Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/10d1bb84-e6e2-362b-9505-6cd59ced77da.roa
File: 10d1bb84-e6e2-362b-9505-6cd59ced77da.roa (raw, json)
Hash identifier: MDzRqhlY+1j4KyFeYqLuy4Ynsw6OtdIQN7Cl4yniwM4=
Subject key identifier: C7:0E:BB:75:73:B0:28:09:31:B1:1A:31:57:0B:FB:2E:F4:23:C4:D7
Certificate issuer: /CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
Certificate serial: 010D0C9F432858490B4C1AF97CF5A037B190FC80
Authority key identifier: A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/10d1bb84-e6e2-362b-9505-6cd59ced77da.roa
Signing time: Sat 01 Mar 2025 14:00:52 +0000
ROA not before: Sat 01 Mar 2025 14:00:52 +0000
ROA not after: Fri 30 May 2025 13:00:52 +0000
asID: 19224
IP address blocks: 152.160.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0b:4c:1a:f9:7c:f5:a0:37:b1:90:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
Validity
Not Before: Mar 1 14:00:52 2025 GMT
Not After : May 30 13:00:52 2025 GMT
Subject: CN=d17da443-8c4a-45f6-b0b7-86ef0b9c7ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:dc:b0:7e:5a:ad:ab:b2:ca:7c:53:93:96:
73:bf:94:b3:c1:23:75:0a:33:ca:2a:6d:6c:fa:35:
aa:0c:41:29:d5:78:2a:02:15:f3:3c:b8:c8:21:4d:
33:a7:31:08:78:bb:d7:37:95:67:db:16:6d:6b:a9:
f6:6c:aa:0d:94:eb:94:e2:1f:58:c7:96:fe:10:8e:
cf:a3:19:5a:94:f8:d6:8d:6e:1a:e0:d6:0a:3c:ca:
5b:e0:16:bd:99:e0:be:e0:25:9e:a6:a1:77:9d:21:
0c:02:ab:ba:c1:9f:6a:2e:2b:c7:b0:58:af:20:e4:
f5:7e:1e:fe:ca:40:40:72:6b:4b:d8:18:6a:d5:11:
a8:fc:34:15:dd:a5:09:22:cb:ad:ad:72:ac:0a:95:
5d:29:db:f3:21:e2:f7:7f:d0:0a:65:26:5f:4f:2b:
7c:e1:45:8b:9c:ff:c4:c5:77:f2:5f:f3:ba:6f:62:
3a:79:c1:8f:51:b5:0f:32:16:16:98:74:d1:79:b0:
67:b0:15:19:52:70:39:68:17:94:ca:71:69:46:6b:
42:c7:fa:0b:e6:e4:0f:b7:ad:78:0b:ad:51:30:c3:
d5:c6:7c:e4:fc:60:c4:52:23:23:6d:b9:6f:e7:58:
eb:89:17:00:0a:85:c4:17:7e:3d:f6:b6:bd:02:80:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0E:BB:75:73:B0:28:09:31:B1:1A:31:57:0B:FB:2E:F4:23:C4:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/10d1bb84-e6e2-362b-9505-6cd59ced77da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.crl
X509v3 Authority Key Identifier:
keyid:A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer
sbgp-ipAddrBlock: critical
IPv4:
152.160.84.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:35:51:e7:ca:ca:4e:90:40:8c:97:ab:8a:bc:f8:59:84:57:
f6:20:07:55:88:9a:8d:6e:4e:c9:7d:ea:93:e6:d2:1f:6f:c6:
b4:4f:f0:a2:59:e8:03:d0:d0:cb:0b:de:36:0f:90:bf:dd:ca:
04:2b:4f:9a:94:a0:d7:46:f6:40:8e:36:be:00:db:d4:a5:56:
dc:40:40:c2:74:ac:e9:4c:9a:6c:aa:c5:91:60:bd:9d:b8:85:
6d:52:ac:e5:42:02:1a:be:a8:a4:94:17:d7:c9:52:4e:d0:53:
14:41:87:f5:cf:95:22:47:0b:2d:10:11:5c:e9:84:75:ef:5b:
b3:04:dd:86:6b:74:34:76:d0:2f:41:1f:92:d9:5e:e6:e4:bd:
34:03:be:2b:90:bd:eb:69:db:69:df:be:af:4f:d4:39:be:ba:
ca:45:82:8b:45:58:6a:ed:7a:e1:0c:69:94:c3:ba:d5:72:aa:
d0:d2:41:a6:a3:74:9f:f8:5a:b3:b7:1e:1a:f1:f1:e3:7e:d7:
aa:f4:cc:d6:12:fa:72:32:51:eb:1b:4a:c7:c0:e7:c4:e4:4d:
65:c1:b1:f6:a8:fb:2b:cb:fe:2b:1b:1c:6c:28:87:c1:9e:06:
44:a0:bb:59:21:7e:da:f0:5e:09:9b:32:d7:5e:67:fe:92:f8:
80:56:03:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:32:41 2025 by rpki-client