Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/21f1cd94-24c0-32bd-b9c1-7477535fdc8d.roa
File: 21f1cd94-24c0-32bd-b9c1-7477535fdc8d.roa (raw, json)
Hash identifier: LjY/dMDNUXZgZBg2lcg6GOCQ/Y0D/5k/9DobQYh+oVY=
Subject key identifier: 72:50:93:D5:EC:78:F0:F1:FC:8B:8B:77:57:2C:6F:A0:C9:AA:A8:26
Certificate issuer: /CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Certificate serial: 010D0C9F43285848D0ABB1A2ABBA3B74A1151878
Authority key identifier: 92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/21f1cd94-24c0-32bd-b9c1-7477535fdc8d.roa
Signing time: Sat 08 Feb 2025 14:00:52 +0000
ROA not before: Sat 08 Feb 2025 14:00:52 +0000
ROA not after: Fri 09 May 2025 13:00:52 +0000
asID: 62494
IP address blocks: 158.120.46.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d0:ab:b1:a2:ab:ba:3b:74:a1:15:18:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee
Validity
Not Before: Feb 8 14:00:52 2025 GMT
Not After : May 9 13:00:52 2025 GMT
Subject: CN=f4c9054f-3baa-4eb7-be7c-9eb54a5e6310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:f1:f7:ef:16:c2:a9:f6:be:ad:db:8a:a4:
59:e1:e8:1b:81:81:73:1e:61:d8:90:a5:b2:fb:a1:
ec:f6:52:b1:96:29:bd:af:e2:a2:4b:88:6e:fd:d2:
cb:72:b5:3b:18:f0:dd:4b:81:89:5d:ab:cb:ce:24:
0b:9f:3e:72:22:8b:ee:ed:1d:b4:5b:3e:53:d0:57:
fe:63:82:5e:ad:46:a0:92:e7:91:4d:99:92:31:c1:
41:82:df:e0:78:94:ca:e1:8d:4f:05:c7:a0:c1:15:
e7:1f:7e:68:66:47:9d:c4:57:4e:4f:56:02:34:4d:
57:aa:36:c6:90:22:af:38:72:b9:22:69:eb:e4:e3:
6d:65:f5:8d:21:a4:8e:5d:09:99:b6:a4:47:58:0c:
c9:48:7a:8d:b6:8a:a7:e7:cc:ca:9f:cc:e0:5b:e4:
a7:c5:f8:60:23:38:0b:0e:8c:96:38:04:f9:ec:9c:
0e:69:66:83:40:25:4e:b3:6c:f2:23:0e:36:e3:14:
b3:33:95:5a:9a:e0:f7:58:70:c7:4c:f3:32:ae:4e:
ab:53:58:25:3d:9f:7d:5b:3b:16:28:07:39:14:da:
c8:c2:6c:f0:fb:b1:fb:d5:48:6a:25:9c:2b:bc:73:
8a:8f:75:e8:e0:67:6e:b5:23:20:e6:41:f4:53:ad:
97:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:50:93:D5:EC:78:F0:F1:FC:8B:8B:77:57:2C:6F:A0:C9:AA:A8:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/21f1cd94-24c0-32bd-b9c1-7477535fdc8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.crl
X509v3 Authority Key Identifier:
keyid:92:15:36:2F:1B:1E:90:72:AF:90:24:E2:1F:13:67:D7:7A:09:E9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8a6014b1-df0f-4cfd-9980-3ee4bc9e9fee.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.46.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:42:3b:64:c4:d1:cd:30:4e:b8:19:79:08:25:83:29:18:b2:
f4:1a:35:ac:59:ed:26:90:33:58:dc:89:71:00:90:28:e7:cb:
4b:81:db:c4:36:3e:de:66:72:5d:04:68:0e:ae:ec:dd:71:54:
4b:24:2d:0f:4c:c5:db:e7:f1:49:e5:81:16:c1:8f:f6:ec:43:
58:06:03:39:44:ac:ae:d2:7f:6a:06:b5:97:83:f1:a6:e9:ed:
e8:53:e4:ea:a8:8b:b0:64:ec:39:53:18:22:af:43:4f:b3:57:
22:81:ed:43:c5:c7:90:92:28:ca:bc:69:c6:94:99:a6:32:47:
29:fd:7b:9c:a7:b3:7d:4f:21:53:00:cd:20:d2:ba:86:0a:01:
d4:d0:9b:69:26:6b:5f:9a:c6:59:44:80:61:41:5e:dc:4a:f9:
64:c6:7f:89:3f:0a:b3:e3:5d:8b:e2:e2:07:73:e1:0b:94:24:
80:4e:55:e4:f4:0f:e1:59:c1:7f:7c:7d:e8:08:af:12:2c:78:
5b:2e:92:ba:d9:7e:65:7e:85:e1:f1:cd:b8:b7:3e:f0:2c:2e:
ff:4c:13:37:54:32:e3:d1:7f:20:fb:15:f1:25:e5:df:5c:6a:
ce:4b:4a:67:9c:b4:cf:aa:8c:1e:bd:d0:d5:31:e1:57:15:fc:
e7:1d:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:10 2025 by rpki-client