Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa
File: 5b65963c-d23f-31a3-b848-4132887683b8.roa (raw, json)
Hash identifier: HOPYphVy+Q6KY2WRfEOQPU3P+1laIs/dg3mgzuVyQTo=
Subject key identifier: A8:58:0E:F2:58:D2:B2:FC:E3:1B:E0:A3:33:BC:4C:AA:CB:E7:F6:79
Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1
Certificate serial: 010D0C9F4328584905B6AEC9591072E907F7B180
Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa
Signing time: Thu 27 Feb 2025 14:00:51 +0000
ROA not before: Thu 27 Feb 2025 14:00:51 +0000
ROA not after: Wed 28 May 2025 13:00:51 +0000
asID: 395400
IP address blocks: 168.123.0.0/16 maxlen: 17
192.149.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:05:b6:ae:c9:59:10:72:e9:07:f7:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1
Validity
Not Before: Feb 27 14:00:51 2025 GMT
Not After : May 28 13:00:51 2025 GMT
Subject: CN=fc6a91f1-5bb5-439e-8049-037360b08065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:c4:4f:69:31:bc:fe:24:ef:d4:c9:51:b1:
47:d1:86:26:20:36:34:20:9b:a9:10:98:8f:7f:7d:
a1:36:2e:72:da:dc:0c:dc:fd:f7:df:f5:65:97:9b:
b6:2d:ef:3c:e2:33:bf:72:b7:d4:d6:84:99:23:d6:
ce:48:c0:57:77:92:97:27:7d:8d:c2:94:63:54:d2:
0f:f7:7a:63:22:98:9e:06:e4:69:7a:fb:29:ad:71:
fc:25:a0:45:95:b9:b6:1e:6a:e4:17:c8:24:55:cc:
0f:5a:cf:45:d1:a5:cb:27:bc:74:73:8b:e3:eb:d4:
64:f9:c0:a6:3a:c4:12:bc:94:54:65:97:b0:1d:13:
b6:bd:4d:3d:df:09:97:d5:35:8c:90:74:20:2c:36:
06:6e:a4:cd:11:d5:74:7d:b1:d1:4f:71:9d:c1:3d:
19:0d:e7:df:60:a0:14:dc:6a:e5:a5:f6:d8:02:a1:
cf:ba:1c:9f:ca:f4:7f:49:a7:30:82:20:82:10:bc:
21:32:b4:25:c9:ff:cb:15:b8:ee:a2:89:6b:6f:28:
69:81:28:f8:58:83:ae:32:f3:ef:a4:70:2b:31:07:
ba:34:84:bb:02:8a:0d:bf:f7:41:56:47:16:8b:66:
80:31:dc:1c:6a:e4:77:12:d8:7a:cb:b7:df:9c:0f:
05:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:58:0E:F2:58:D2:B2:FC:E3:1B:E0:A3:33:BC:4C:AA:CB:E7:F6:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl
X509v3 Authority Key Identifier:
keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer
sbgp-ipAddrBlock: critical
IPv4:
168.123.0.0/16
192.149.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:9d:ac:0f:ed:42:7e:bd:b4:1a:09:d0:61:86:43:5a:81:ed:
32:59:b1:5e:c5:f6:9e:7a:d4:85:92:ab:8b:cb:08:6c:7f:a5:
4d:b7:a7:1d:5b:23:7f:76:a6:25:3e:9a:ef:ff:d3:aa:3a:a4:
e8:3a:d7:88:2d:50:09:5a:cc:14:38:3a:42:2c:f5:a2:b9:77:
ba:63:bf:d3:83:9c:0b:36:71:0a:70:90:fe:d9:bf:1a:b5:e8:
c2:cb:e1:9e:e6:de:45:c2:a3:df:ba:58:08:9c:be:76:04:26:
03:e8:2b:f2:01:99:bc:1f:c0:45:51:d6:f4:96:ce:f0:63:c4:
7e:da:0c:96:1e:de:10:ac:66:32:3e:d0:72:ca:19:47:17:b3:
80:0b:c1:cf:47:68:a6:14:e1:4f:62:36:54:8e:74:26:6c:fd:
42:46:e4:4a:54:5d:c2:fd:80:a6:b0:66:96:03:9f:dc:05:30:
4c:ec:0f:0f:ff:04:01:bd:69:6a:fb:55:2a:98:82:64:b6:64:
72:69:24:53:c4:28:d6:6f:c9:eb:a2:61:2e:22:c4:ca:3e:70:
a2:32:b4:d7:bd:97:f1:42:da:ef:1a:5d:4f:26:c6:5a:9f:d7:
d8:db:36:53:10:3b:1b:52:f0:16:7d:10:c5:8c:45:53:53:d2:
ba:a5:65:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:04:49 2025 by rpki-client