Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/7638d7ef-f4e0-3d1d-b51e-9c8ec31a06f5.roa
File: 7638d7ef-f4e0-3d1d-b51e-9c8ec31a06f5.roa (raw, json)
Hash identifier: jtzvPfqwe4IjHWHmlg61ONNl5Q/1seVR1zRSJoJtIb4=
Subject key identifier: 61:E2:07:F1:63:0C:4F:20:80:D7:89:17:0A:57:50:3F:A4:AE:14:40
Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial: 010D0C9F432858491D71887E4F16D0A1B598A680
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/7638d7ef-f4e0-3d1d-b51e-9c8ec31a06f5.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 203724
IP address blocks: 161.69.32.0/22 maxlen: 24
161.69.48.0/23 maxlen: 24
161.69.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:88:7e:4f:16:d0:a1:b5:98:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=44e7383e-8d3a-41c0-a813-25d397973d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c9:e9:88:3f:c9:ee:9f:aa:bc:24:58:0e:ee:
c8:30:8c:d8:e1:62:7c:48:d4:0f:0e:0c:81:be:b1:
3c:0d:84:d1:6e:1d:f5:25:61:81:9d:53:81:11:24:
90:00:cc:48:27:fe:2a:8a:bd:01:9a:53:16:a9:f1:
18:bc:44:41:89:c1:85:8e:f6:53:11:22:09:6a:98:
9c:3a:0c:71:a6:53:66:46:6e:06:bb:e5:bd:7f:d1:
cf:25:40:49:ae:ee:13:26:08:af:74:64:eb:31:8d:
02:91:67:27:7d:c8:65:ba:df:b8:4a:01:ca:ed:ff:
7f:e4:b6:d9:38:9c:1e:8c:63:ae:f9:d9:8f:0d:f5:
6b:94:8b:bf:c6:14:1c:f0:03:f0:92:7b:52:4b:f1:
e7:b8:00:46:38:51:15:1e:d8:f0:1a:08:21:9c:28:
6b:a4:3e:26:f8:bc:78:dd:ed:09:86:fd:b8:c2:b7:
7a:9a:bc:a5:99:f9:d0:24:be:a9:46:d8:8a:6a:f8:
e7:12:1c:83:8b:53:da:04:7c:59:cf:0e:a2:f7:bd:
2d:73:55:24:23:35:44:97:7d:89:67:f2:0f:4c:85:
52:bc:61:8f:cb:fc:d2:50:f4:8b:98:0e:32:9e:91:
d9:a6:fe:96:b9:d6:d5:6b:41:77:0e:b4:f6:31:44:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E2:07:F1:63:0C:4F:20:80:D7:89:17:0A:57:50:3F:A4:AE:14:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/7638d7ef-f4e0-3d1d-b51e-9c8ec31a06f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
X509v3 Authority Key Identifier:
keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
sbgp-ipAddrBlock: critical
IPv4:
161.69.32.0/22
161.69.48.0/23
161.69.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:6e:44:c0:ff:6b:c8:2a:d0:81:75:d6:4e:24:f8:e4:95:e2:
47:ff:58:0c:b2:e8:42:aa:b4:e0:fb:21:04:52:d9:05:33:0a:
73:af:65:1f:70:08:1c:d8:5f:13:70:b1:d5:38:9c:74:29:87:
c0:cc:b0:bb:c9:45:4c:cc:b6:6b:f6:dc:1d:22:93:49:86:ce:
b8:4b:dc:0d:b4:45:8b:22:78:1c:90:d3:92:64:e1:4b:91:71:
10:9c:8c:5e:48:35:2a:99:18:31:21:d3:1b:37:1f:39:52:7a:
57:af:26:33:f9:63:9e:90:3e:94:d3:d8:5a:1a:16:20:7a:c0:
76:78:16:c5:2f:1f:1c:74:4e:8d:b7:bf:48:e1:b9:43:1f:96:
c0:76:05:d5:0a:e6:51:a3:73:3a:ef:34:07:2a:36:a0:d7:50:
fa:16:01:d6:fe:aa:55:e5:50:44:c8:ff:15:82:84:d9:2a:bd:
4f:ae:42:eb:5c:77:7a:65:fc:0b:25:4e:fc:5e:6d:ef:89:9e:
f8:85:e5:39:2d:38:ab:8d:bc:be:28:0b:84:da:a8:2b:c6:f1:
f3:84:4e:48:2b:27:eb:c5:40:fe:cb:c6:57:69:ce:ac:8f:47:
ce:5e:30:cf:28:73:75:f7:9b:c1:8e:18:50:bd:c8:a8:5f:5e:
01:9b:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:48 2025 by rpki-client