Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa
File: 12211a98-a467-395a-802f-13b6b78c07d9.roa (raw, json)
Hash identifier: rud8QITdQ+mBHRbOcyN+7zADDE8IuDKon5nw8ZZgQko=
Subject key identifier: D0:86:A6:10:D6:1D:E9:87:31:35:C9:11:6E:6A:C6:82:A3:53:19:86
Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial: 010D0C9F432858490E16C39D8F34C5AEEA511460
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 8075
IP address blocks: 161.221.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c3:9d:8f:34:c5:ae:ea:51:14:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=e5b72f21-4e24-481a-91fe-e4456fa174e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9f:8f:2e:f3:f8:bc:d1:f2:d6:ef:c9:6d:a9:
0a:55:b5:62:1f:4c:20:92:f4:32:c1:2e:4c:ab:46:
c1:5e:14:d2:cd:03:d0:a7:f1:60:01:fb:56:7c:14:
a9:bd:59:da:81:75:44:98:71:f1:8c:6a:43:ec:af:
b8:0b:91:d8:16:f4:b5:55:f2:0c:90:39:bb:75:15:
45:f7:e7:06:c0:c5:eb:55:58:fd:33:67:47:67:64:
2c:60:1e:fa:d7:29:35:27:4a:db:58:aa:f5:47:5a:
61:9f:ea:ab:81:5c:22:ab:ad:bb:3d:63:7e:ac:9a:
d6:85:96:bd:5d:19:f4:0e:cb:71:7c:02:4e:50:1f:
75:e4:78:d3:e1:ae:0e:1a:19:93:8f:4b:2e:a4:67:
73:5d:6e:40:5e:8c:2d:15:2f:41:4e:5a:93:23:96:
a9:8e:c3:26:48:1c:8e:79:53:e1:24:b8:77:05:61:
3a:b0:ad:fe:1e:3c:73:1a:13:1b:f6:7e:a7:4e:89:
bc:c4:1b:9c:d6:4e:0e:9b:4e:ee:00:40:26:ce:7e:
1f:cf:35:bf:21:00:be:3f:08:d3:4a:87:80:5f:3b:
b5:01:60:7c:a9:93:9c:dc:a9:04:27:cd:17:82:7e:
2e:1c:e7:44:3e:61:29:af:93:52:75:6f:ed:4f:df:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:86:A6:10:D6:1D:E9:87:31:35:C9:11:6E:6A:C6:82:A3:53:19:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
X509v3 Authority Key Identifier:
keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
sbgp-ipAddrBlock: critical
IPv4:
161.221.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:5f:48:d0:b4:30:38:35:01:da:79:2e:29:87:f8:d9:ac:90:
10:5d:55:b1:f4:33:b4:25:b1:50:6e:42:3a:72:15:f2:9e:94:
c1:82:4a:80:4b:c8:2b:b0:53:7f:62:0c:8d:d6:52:68:f1:1c:
de:ab:6d:90:fe:aa:fd:ca:1d:65:f1:39:63:a6:a7:cb:96:85:
6b:84:ba:f7:30:d8:b4:9b:f3:ab:95:21:ab:b5:88:ce:48:fa:
4c:f5:bd:6c:67:fb:51:3b:e2:9d:60:28:5e:05:ac:39:e0:e6:
af:fa:1a:30:c2:c6:11:47:6b:73:c9:e4:02:27:30:3c:41:c7:
02:17:f8:d1:dc:14:9a:6a:86:28:66:50:b5:b8:31:46:51:2f:
69:82:f0:27:e8:82:5b:33:6a:bd:82:60:6a:d5:b2:da:fd:af:
1b:f9:03:7b:51:e9:08:01:99:40:c9:c0:48:a3:35:2f:99:27:
77:fd:88:84:55:2c:9a:38:d8:85:a5:45:2a:30:00:ab:33:1d:
15:ea:d1:9c:40:01:50:fb:6d:fd:bb:e6:71:76:2f:69:cc:74:
6d:8e:89:ef:b3:7c:aa:4a:37:e7:a8:a8:a2:a1:96:65:a4:e1:
8b:18:c8:c2:04:bb:d6:8a:ed:69:2b:03:1e:9d:f9:8d:3e:78:
66:55:c9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:39:50 2025 by rpki-client