Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bde1f10e-8cb8-3586-b173-8d0b76c7a2f8.roa
File: bde1f10e-8cb8-3586-b173-8d0b76c7a2f8.roa (raw, json)
Hash identifier: H+oON/2VkHhjKSEgzYcotvWfliKvy3LxHJtk4KKMEv4=
Subject key identifier: 11:0F:89:5C:6B:4B:F2:A5:F4:75:C1:0E:68:FB:60:48:85:EB:2A:02
Certificate issuer: /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial: 010D0C9F43285848E0065E48A84D3BA1FDC6D9D8
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bde1f10e-8cb8-3586-b173-8d0b76c7a2f8.roa
Signing time: Fri 14 Feb 2025 02:00:39 +0000
ROA not before: Fri 14 Feb 2025 02:00:39 +0000
ROA not after: Thu 15 May 2025 01:00:39 +0000
asID: 397041
IP address blocks: 161.199.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e0:06:5e:48:a8:4d:3b:a1:fd:c6:d9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Validity
Not Before: Feb 14 02:00:39 2025 GMT
Not After : May 15 01:00:39 2025 GMT
Subject: CN=fb7839ec-8e17-49a4-8520-7f8eda1cd535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9c:c6:ae:12:58:c2:2e:32:50:ab:a6:20:e6:
a4:ad:0c:80:97:7c:c8:51:f8:2d:2b:e1:c5:bf:ec:
9c:59:ab:cf:21:9d:1b:8f:8f:8d:ea:b9:2f:39:9d:
04:fd:40:9e:07:8d:2b:18:84:20:25:af:62:29:7d:
c6:67:db:9b:a6:74:c8:9d:78:32:17:cb:20:89:41:
cd:75:ba:e4:3a:cd:3d:dc:ba:89:0b:9c:81:42:fb:
01:53:c7:ea:fe:4e:d0:50:ac:0c:40:d0:17:45:3a:
3d:a9:5a:02:f5:85:e5:b1:07:95:a6:cd:b5:0a:e8:
1e:8c:80:88:2f:fd:2c:74:a4:73:c4:8e:67:fc:ae:
a1:47:18:4b:b1:df:0c:3b:77:16:bd:51:48:5b:50:
98:a0:46:9c:ac:77:12:50:ad:da:a5:a7:0e:a7:6c:
70:e8:00:3f:c9:4e:27:de:7b:51:ae:35:ab:f9:c9:
86:7b:c7:99:a3:8c:df:5a:61:3d:fb:1d:f3:23:47:
5e:ba:c0:59:9a:63:92:ec:2f:ed:6a:c0:c7:6d:96:
51:0c:10:e5:72:9d:2b:d6:29:78:85:40:57:20:f0:
be:79:b1:05:7b:ab:5c:fb:4a:7b:73:fc:a4:db:c6:
2a:42:10:f0:96:6c:9b:70:c5:00:15:63:d7:d1:da:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0F:89:5C:6B:4B:F2:A5:F4:75:C1:0E:68:FB:60:48:85:EB:2A:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bde1f10e-8cb8-3586-b173-8d0b76c7a2f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
X509v3 Authority Key Identifier:
keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
sbgp-ipAddrBlock: critical
IPv4:
161.199.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:cf:23:4c:6a:53:23:fd:eb:43:57:25:4c:73:c8:6a:30:fc:
07:52:29:8e:6c:fa:a2:bd:fb:f1:1c:49:d0:d4:fc:df:a3:bc:
22:ca:64:c0:7d:1f:89:1c:bb:dd:98:9c:a3:0e:84:30:d9:c2:
e2:63:61:3a:9d:f4:5a:c7:cc:5a:3c:92:a5:20:ab:5a:cd:9f:
0a:ab:3d:0f:14:0a:61:9d:12:29:9c:06:cb:3d:99:16:9a:cb:
a8:03:01:24:ce:e7:e1:67:46:b1:3d:0e:c7:3e:2c:71:a8:10:
b4:5f:62:f1:52:11:bc:c5:0f:87:4e:78:63:b7:4d:d8:60:ce:
27:e3:a9:5f:08:79:a7:b2:7c:91:e2:d2:d0:2f:67:2f:42:4d:
fc:34:35:31:86:7c:b1:0a:e1:31:1b:4e:30:9e:93:b3:4e:47:
2b:c8:0c:25:cd:8d:db:fa:36:32:a9:53:ea:cb:4d:bd:ef:9e:
5b:1a:71:cf:54:29:9d:a0:1e:bc:c6:60:75:80:77:fd:62:44:
62:1b:33:e3:cc:41:f8:6e:c8:86:dc:47:db:ae:db:8a:68:3e:
de:d2:b6:cf:1d:9f:59:18:76:8a:ef:4e:eb:1a:46:01:71:68:
5f:30:ad:cf:db:26:bd:08:2f:6a:ad:53:e3:0c:9a:79:56:ec:
d7:f0:b6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:42:24 2025 by rpki-client