Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa
File: b214acd2-07b1-360e-a1cc-31f9d400eba6.roa (raw, json)
Hash identifier: QDFC47GWPYxbCA9A8B54Y9ncz61np/tBrq9Fhq3HzE8=
Subject key identifier: 10:9C:53:71:AF:07:53:7D:72:C9:27:3A:5E:9F:2E:B4:84:C4:E8:62
Certificate issuer: /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial: 010D0C9F4328584925B3AB6CA3102572CC05AF40
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa
Signing time: Tue 11 Mar 2025 01:00:40 +0000
ROA not before: Tue 11 Mar 2025 01:00:40 +0000
ROA not after: Mon 09 Jun 2025 01:00:40 +0000
asID: 398156
IP address blocks: 168.220.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:25:b3:ab:6c:a3:10:25:72:cc:05:af:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Validity
Not Before: Mar 11 01:00:40 2025 GMT
Not After : Jun 9 01:00:40 2025 GMT
Subject: CN=651e7120-d941-4fe1-ab3f-f6587ee766ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:d9:17:0b:6c:f5:45:7a:91:00:18:0f:c9:
68:70:3f:b2:70:5c:a1:66:ca:45:e7:8b:94:eb:19:
b0:e0:f8:10:86:fb:4b:9a:db:95:3a:de:5b:b0:fc:
dd:15:0c:52:51:4a:0d:cc:43:db:41:b2:ab:b9:02:
96:41:82:79:d8:ce:94:1c:c1:84:d7:89:c5:a0:6c:
77:cf:86:56:96:a5:6c:ac:25:c0:64:d7:26:af:d4:
3b:ed:2c:8f:ff:f8:e2:ab:a2:8c:d9:b9:c9:a7:7d:
b0:f0:d7:06:f4:13:be:ca:a5:ec:c1:83:98:c8:c5:
b3:dc:78:9c:8d:f5:1a:27:d1:6a:e8:f6:0c:51:3c:
80:c1:60:e8:92:3d:99:a9:24:d5:9d:49:7b:d3:a6:
08:b9:b9:3e:6f:1e:81:bf:1d:da:d1:61:e2:23:78:
a4:6b:34:e8:70:2a:73:14:b2:5b:5d:dc:17:d3:55:
c7:c7:4f:a5:94:c7:34:43:b3:97:a6:43:13:95:32:
f0:a4:13:b0:7c:83:5c:09:02:ba:00:bc:89:0e:52:
b1:70:71:48:32:a5:f1:40:67:f3:2d:da:26:0d:af:
a3:02:41:c2:ca:65:69:2d:05:c7:f1:54:e1:ba:15:
c8:6f:dc:ba:e7:13:03:e4:d8:76:fa:b7:0c:39:75:
0b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9C:53:71:AF:07:53:7D:72:C9:27:3A:5E:9F:2E:B4:84:C4:E8:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/b214acd2-07b1-360e-a1cc-31f9d400eba6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
X509v3 Authority Key Identifier:
keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
sbgp-ipAddrBlock: critical
IPv4:
168.220.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:6c:e1:04:b1:e7:fc:f4:44:17:61:24:6b:aa:06:11:d5:54:
7b:a1:fc:a0:c9:0e:91:a8:1b:4f:a1:21:ae:17:52:d6:35:3b:
5f:94:86:2b:91:fd:03:e7:25:b5:35:17:2c:e0:aa:6d:ac:d4:
90:bb:cc:79:4d:c9:e5:c9:ac:3a:73:cf:36:e2:77:42:be:67:
2f:86:dc:f9:fb:24:00:45:78:41:2e:d0:c4:e6:fc:c9:eb:14:
3b:ff:04:6b:68:a5:49:ac:b9:01:61:7a:86:b7:90:00:f8:72:
45:01:cf:fe:6f:23:75:26:6d:7a:6e:7a:da:6a:e8:e4:a4:70:
41:fe:ac:34:d4:06:7c:68:cd:bb:88:e6:16:fa:68:ea:51:a4:
bb:e5:12:9c:66:b6:44:22:4c:60:e5:5f:28:27:5b:3e:9e:98:
61:a7:41:83:05:25:27:1c:27:8d:00:e1:11:f0:c8:a3:f2:d1:
96:90:fd:44:38:08:d0:64:e9:a4:7d:3c:e7:d9:87:77:75:46:
cf:da:03:30:05:28:62:31:2c:5d:d3:4c:91:3d:c5:a1:02:7f:
e1:30:e4:45:9c:a4:38:94:c5:f8:d2:f1:36:20:ec:01:a5:c2:
9c:c8:a6:c2:6a:be:37:d1:93:c0:65:e6:d5:d3:be:b5:b1:2c:
51:c4:0b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:36 2025 by rpki-client