Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa
File: ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa (raw, json)
Hash identifier: kR2q8duZPD5E7PaY7jMuKPkj/nCjik3XrFNuzYa6PTc=
Subject key identifier: C4:3A:A5:A0:35:77:7B:F9:3C:37:13:95:F0:0D:7E:49:EA:8C:AB:47
Certificate issuer: /CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
Certificate serial: 010D0C9F432858489340AFC5C27E1A99F3DE9700
Authority key identifier: 09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 394413
IP address blocks: 159.28.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:af:c5:c2:7e:1a:99:f3:de:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=53ba38c4-f6d5-4c7f-bc7c-c3add31263a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:f6:78:49:f6:19:3b:2b:28:8a:d4:3c:ea:
2c:a0:1c:71:d8:a4:c1:19:7f:2a:e0:69:26:c3:12:
bf:cd:4f:f9:e6:de:5b:d1:1f:7e:0e:d8:74:07:b6:
28:6d:8a:94:17:e3:2d:27:41:94:6c:61:57:11:ab:
98:ef:dc:e9:b8:e3:1f:b5:23:86:69:36:14:fd:c1:
18:fa:4f:05:20:f2:bc:44:11:d6:fe:02:e4:3e:3b:
e8:46:f4:77:85:b9:57:bc:32:81:31:2c:46:14:88:
80:f8:ab:b8:d0:ce:80:72:65:32:6a:2f:87:e3:4c:
a5:19:7d:46:9e:d2:34:16:08:8b:a2:de:9b:7a:13:
20:cb:19:ff:f1:a9:82:c2:db:ca:0d:4b:14:39:5f:
a2:2d:63:b9:55:06:b1:1e:03:0d:c4:ec:f5:89:94:
cc:31:a7:18:b5:c9:7a:c8:86:94:60:d8:c0:37:00:
81:af:97:a9:a4:04:88:46:fa:fb:ae:39:68:a6:6b:
47:4e:38:5e:7c:8d:b0:31:c3:49:bc:43:8f:b2:e0:
b9:77:b7:4c:ef:e6:98:4f:16:6d:5f:35:34:43:c4:
d7:b8:38:ed:42:27:e2:da:d2:8b:0c:cf:88:61:b7:
c6:5f:91:54:16:03:4d:d4:47:8d:98:bd:0a:4e:5c:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3A:A5:A0:35:77:7B:F9:3C:37:13:95:F0:0D:7E:49:EA:8C:AB:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/ef421df9-34b8-3b5e-a7d2-ac13423717e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl
X509v3 Authority Key Identifier:
keyid:09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.28.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:44:53:b9:11:1b:5f:22:2d:1a:b3:fa:59:d5:ea:ec:75:58:
61:15:e5:6c:78:32:f5:a2:9a:cf:98:29:af:1b:63:58:48:a1:
0b:6f:e9:8f:dc:41:5a:6d:a7:21:00:c3:df:42:bb:2e:4f:cb:
86:44:4e:b6:15:2c:36:31:3f:78:cd:7f:8c:6b:6b:e0:d9:a1:
f0:ec:04:86:55:dd:a1:b8:36:da:8f:bb:d1:9b:66:6e:cc:91:
df:a5:41:8d:b3:dd:1e:f8:1a:df:10:92:48:56:a1:7f:0a:d9:
e9:6c:e2:ee:b5:0a:ea:e4:bf:10:3f:7d:47:65:aa:1e:d6:83:
74:06:38:45:43:04:00:fa:b5:0d:8d:88:3d:c3:3e:fd:6f:3e:
7a:0c:cb:dd:04:ce:23:42:14:78:9c:2e:33:7b:c5:66:22:09:
90:1c:c9:a9:2b:ad:12:70:2b:65:5d:fc:d7:d8:22:b0:5f:76:
97:b4:05:27:e7:b8:5c:71:f8:8f:2c:1a:f1:a7:37:5c:00:c8:
91:52:1b:d4:3a:17:f0:82:b0:c8:3c:a9:62:f9:b3:07:ea:c4:
40:51:c0:fe:81:98:c9:8a:30:43:a9:62:d6:f8:c1:7b:3e:f5:
71:0c:39:8d:77:7c:28:78:29:d3:ef:88:2f:bc:30:25:51:f7:
31:7a:b7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:13:41 2025 by rpki-client