Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ab44b69-1758-334e-8e6f-9d08e0c141cf.roa
File: 5ab44b69-1758-334e-8e6f-9d08e0c141cf.roa (raw, json)
Hash identifier: j16MN8eF2MFaJaeh6wURMPpMO3SgbxCyx5lQfY+KqUg=
Subject key identifier: 2E:DD:58:27:2B:F3:A1:5C:F6:22:CA:BE:7B:2F:D3:C2:9D:CC:A1:AB
Certificate issuer: /CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Certificate serial: 010D0C9F43285848E16BD408E1E00DB81E6B6500
Authority key identifier: 45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ab44b69-1758-334e-8e6f-9d08e0c141cf.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 16654
IP address blocks: 162.219.204.0/22 maxlen: 24
208.64.76.0/22 maxlen: 24
208.85.176.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:d4:08:e1:e0:0d:b8:1e:6b:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=bf8d97c4-0295-40dd-9f02-52536dbe030f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0d:68:9a:b1:fc:58:47:07:ef:54:27:27:61:
43:27:f9:c5:4a:bb:b8:d8:4b:9a:b5:f3:32:6e:53:
b2:71:fe:1d:8a:b9:40:fa:59:2b:fd:25:ac:94:aa:
5c:95:ea:13:a0:95:3b:10:36:ad:22:f1:eb:f0:9e:
be:b8:15:68:09:4e:71:1e:70:5b:32:21:07:d1:38:
59:36:5d:09:85:4e:44:3d:bc:62:80:8d:bd:28:38:
e4:87:31:d7:77:93:a1:c6:0a:3a:5e:60:ea:3e:20:
ea:73:5c:5c:2c:0b:a4:f9:b1:cf:39:b8:fb:09:08:
ca:8a:6d:7c:29:f4:21:6f:7d:57:d5:89:ab:ea:c0:
8f:67:d7:3a:6e:d6:ea:ea:3e:14:9c:2d:c2:db:3c:
37:6c:62:d6:cd:7c:12:81:6d:ea:7e:05:54:e6:8f:
5a:ab:1f:25:49:4c:b5:17:45:fc:32:05:13:4b:9c:
70:bc:8c:56:1f:4c:75:26:54:64:97:42:e3:70:91:
db:52:61:23:ef:f9:2b:cb:f8:7b:78:e9:5f:2c:0c:
3b:1b:91:85:22:3b:bc:53:b1:ab:f2:1d:c9:27:a3:
60:72:22:c2:8c:3d:78:66:80:e2:90:6a:61:b0:b4:
8e:6f:b6:03:c2:7c:d4:2f:4a:26:2d:4e:98:69:02:
1d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DD:58:27:2B:F3:A1:5C:F6:22:CA:BE:7B:2F:D3:C2:9D:CC:A1:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/5ab44b69-1758-334e-8e6f-9d08e0c141cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.crl
X509v3 Authority Key Identifier:
keyid:45:C5:4E:57:48:F6:22:68:70:4B:F5:6E:30:D2:0C:4F:7A:A4:2C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a1ccfc8e-9680-4080-a3f4-ef1a9e0dc36c.cer
sbgp-ipAddrBlock: critical
IPv4:
162.219.204.0/22
208.64.76.0/22
208.85.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:56:47:da:08:29:39:66:66:51:ab:ea:c9:b9:da:8a:8d:08:
45:2f:cf:b6:fc:5d:68:0d:f6:05:7d:02:5e:d7:2e:26:a7:d5:
89:8e:41:22:df:02:83:57:11:97:78:04:1d:70:05:50:9b:0c:
dc:c4:f2:ba:b3:37:6d:0c:8f:da:cd:27:8c:1b:73:0e:43:fb:
ff:06:70:81:67:4e:dc:96:39:3d:aa:df:44:62:56:ac:97:98:
73:1b:11:aa:25:17:20:04:b5:4b:26:00:e8:5f:1f:d7:0c:8e:
0d:aa:5e:c9:95:1e:65:60:81:96:ea:f5:e4:50:1c:cf:4d:8f:
88:25:48:eb:09:e5:6b:3d:60:9a:b7:9a:ff:61:c0:57:c6:65:
21:f9:6d:db:f6:ef:4e:71:67:59:be:9c:27:a2:62:2f:78:91:
ff:e1:50:e2:ca:31:53:62:9a:91:ad:ca:20:2b:ea:ef:4a:fc:
19:de:13:2f:45:c7:5b:75:f4:ff:f9:35:d4:ff:40:33:b9:6f:
c8:c2:c5:a3:fe:64:10:1e:d9:f6:6d:a3:34:fe:f9:fa:de:09:
5b:96:b5:d5:5a:0f:d7:1b:e6:45:d6:a5:ff:51:4b:ac:ee:2b:
49:c9:76:58:32:5b:42:83:5c:df:3d:7d:90:38:24:a6:7f:5f:
b6:64:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:24:13 2025 by rpki-client