Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/8fe2dd79-7709-320c-9724-e8e186a838df.roa
File: 8fe2dd79-7709-320c-9724-e8e186a838df.roa (raw, json)
Hash identifier: aTEF4e/wxcY3F97Ty3DzHAA2WZcTbzbevpcbWk74YaY=
Subject key identifier: 20:73:D9:D7:48:7A:60:EB:F1:98:F0:FC:43:44:22:27:86:54:2C:49
Certificate issuer: /CN=9425523e-a7dc-4cd2-a939-b1dc6570ca5d
Certificate serial: 010D0C9F432858489075F71F609201ECF2BDD100
Authority key identifier: 84:5F:5B:50:F6:16:A4:BE:F9:A2:87:73:AA:1D:7E:63:0E:F7:B9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/8fe2dd79-7709-320c-9724-e8e186a838df.roa
Signing time: Thu 16 Jan 2025 14:00:50 +0000
ROA not before: Thu 16 Jan 2025 14:00:50 +0000
ROA not after: Wed 16 Apr 2025 13:00:50 +0000
asID: 26125
IP address blocks: 161.68.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:90:75:f7:1f:60:92:01:ec:f2:bd:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9425523e-a7dc-4cd2-a939-b1dc6570ca5d
Validity
Not Before: Jan 16 14:00:50 2025 GMT
Not After : Apr 16 13:00:50 2025 GMT
Subject: CN=3ff5c978-6afc-4bb1-b1e4-5ae30fa68585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:ee:73:62:f6:9c:89:ba:40:46:e8:63:88:
c7:1f:44:20:f5:ac:99:d7:29:e5:fd:60:60:6d:a7:
35:a9:96:8d:fc:b4:6d:5a:b0:68:47:51:b2:73:38:
47:e1:d4:fd:92:da:78:23:00:9c:1a:fa:79:e1:3b:
ff:04:4c:68:ed:78:20:e7:3a:c6:85:e8:c0:c7:72:
bc:0b:ca:f2:39:e0:21:0e:a2:38:40:ac:7e:3a:65:
b1:02:2d:b8:f7:76:55:5f:e7:7b:69:97:05:51:6d:
77:7c:40:a4:21:03:a2:8a:a5:24:a7:ed:92:0b:4b:
a3:90:81:97:cf:1d:8d:7b:a0:6a:02:1e:52:a5:5c:
7b:00:37:74:25:5f:f9:bc:cb:ea:f3:35:58:d7:10:
56:d1:2b:7d:a9:f1:17:85:53:43:71:7b:d6:39:42:
52:b3:c0:17:d7:cb:d3:6f:94:a7:88:14:1f:6c:94:
ab:8a:ea:28:1f:7e:b4:bf:49:28:e9:02:1d:a2:e9:
d7:df:5e:db:d8:a9:55:1e:d4:48:c0:19:dd:95:c8:
85:67:58:47:8b:c9:c8:a0:1d:96:4a:2c:1c:c7:67:
f1:08:b8:83:ba:7a:86:9c:32:35:89:cb:e1:ed:f4:
1e:4c:30:32:0b:1b:55:2c:33:28:73:12:d7:c9:dd:
6e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:73:D9:D7:48:7A:60:EB:F1:98:F0:FC:43:44:22:27:86:54:2C:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/8fe2dd79-7709-320c-9724-e8e186a838df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.crl
X509v3 Authority Key Identifier:
keyid:84:5F:5B:50:F6:16:A4:BE:F9:A2:87:73:AA:1D:7E:63:0E:F7:B9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9425523e-a7dc-4cd2-a939-b1dc6570ca5d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.68.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:98:24:4b:6d:38:38:94:63:47:47:bc:02:9d:42:bd:4e:3f:
88:6a:3f:27:10:94:ca:42:bf:4c:0b:d0:30:59:65:ad:5d:85:
3c:8c:2c:f6:ac:6e:a2:27:fd:1d:d8:9f:78:8e:f4:6a:d9:75:
7d:62:40:d0:8f:d0:2a:40:fb:e8:8c:2e:f2:19:f0:ce:3e:ab:
8f:df:7b:ab:e1:eb:c2:f6:1b:17:fa:96:a8:f0:ee:9b:16:3d:
39:9c:6e:bc:e2:ed:20:55:39:5b:30:fa:2f:ba:d9:04:58:c4:
0b:2f:cd:e5:6f:37:18:97:72:f6:c0:3d:ae:7f:1f:91:25:cb:
e1:8c:59:c2:08:63:69:31:f6:70:7e:24:97:25:ba:62:92:88:
d1:04:f1:1a:55:91:8c:b5:7c:8d:9f:e6:75:85:9f:08:bf:a1:
6e:9b:d6:aa:67:ea:26:f5:c5:b1:13:91:39:4b:4e:25:00:88:
cd:56:6a:56:14:27:0d:c5:ff:1e:a6:ad:2e:66:54:6e:d2:5a:
37:c4:c1:5f:6a:1f:c6:43:b9:a2:3b:14:15:be:43:2f:6f:5c:
b7:d8:1c:b5:88:0b:e5:42:8a:e7:4e:e6:10:48:64:83:f6:1a:
48:c5:1b:33:4f:1b:ac:8f:9d:28:2f:eb:29:44:68:43:98:32:
53:81:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:55 2025 by rpki-client