Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b55d08d0-6228-394c-9d2b-fa036c185f64.roa
File: b55d08d0-6228-394c-9d2b-fa036c185f64.roa (raw, json)
Hash identifier: Ref3nrE+PVq4aE4zbGW2aerO62W8aRwESryWH0Xy7Mc=
Subject key identifier: 8B:48:E0:82:C9:41:7D:00:7A:B3:70:14:45:1B:14:EF:0B:6C:C0:1D
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F43285848E9CBF334BDB06B5F60E7CC80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b55d08d0-6228-394c-9d2b-fa036c185f64.roa
Signing time: Mon 17 Feb 2025 14:00:52 +0000
ROA not before: Mon 17 Feb 2025 14:00:52 +0000
ROA not after: Sun 18 May 2025 13:00:52 +0000
asID: 25899
IP address blocks: 160.223.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e9:cb:f3:34:bd:b0:6b:5f:60:e7:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Feb 17 14:00:52 2025 GMT
Not After : May 18 13:00:52 2025 GMT
Subject: CN=85a483d9-6e1a-4be5-825b-9807fc30354e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c9:bd:93:70:94:ba:e4:ef:bc:6b:1e:9e:cc:
fc:10:3f:35:f3:59:83:0d:20:e8:5e:ac:cd:86:d3:
bc:7e:90:50:9f:dc:4f:74:a7:0a:77:a7:6f:0a:d0:
75:a1:22:f6:b7:61:c0:b4:5d:9a:15:5b:76:9a:c8:
d8:a2:07:fc:84:c1:0b:2e:f7:e6:59:41:bc:41:f2:
9d:2a:d4:8d:11:30:1c:62:46:4e:b0:74:68:8c:92:
76:0d:93:e7:1b:fd:e6:f0:40:79:12:95:eb:4b:5e:
9b:85:a2:4d:7e:1f:7b:38:eb:8f:43:3d:98:0c:9d:
f9:30:c8:62:6d:27:ae:9b:76:02:67:8e:a4:f9:e8:
12:5e:66:d2:54:7b:36:c1:3c:60:14:09:da:20:70:
fd:5f:6e:48:c8:07:8d:34:df:e0:21:9c:5d:4f:53:
43:ac:54:e6:5f:c2:03:90:d0:02:a3:a7:fc:7b:0a:
80:84:6d:12:f1:f3:fa:4c:da:63:a8:f7:63:a2:6e:
28:2b:f2:c1:f8:68:bf:f9:a6:79:d4:da:2e:4c:8d:
0a:26:9a:25:b9:4d:c7:c5:1a:95:f8:67:a9:dc:4a:
a4:89:a8:af:3f:6f:d1:20:f5:50:70:29:d9:71:dd:
52:6c:1b:23:ee:33:c8:1c:e7:65:c2:eb:9d:a5:44:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:48:E0:82:C9:41:7D:00:7A:B3:70:14:45:1B:14:EF:0B:6C:C0:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/b55d08d0-6228-394c-9d2b-fa036c185f64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
160.223.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:5c:43:d7:25:a6:1a:7f:6e:84:1e:a2:63:63:f0:5d:ba:f1:
15:a5:9f:77:b5:85:09:44:b5:f3:61:14:ed:e7:7f:84:e8:68:
d1:84:fd:e9:5f:44:0d:a0:b2:a2:1e:ad:0c:b5:ed:8e:59:c0:
34:fa:f3:4b:d9:c3:3e:d3:5a:39:f8:21:ea:96:49:99:0b:bb:
8d:4b:9c:d8:d8:e9:4f:7f:8e:87:a3:00:b5:e1:ee:ec:6d:e8:
2c:88:83:e8:c0:1b:f6:a8:bd:00:2d:9e:1d:ad:52:4a:a1:8c:
a5:cd:d3:7e:7f:30:93:83:06:3a:47:cc:f0:0f:3d:c2:33:80:
9a:33:fd:39:f6:13:9e:e3:d4:06:f0:65:fa:2a:29:4a:c5:43:
9b:07:96:a6:e5:d3:fd:ba:40:22:1e:d8:5a:23:0b:67:0c:fc:
6b:08:27:3b:77:ea:9d:54:b9:38:11:b2:b7:de:c7:8d:06:a6:
25:44:64:a4:d0:ef:ea:f4:37:2a:1e:f8:bb:ea:4e:2d:08:7a:
f2:cb:e3:f7:58:d1:06:66:fc:0f:c0:75:ac:0d:1d:bf:d2:5f:
51:02:f9:f4:e0:f1:c8:c6:e5:37:e5:14:1d:ef:29:16:8d:77:
66:fd:6d:3d:0c:9e:cb:ac:3c:08:58:3f:54:3f:af:de:31:17:
87:b8:23:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:12:12 2025 by rpki-client