Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/66aacdc2-6980-3211-ba4e-e1695d84a3b9.roa
File: 66aacdc2-6980-3211-ba4e-e1695d84a3b9.roa (raw, json)
Hash identifier: 24LTs+qO9Lxh6Z7JwHbfHjVc+GuF5INTADdGndSIhgk=
Subject key identifier: E8:B6:19:EE:74:ED:98:C7:E1:FF:AA:25:17:00:FE:68:70:D9:83:B8
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F43285848DEA11FBBF8E4B9650D626540
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/66aacdc2-6980-3211-ba4e-e1695d84a3b9.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 203724
IP address blocks: 161.69.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:1f:bb:f8:e4:b9:65:0d:62:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=daddbf5c-9f53-4158-acb2-42ce7163d212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:74:b8:14:29:dc:08:f3:50:58:a1:54:82:f1:
29:84:3f:fa:fa:cb:e3:2f:ca:f8:eb:89:34:ac:c6:
2d:b6:4e:1f:ea:66:e6:1b:b9:ed:d3:89:61:06:14:
02:b6:59:35:75:2e:e5:f0:54:06:da:31:20:fd:d9:
e8:65:d6:8d:09:27:1e:d7:5e:99:73:a4:82:54:14:
09:f3:1f:ed:d7:29:90:b8:2a:68:f2:30:88:d5:ab:
f9:a9:f0:7d:99:51:e0:76:58:af:fc:96:29:72:65:
74:8b:5e:1c:de:d4:17:74:bd:90:4b:c1:42:55:5b:
c0:bf:88:85:21:7f:15:9b:71:28:64:95:e8:5e:8f:
86:7a:48:5f:78:6c:59:2c:4f:d9:cb:15:5e:39:92:
23:74:1d:0a:ae:9f:f4:74:fa:96:92:d5:da:41:e2:
67:dc:78:fc:0e:af:92:84:8e:eb:f1:b5:a6:91:bc:
e5:1d:17:9c:3f:57:f5:28:15:b7:fe:f1:a1:c0:4a:
3e:4f:61:17:6d:01:a5:cd:69:d3:c9:d1:05:ef:09:
61:a6:be:b6:52:b2:6c:75:d4:cb:95:50:7e:16:8a:
e0:a8:08:07:89:ca:d1:a9:09:8c:0b:a2:1f:ad:60:
af:c2:23:31:36:ca:b8:7e:05:04:b3:fc:97:42:93:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B6:19:EE:74:ED:98:C7:E1:FF:AA:25:17:00:FE:68:70:D9:83:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/66aacdc2-6980-3211-ba4e-e1695d84a3b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.90.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:01:2a:e9:28:cc:b4:84:98:3e:e7:12:af:96:d9:b8:a1:14:
01:53:e8:8f:44:29:fe:3e:68:78:f6:b1:6b:ff:07:3b:16:8c:
a6:87:ec:06:7b:5b:5f:f2:56:4e:45:e8:b4:b7:d7:5f:ef:11:
34:2d:27:6c:24:95:b5:e6:5f:77:19:2d:5f:d3:e9:c6:2f:c8:
4b:1a:86:71:a2:8b:9c:f5:83:f6:73:5d:f1:d3:06:5f:d0:4b:
05:5d:e9:af:12:5c:6a:27:a0:ea:dd:18:3f:96:c8:36:f4:f4:
a6:bf:4a:3e:59:e8:d6:08:08:44:ef:90:1a:ed:b5:2d:c9:43:
96:3e:ed:53:46:6f:82:16:a5:48:60:c4:9a:e0:8c:41:9e:32:
a4:32:83:ae:47:d0:1b:74:7b:4a:34:9f:5b:e1:4c:9f:0c:92:
cf:00:2a:69:2f:5e:ae:fb:fe:0f:5a:ae:bc:00:d5:b7:2a:e2:
ad:c2:34:7f:b4:a8:fd:40:dc:2a:44:f8:51:6b:6f:94:65:4f:
dc:0a:0d:20:2d:c6:86:60:fb:91:28:14:b1:8c:a2:c5:3c:67:
bc:a9:18:99:14:f1:1e:c9:6f:23:8f:d6:25:a4:5f:e5:84:45:
e8:8a:c5:3d:c4:25:05:32:dc:0f:c3:bd:cc:dc:3b:b7:be:d4:
c8:87:52:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:37 2025 by rpki-client