Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa
File: 68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa (raw, json)
Hash identifier: 09gG/mjAYgkfaCKkKoAlftL4dZ9T1lcSzIPZXJUWigI=
Subject key identifier: C0:D9:19:FB:00:60:AE:71:3A:F7:72:49:19:A5:F4:30:DA:17:EA:A0
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F4328584898D606EED44026D4366ADA40
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa
Signing time: Sun 19 Jan 2025 14:00:52 +0000
ROA not before: Sun 19 Jan 2025 14:00:52 +0000
ROA not after: Sat 19 Apr 2025 13:00:52 +0000
asID: 203724
IP address blocks: 161.69.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:98:d6:06:ee:d4:40:26:d4:36:6a:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Jan 19 14:00:52 2025 GMT
Not After : Apr 19 13:00:52 2025 GMT
Subject: CN=d144bc73-0c38-4e35-8aa6-215dd42f8f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5f:62:c0:6b:f4:4e:99:0e:49:ec:81:ca:86:
0b:eb:04:79:7f:41:63:3c:70:5d:56:0b:f6:6f:4f:
16:01:76:cd:16:3a:89:ef:c9:20:47:08:ac:6a:9c:
de:3d:21:c6:e5:dd:a8:c6:e0:7d:c1:a2:3e:5c:73:
46:69:32:44:9e:68:ba:50:07:9b:eb:d4:48:48:ff:
eb:cb:d7:fc:dd:04:0e:20:ef:a4:d0:66:15:60:94:
92:88:60:95:5a:cd:79:6d:54:0b:81:53:08:6b:ad:
72:12:63:8d:5d:e6:f0:88:89:f5:ac:11:27:25:c7:
9e:49:5b:be:66:02:ec:0c:53:ec:22:c5:51:f1:3e:
38:ba:65:ef:54:43:ce:ca:00:99:f6:9f:42:c4:1e:
d6:a7:d6:f0:db:e0:d2:6b:ee:03:0b:de:6d:56:b1:
90:7a:46:ce:7b:48:94:fe:f3:53:55:10:aa:d2:3c:
0d:68:24:c5:b7:1d:ca:34:49:a1:3d:90:df:e2:93:
65:04:9c:54:30:48:95:8a:65:08:9d:e6:03:4a:ee:
de:e9:7a:df:21:59:f4:5a:ed:91:9a:2c:c1:3c:d5:
ea:09:a7:e5:a9:d2:40:b4:08:ca:e6:0c:d1:a2:b2:
87:1d:4b:54:18:17:64:ed:f2:90:42:7e:64:cf:8c:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D9:19:FB:00:60:AE:71:3A:F7:72:49:19:A5:F4:30:DA:17:EA:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/68338311-08f8-3f2e-8cdf-510cfa0fcf03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:99:8b:c5:37:0f:7f:9e:4f:2b:08:c6:34:4d:55:a3:e9:83:
99:09:56:38:0f:26:9d:c4:e0:75:fe:75:d3:6d:0c:bc:cb:0a:
03:47:d8:a1:f6:02:c4:cd:9c:62:c0:68:75:06:ca:66:60:e9:
18:cd:58:f1:eb:a0:be:47:56:e3:4f:6d:3c:f2:8a:89:34:f5:
a8:e7:82:a6:b4:20:7d:96:30:ef:ef:9e:68:9f:40:15:95:82:
6c:c3:12:0b:e3:89:c5:d6:a0:49:59:75:f1:34:16:44:89:e8:
b0:67:e7:88:2e:6c:f8:a8:bf:d8:23:aa:7e:7d:23:2b:d6:e6:
ab:0c:23:33:b0:02:56:93:e2:b7:04:51:be:bb:7e:13:66:86:
70:37:c5:a4:12:08:8d:b6:20:b8:e7:f8:33:f6:d1:a5:02:2e:
f3:ee:b8:6e:ae:a3:9b:88:4f:c5:9d:5b:1c:f8:9e:4f:58:87:
fe:63:21:b0:16:4e:cc:d9:8d:36:18:41:b8:fe:8b:6e:9c:c5:
d3:c5:4c:ac:c6:6f:86:5e:64:55:a1:77:8b:c2:0f:dd:32:ba:
52:c4:bc:bc:4c:cd:07:4e:c5:31:5d:53:87:d3:33:41:eb:96:
3e:b6:a6:20:46:20:cc:5a:6f:27:f4:35:94:2d:d3:0a:a8:f9:
e8:ee:e8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:51:09 2025 by rpki-client