Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a63cade2-61ce-3467-b87b-b92ccd2fcbe1.roa
File: a63cade2-61ce-3467-b87b-b92ccd2fcbe1.roa (raw, json)
Hash identifier: zX2eWoXSszVedEAy0CnCofJYVV9SjL5fcqzFvMqswBU=
Subject key identifier: 63:0A:A5:31:BE:FA:8E:50:E0:6A:81:5B:23:F4:6D:26:53:5E:2B:E3
Certificate issuer: /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial: 010D0C9F43285848CB165A14C35CF3D42A988E20
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a63cade2-61ce-3467-b87b-b92ccd2fcbe1.roa
Signing time: Thu 06 Feb 2025 14:00:52 +0000
ROA not before: Thu 06 Feb 2025 14:00:52 +0000
ROA not after: Wed 07 May 2025 13:00:52 +0000
asID: 19605
IP address blocks: 164.152.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:16:5a:14:c3:5c:f3:d4:2a:98:8e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Validity
Not Before: Feb 6 14:00:52 2025 GMT
Not After : May 7 13:00:52 2025 GMT
Subject: CN=ba49066f-fad2-4b3c-a511-efab04c23ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:ae:9f:f7:47:d4:cc:d3:da:b8:36:cc:0d:
47:ad:91:fd:78:2c:2a:68:7a:86:1a:6e:46:bc:a5:
36:02:9a:f7:bd:d5:17:5f:4d:0c:36:28:d8:87:dc:
bf:3c:e3:4c:ef:1a:46:7d:3f:09:f1:55:06:09:4e:
27:64:2b:c1:01:f2:9f:0e:4b:65:50:00:2f:6d:71:
f9:99:ac:e6:ba:aa:fa:86:2c:2c:c3:63:51:63:c8:
0a:75:16:bc:56:9c:c7:8e:3f:6f:cd:e6:33:7f:68:
6d:2e:b3:92:67:40:7e:50:1d:53:70:5a:6f:02:d6:
4d:16:00:ab:46:1f:f3:b4:f5:75:d8:cd:e2:68:cb:
34:2d:d2:a2:ad:c1:b1:71:69:d2:7e:74:b9:e6:fc:
db:9d:f6:f6:f8:1d:c1:76:36:ee:38:2f:99:29:8d:
03:08:7d:82:6f:1c:3c:66:aa:81:6a:09:08:d4:a6:
f4:11:fc:22:64:a2:6f:9a:14:95:dd:29:b5:f4:18:
6e:50:6b:89:be:a4:b5:50:4e:96:ab:49:63:14:76:
dd:99:20:f0:3f:a0:a3:de:aa:4c:b3:4a:ca:d4:11:
30:55:a5:79:64:86:c0:9d:83:dc:c2:c4:22:6a:35:
bc:33:d5:c1:ce:ac:f4:31:a9:58:10:5d:e3:4f:19:
76:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0A:A5:31:BE:FA:8E:50:E0:6A:81:5B:23:F4:6D:26:53:5E:2B:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a63cade2-61ce-3467-b87b-b92ccd2fcbe1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
X509v3 Authority Key Identifier:
keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
sbgp-ipAddrBlock: critical
IPv4:
164.152.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:c2:dd:bb:b0:28:73:1f:31:a8:a9:ac:14:fb:45:26:89:e2:
06:16:f9:ec:c6:c8:b5:dd:26:0b:13:86:e5:7f:20:9e:c5:83:
e6:cc:23:79:f8:47:b4:59:b0:f4:66:3c:fd:cf:d8:96:54:16:
67:33:0e:a2:da:54:c8:1f:2f:9b:65:72:95:2b:d1:05:fd:7d:
d6:5d:e2:6d:e5:84:c1:dc:c5:65:2a:2b:e7:c1:01:90:a3:93:
e3:e8:eb:2b:fc:09:fe:11:1b:05:0c:7e:3e:dc:a1:76:45:4e:
69:14:90:5d:a3:f2:43:f8:1b:c2:98:6a:5f:ec:51:6a:9f:80:
61:05:1d:bf:2c:4c:0b:8f:06:93:2c:10:a5:06:07:93:8f:66:
e0:ff:ed:34:64:21:0c:5f:78:cd:70:33:45:c8:fd:1f:55:c0:
9a:c8:ba:85:c9:84:5e:2e:b7:bb:27:b4:3a:b0:d3:63:a2:30:
71:4f:a8:f1:fb:2c:7f:13:7b:82:1e:a4:7e:bb:36:be:f1:9c:
1b:ee:24:bf:d9:ec:22:71:65:51:cb:0d:3a:23:3c:c6:ad:16:
00:69:0d:3a:cc:b8:d1:d6:71:93:b9:63:88:8e:9e:85:12:c6:
6a:65:76:ab:5c:0c:5a:82:05:9e:98:69:0c:25:e4:25:79:e7:
4b:7d:65:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:09:11 2025 by rpki-client