Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa
File: 4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa (raw, json)
Hash identifier: siHK6xUjojYTRA4jmSYjtvXVM/7h12leRohl0S14b+4=
Subject key identifier: 71:89:31:56:27:FA:CE:70:48:78:B5:D9:83:F9:0F:34:11:03:CE:31
Certificate issuer: /CN=688165c5-c42e-4c66-a760-e605ebd8b2a3
Certificate serial: 010D0C9F432858492CAE9A98089647C7A6241DC0
Authority key identifier: 08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 395089
IP address blocks: 192.160.102.0/24 maxlen: 24
2620:132:3000::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:9a:98:08:96:47:c7:a6:24:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688165c5-c42e-4c66-a760-e605ebd8b2a3
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=8eaa3a9a-2401-493d-9b4a-cf15a1335c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:6d:e5:67:83:57:ee:a1:08:72:05:2c:15:
44:f9:da:e0:f1:77:80:04:85:3a:0a:a1:66:51:ed:
3d:96:51:0a:e0:fe:a7:b6:ec:3b:1e:78:da:30:83:
75:28:3f:d5:be:89:e9:c5:41:c9:d2:24:5a:cd:94:
04:da:b0:6a:3d:92:87:9d:d2:15:ee:68:cc:6a:c5:
63:19:b7:30:06:64:17:59:58:ec:1c:67:ad:4a:ea:
cc:59:0a:a1:8d:32:25:5f:e8:d1:e5:0c:ba:2c:27:
33:53:46:e0:ee:99:d1:7f:dd:0e:30:28:6e:e3:bc:
e4:12:d6:bd:8f:97:80:17:60:1b:61:85:39:09:be:
e4:b4:38:0a:25:41:c3:02:3a:d2:5d:69:bf:5f:65:
78:77:83:c7:84:05:6d:b0:5f:94:e5:f0:1c:f5:fd:
ae:b8:35:39:a2:76:53:53:02:05:7f:bf:21:f0:82:
9a:69:10:43:78:84:3d:4b:22:39:2c:a2:9f:eb:0d:
5b:bf:cf:36:73:ae:61:d9:27:67:cf:c1:fc:70:63:
b3:8d:92:23:98:06:1c:3f:6b:21:c2:ad:f3:38:68:
d7:17:a9:0e:0c:e0:63:bf:62:6b:76:e5:99:c1:f2:
38:1c:e6:56:c6:d8:92:3d:41:16:c3:6f:48:20:0a:
56:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:89:31:56:27:FA:CE:70:48:78:B5:D9:83:F9:0F:34:11:03:CE:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/4c6e1e5e-2d4d-3393-8e7d-612fd502acbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3/688165c5-c42e-4c66-a760-e605ebd8b2a3.crl
X509v3 Authority Key Identifier:
keyid:08:52:B1:B8:4E:19:41:78:0A:A3:10:B1:D6:41:0C:E7:AB:22:B7:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/688165c5-c42e-4c66-a760-e605ebd8b2a3.cer
sbgp-ipAddrBlock: critical
IPv4:
192.160.102.0/24
IPv6:
2620:132:3000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:c4:20:0c:e7:5b:7e:57:61:9c:47:c5:ed:a2:08:69:aa:c2:
5a:24:12:76:32:27:09:c3:6a:c2:d8:af:a8:f2:50:57:28:cb:
96:7b:5a:d5:4f:d9:93:77:6e:39:79:20:1e:19:a2:df:07:a1:
56:67:db:8e:4b:c6:ef:f4:f9:23:87:11:3e:d8:89:75:18:ab:
5e:da:49:e3:e8:e1:d5:fc:0e:07:57:08:81:27:6c:9a:91:38:
54:93:ed:9f:1d:71:e0:24:e9:8c:21:55:da:69:c3:26:2d:5e:
cb:c3:2b:91:ca:e3:22:24:88:5a:2e:ca:d2:10:51:a7:20:5f:
d8:77:3e:2d:91:db:8e:c2:27:f7:35:de:ef:d7:3d:8b:fa:50:
1e:b9:c0:37:90:2e:fc:9a:52:e7:b1:c9:79:d0:17:22:93:2f:
6b:2e:d1:dc:0d:bb:9c:d7:59:59:9a:a8:c1:c0:f1:50:26:4e:
fa:dc:05:3b:1d:cd:7e:7c:05:df:d2:ce:a8:d4:42:ee:26:dc:
42:d5:e4:b7:3d:8e:c6:ed:c5:20:0d:f1:4c:80:90:91:b2:ac:
c5:66:d2:56:e0:00:d4:96:e7:5b:1b:47:bb:0d:94:04:70:0d:
8d:29:48:db:08:a4:42:7f:5e:c1:29:18:ee:d4:f8:aa:6a:13:
cf:ee:e9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:32 2025 by rpki-client