Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa
File: cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa (raw, json)
Hash identifier: 84Doj/a66wS87TRvwVqcd/cAIOsMSMSFoE79lLEFjoM=
Subject key identifier: C3:2C:E2:35:95:5D:79:A7:D9:36:30:8B:94:5E:57:F2:48:8E:57:48
Certificate issuer: /CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Certificate serial: 010D0C9F43285848C3194F9269697A9122DEC580
Authority key identifier: 37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa
Signing time: Mon 03 Feb 2025 17:20:31 +0000
ROA not before: Mon 03 Feb 2025 17:20:31 +0000
ROA not after: Sun 04 May 2025 16:20:31 +0000
asID: 26666
IP address blocks: 162.220.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c3:19:4f:92:69:69:7a:91:22:de:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c73746-18f6-4692-80c6-1d7b3e93659a
Validity
Not Before: Feb 3 17:20:31 2025 GMT
Not After : May 4 16:20:31 2025 GMT
Subject: CN=d821c720-3099-4966-909c-a75704a5dec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:21:05:b8:57:55:b2:70:fd:00:82:0c:41:
ea:bd:8d:28:2e:7a:f6:ab:52:12:d1:83:3b:60:64:
3a:15:42:cb:3a:93:f1:43:ff:1c:80:16:a4:cd:66:
7e:c2:36:b6:d6:bf:5a:39:43:7d:8b:87:38:9f:04:
02:af:79:44:30:a2:c0:0b:3c:11:c4:51:8f:bc:0f:
66:bc:04:53:38:0c:6d:dc:99:bb:31:c9:93:ad:83:
87:50:94:9c:84:c9:17:32:bb:f5:cd:56:d3:e8:63:
60:70:80:1c:b3:fd:d8:f3:14:60:f7:52:52:31:cd:
d3:04:8c:e1:26:f1:5e:96:ac:07:33:8f:9d:6c:fd:
6d:d9:e1:52:1a:04:5d:8d:79:7c:df:55:b6:12:5c:
4e:3f:b1:db:8d:2c:f8:57:52:80:da:8e:14:39:e3:
0e:c9:67:b0:55:06:c9:b8:a8:b7:ef:04:bd:c4:36:
d8:58:62:7d:4f:a3:fc:93:8b:a9:d6:18:cc:a3:2a:
ab:e8:d5:1a:74:5a:a4:cb:0f:47:68:b7:b6:4c:c7:
94:d1:f5:6a:7a:35:3c:4b:30:23:a8:5a:a0:53:7b:
5f:6c:85:5f:4e:b0:5c:ed:7e:c9:1f:40:7f:3f:a7:
00:a7:b7:4e:c2:5b:c2:1e:26:05:4a:bc:86:37:d9:
aa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2C:E2:35:95:5D:79:A7:D9:36:30:8B:94:5E:57:F2:48:8E:57:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/cfcb4d91-fce8-39bc-ad86-9b80be29b856.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a/e8c73746-18f6-4692-80c6-1d7b3e93659a.crl
X509v3 Authority Key Identifier:
keyid:37:0A:97:59:74:D5:5E:63:86:B7:6A:77:B8:A8:47:1C:2E:C1:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8c73746-18f6-4692-80c6-1d7b3e93659a.cer
sbgp-ipAddrBlock: critical
IPv4:
162.220.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:8a:87:9a:3f:82:9e:0c:cc:ce:0c:b3:0d:f7:9b:fd:c4:c4:
71:1c:a4:41:df:d8:cc:55:d6:26:2c:a3:b1:d4:39:ef:cc:4a:
cc:8f:49:a5:75:c4:d5:71:6f:6f:84:c5:03:00:cd:10:6e:9a:
2a:bc:a2:fe:d2:50:8f:9d:57:fe:61:61:fc:cc:96:af:cd:60:
2f:ec:08:b1:ee:4c:a3:46:bf:00:00:b3:98:79:16:b5:46:f8:
f3:e5:61:74:e9:bd:3e:e2:fe:4f:03:ec:8c:60:a1:17:bb:dc:
0e:52:a8:da:d5:64:40:d9:5e:69:46:67:a9:85:c7:97:e5:08:
d3:84:26:98:90:d6:ec:0c:e5:14:30:92:c3:0e:2a:a4:f7:5b:
9f:7c:98:e4:db:ef:71:a7:d9:94:b4:07:be:0d:35:fd:2b:d0:
33:0b:5c:26:3b:a3:e4:40:eb:ac:b7:d6:3d:37:6c:cb:ea:16:
f5:3d:25:a5:ae:b1:60:7a:7e:83:b0:0a:a2:a6:10:94:b2:80:
8a:e7:b6:ad:be:23:1c:e0:5d:37:4a:8d:32:a4:99:9f:3d:21:
7d:ce:bb:cf:e6:dc:df:f6:da:60:36:d2:75:57:09:98:d6:fe:
0c:0a:69:09:05:da:42:d0:ef:ba:e8:9b:35:17:16:14:f4:16:
66:66:3d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:41 2025 by rpki-client