Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/33da5a36-c016-3582-bf59-0f9738d7f8bd.roa
File: 33da5a36-c016-3582-bf59-0f9738d7f8bd.roa (raw, json)
Hash identifier: E1i1OL2YJPJ4TYRfq72HEqTAyc3q7KROTfqfw1JOywQ=
Subject key identifier: 1D:66:3A:7B:9A:11:4A:FA:04:55:7D:A1:7D:75:22:A1:56:8F:28:51
Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial: 010D0C9F4328584902EC27EA1D69987190509F00
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/33da5a36-c016-3582-bf59-0f9738d7f8bd.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 6253
IP address blocks: 161.151.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:27:ea:1d:69:98:71:90:50:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=73cab369-08a2-4c85-ba38-32534963c341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:12:d3:05:e5:ff:96:a1:eb:28:df:0e:b4:
35:2b:e8:6c:35:9b:01:32:99:01:bf:7e:27:32:9e:
cb:04:39:9f:62:9a:b8:1c:c0:58:2c:19:c5:b4:38:
09:03:34:67:0f:05:36:ee:4c:40:3a:66:30:f9:39:
9b:92:4f:ec:3b:4e:3b:da:2c:f4:f8:d4:3a:ae:9e:
1f:7c:9f:f8:a7:b5:c7:fa:b1:58:b3:3a:15:08:43:
43:41:42:73:a4:bd:f3:3e:e6:3e:9a:de:ab:b3:9f:
6d:17:9f:a2:df:37:d0:66:31:1e:ab:fe:9f:ff:8c:
a7:30:ce:16:ee:19:ed:18:23:7d:74:e2:94:a0:08:
00:ec:4f:e1:4a:51:8e:94:ed:96:c5:a5:29:c4:80:
93:7d:8c:38:e0:fa:8b:e8:49:59:67:01:7d:9e:eb:
87:92:79:29:53:e7:74:3c:91:75:90:81:2e:f7:de:
1a:fb:14:87:f1:71:17:0c:13:33:cb:eb:32:e7:6f:
d1:37:52:c3:3a:8e:c7:8c:7d:d1:ff:40:f9:a6:6e:
e5:13:a7:a4:7d:42:c5:18:ee:d7:ef:b0:66:57:42:
4a:db:bb:fe:fa:14:bb:23:e3:1c:97:40:7d:53:d7:
ec:84:27:11:db:0c:44:fe:85:f8:a5:2b:36:76:48:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:66:3A:7B:9A:11:4A:FA:04:55:7D:A1:7D:75:22:A1:56:8F:28:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/33da5a36-c016-3582-bf59-0f9738d7f8bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
X509v3 Authority Key Identifier:
keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
sbgp-ipAddrBlock: critical
IPv4:
161.151.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:6a:97:d2:6f:03:11:35:67:9a:3c:15:29:98:4e:f7:97:41:
26:9d:56:fb:e0:1e:ba:e2:05:45:03:e0:a9:05:85:d6:9e:ca:
5a:f6:01:a4:fb:dd:9d:c8:0e:0d:17:52:5b:64:80:62:8d:e5:
45:29:fc:43:b5:fa:66:08:0c:1d:b1:6f:6d:90:71:f8:e1:82:
7d:33:c1:80:e2:eb:9b:53:d2:de:ab:0c:bf:d3:88:38:27:20:
4f:82:8a:86:f3:64:3c:ad:07:79:e7:20:9b:fa:5f:f6:cf:31:
c5:eb:06:31:c6:71:dc:06:e8:87:8d:1c:80:5d:9b:cc:99:78:
bb:e5:a6:01:31:41:64:44:a8:d3:32:25:c8:03:fc:87:35:43:
7a:6b:9a:e5:ce:12:ea:19:ec:aa:0e:55:ac:eb:04:7c:97:67:
77:6b:d8:98:3e:66:eb:e2:70:21:34:f4:32:a1:07:3a:3f:6a:
2f:1d:0d:d7:6a:88:18:c0:88:4b:bb:fc:a8:76:ed:06:3b:40:
31:2e:e3:54:85:70:6c:8c:46:57:a7:b8:2b:0b:62:81:cb:fd:
3f:d7:e7:6e:7a:cf:a8:66:fd:b3:8e:c4:2e:ee:59:ad:5c:c4:
8a:23:64:76:9d:ed:40:fc:d3:20:81:77:f2:4d:17:89:df:15:
3e:80:ca:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:18:48 2025 by rpki-client