Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa
File: 3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa (raw, json)
Hash identifier: qOUUikXgXqhDhHRAypn6s/ypi8YUC1bOQHyJrncpQLA=
Subject key identifier: 6C:5C:45:A9:99:0A:8E:DC:BD:A8:7E:DC:5B:C8:3E:1F:FE:7F:08:B5
Certificate issuer: /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial: 010D0C9F432858488F10804DF357947EBB61A780
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa
Signing time: Thu 16 Jan 2025 02:00:39 +0000
ROA not before: Thu 16 Jan 2025 02:00:39 +0000
ROA not after: Wed 16 Apr 2025 01:00:39 +0000
asID: 15171
IP address blocks: 158.120.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8f:10:80:4d:f3:57:94:7e:bb:61:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Validity
Not Before: Jan 16 02:00:39 2025 GMT
Not After : Apr 16 01:00:39 2025 GMT
Subject: CN=583724f6-2dd3-470f-8b14-95fa009d6aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7b:07:b2:d2:90:ae:86:89:4c:5e:57:ab:6a:
1e:73:52:96:cf:0e:96:47:c8:e5:7d:3e:b7:bf:80:
b1:02:41:50:36:68:3a:0c:96:69:a7:59:1f:54:1e:
ef:bb:94:34:72:36:5f:99:9e:a0:67:d3:cd:24:bf:
b5:82:d3:40:ff:c8:f2:96:35:e4:1b:2a:b9:cd:06:
f9:b8:71:7a:99:0d:e4:06:c5:9c:f7:92:5a:55:bc:
d3:a8:01:bc:82:7a:26:8a:c6:66:1e:39:4e:4d:e8:
f3:42:ac:7f:69:65:52:35:f4:16:15:11:cd:30:0e:
d9:05:ce:63:97:77:bb:4e:17:8a:37:80:7d:b8:af:
94:90:2e:b0:f7:8d:26:6c:ef:2c:41:e0:19:a9:67:
64:85:26:3b:ce:32:17:90:77:d5:eb:d5:33:0a:cc:
1c:ed:77:73:86:e3:92:1b:f8:df:b2:36:12:3c:87:
7d:fa:c0:50:ca:9a:d2:0a:f8:58:5b:68:1f:34:01:
24:ca:59:a0:af:d5:00:8a:87:79:91:0c:6d:f7:4c:
ca:ea:51:e4:7c:d6:2b:19:ea:a2:3f:e0:07:8b:88:
5b:c2:49:95:fb:81:cf:c6:51:cb:eb:68:3b:ef:d9:
7a:35:2d:1b:02:c8:8b:1f:21:55:61:7c:39:7d:25:
49:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5C:45:A9:99:0A:8E:DC:BD:A8:7E:DC:5B:C8:3E:1F:FE:7F:08:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/3a733673-87d8-3318-b9aa-9d36c04ac0a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl
X509v3 Authority Key Identifier:
keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:87:f9:1d:6e:4f:81:31:fc:f7:c1:e6:c6:91:81:05:56:82:
2a:0d:13:25:5e:9d:8b:c0:9d:c3:97:23:78:df:47:dd:69:1c:
77:88:67:a6:3d:3f:5a:8c:fd:2a:91:e5:1d:f3:35:79:75:97:
7f:14:e7:49:c5:df:a6:36:5e:58:71:ed:ec:76:c9:b5:4f:6b:
18:29:f3:33:19:df:6e:ca:fd:54:db:74:12:f7:11:cd:d1:e9:
2c:43:df:a2:5e:46:95:b8:c8:77:8d:cc:84:59:95:0c:0c:62:
6f:42:e2:63:12:4f:b8:95:f1:f1:09:a9:45:79:bb:a2:1e:ed:
9d:d4:c3:05:6d:68:2a:6b:f3:49:1f:68:d1:ac:cd:63:86:7a:
1c:3f:de:cf:0c:ef:29:5a:47:fe:63:25:b8:5b:fa:90:e6:9f:
ab:39:8e:5b:8a:04:03:92:1c:d9:cc:ba:38:13:96:2a:ff:ba:
e0:1c:62:d3:bd:46:82:ea:29:f0:1f:33:c4:82:f8:ab:9b:58:
e7:a6:05:d0:78:e8:71:52:7f:40:d6:50:81:de:98:5c:89:03:
57:37:0a:84:13:5f:68:11:38:3f:8f:c8:f6:96:49:68:51:39:
30:e9:5b:72:47:6d:62:84:1d:45:9a:df:22:7b:46:85:91:f3:
fe:28:42:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:29:09 2025 by rpki-client