b0:ea:74:d4:86:d4:cd:29:
77:2d:73:2d:c3:43:6e:c1:8f:c9:ff:c3:05:ef:17:e5:d5:87:
93:fc:26:f4:b2:5d:93:75:4e:92:4a:f2:83:bf:90:66:b1:80:
cd:79:6f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:35:47 2025 by rpki-client