Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/363144fc-8502-3727-8211-61ab9ad31def.roa
File: 363144fc-8502-3727-8211-61ab9ad31def.roa (raw, json)
Hash identifier: 0i1oLX55uPSh2C3DRQYcMgECC+dgZCb2ltgH///IDf4=
Subject key identifier: AA:D5:F8:C7:B0:0B:FC:4E:BA:40:C9:21:CE:C0:EB:D9:66:49:49:EE
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584898D600B6B35DC43FF85A2B00
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/363144fc-8502-3727-8211-61ab9ad31def.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 203724
IP address blocks: 161.69.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:00:b6:b3:5d:c4:3f:f8:5a:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=bdcbf97f-0c72-4a03-9dbb-119fcdf3637a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:a4:fe:27:2c:8a:3d:22:6b:2a:51:a2:aa:
2d:0b:d0:a8:95:21:35:60:a7:4e:4b:b4:ee:88:81:
4f:b2:bb:f8:23:10:43:ad:27:cf:99:75:bc:33:83:
54:57:d5:62:62:d2:64:c6:aa:3a:5a:5e:09:1d:de:
8a:b2:d8:9a:0e:02:e1:e0:62:2d:ee:66:f6:84:45:
1d:52:ad:ae:f2:25:b2:c9:08:22:b6:94:8a:a5:22:
fd:75:96:3d:53:bd:20:61:e7:80:4a:f4:a0:21:9d:
2f:6d:50:8c:3a:ac:f3:27:7a:40:d4:56:95:06:cc:
4d:08:ec:9d:7c:94:3b:85:eb:1e:09:aa:16:ee:17:
2c:11:45:c1:89:47:99:cb:0b:af:3d:0e:06:e1:2b:
8b:90:a0:a7:6a:9e:a1:10:3b:ac:c1:6b:06:91:c0:
46:eb:f1:30:a6:b8:a4:41:2d:7f:a9:d2:41:be:2c:
5d:9b:da:72:d0:6d:15:ab:79:75:21:67:c4:c8:dc:
a5:ff:0a:aa:5f:c3:b0:dc:ba:ec:78:a2:07:c0:29:
0d:08:0f:13:fe:70:13:2b:99:c0:96:d5:aa:5f:4e:
bc:a3:e6:6f:cb:5e:07:a0:12:31:cc:7f:cf:92:f4:
0c:9b:ab:f7:d4:86:af:59:26:44:9c:ae:c0:b8:8c:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D5:F8:C7:B0:0B:FC:4E:BA:40:C9:21:CE:C0:EB:D9:66:49:49:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/363144fc-8502-3727-8211-61ab9ad31def.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:22:a7:da:25:5c:fc:a8:fe:83:a0:9d:45:f9:d6:3c:6c:78:
1f:41:6a:79:07:2e:3e:59:69:3e:96:cd:7b:0b:91:bb:0d:61:
7e:7b:c0:b0:56:86:fb:a7:a3:9d:d4:86:6e:b5:e3:af:f6:2b:
23:da:c0:d3:a5:6d:d8:4c:db:52:ba:a6:2f:e6:6e:36:47:6d:
68:09:49:df:33:97:fb:d5:7c:c2:4a:4d:99:25:27:45:cb:91:
18:31:d8:5e:9e:fe:4e:da:46:0b:e5:8c:eb:08:b6:0e:d6:b3:
db:be:d4:98:19:60:3a:c8:2f:6a:03:3f:bb:01:a6:a6:15:d8:
17:8b:8e:a7:5c:aa:5e:b3:e0:b1:1c:cd:5e:74:56:9e:3c:9f:
d8:b6:eb:b1:58:f0:4a:9f:97:ee:7e:04:fd:dc:e9:79:a8:92:
a6:52:a5:ef:9e:a5:cd:85:62:31:45:8c:b0:4d:c5:2d:fa:b3:
38:b5:c7:b4:9a:ec:75:f0:9d:3b:83:95:9e:cc:41:1d:de:49:
a1:cb:06:e2:50:b5:c0:d4:88:1d:60:77:1a:06:27:b5:33:f8:
57:9c:6c:80:13:ee:f6:2e:46:9f:05:80:17:53:98:99:a6:9f:
c2:05:0c:e3:8e:3e:43:11:74:21:10:b9:fd:12:ae:ee:35:29:
42:1f:41:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:34 2025 by rpki-client