Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9d7706b7-1de5-3cd2-b8e0-b0fbb5c62463.roa
File: 9d7706b7-1de5-3cd2-b8e0-b0fbb5c62463.roa (raw, json)
Hash identifier: HceGZK9tAnSoYJoRrJ2y6Qt/2TzCKjMhjBXTUKyD1hE=
Subject key identifier: 04:90:D4:7E:4E:20:90:3F:48:C9:B4:AF:92:E0:1F:DB:7C:7A:64:24
Certificate issuer: /CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Certificate serial: 010D0C9F43285848854B4D94BAEDD5FDC7C9A000
Authority key identifier: 5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9d7706b7-1de5-3cd2-b8e0-b0fbb5c62463.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 27299
IP address blocks: 162.219.52.0/24 maxlen: 24
162.219.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:4d:94:ba:ed:d5:fd:c7:c9:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bc604de-ac2b-4921-b601-a2c976ab18e8
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=0f387754-b8c8-492d-8798-595602799b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9a:77:a9:f0:09:be:bc:ee:99:6c:82:50:37:
11:4a:1c:ee:51:ee:c9:18:51:02:b8:3b:92:7e:b1:
8c:d5:4c:ee:c4:34:98:00:d6:d9:cb:96:11:ce:f9:
fe:49:10:d2:72:b0:dd:8e:ab:f2:00:b8:16:5c:16:
d8:56:bf:2b:da:31:5b:5c:e9:c1:91:e7:76:ca:ce:
28:26:8e:80:4b:8e:af:c5:04:c4:59:22:8f:e4:65:
1d:aa:e3:88:63:64:41:e0:2a:2c:e4:13:e6:06:ef:
e9:0b:15:23:61:01:9a:23:cf:db:af:fe:3e:6c:5f:
ff:f1:ae:89:04:87:fc:c4:cb:5f:40:ec:7a:ae:22:
ab:27:0d:9f:4c:0c:4c:1f:bc:a0:f8:50:13:3b:43:
a5:04:59:24:11:0a:e0:d7:58:e2:a5:00:b1:f2:0f:
83:3f:cd:75:89:4e:6d:6e:b0:fe:79:c4:80:d2:1c:
08:03:d8:72:af:57:3b:21:9b:18:49:7e:c7:c7:78:
65:c4:30:91:11:19:d0:b4:79:ad:bc:44:25:2c:3b:
02:bb:99:b2:f9:b4:f2:c0:e5:47:53:28:63:77:de:
3d:ac:55:28:a9:70:3d:3a:71:0a:9c:09:3e:88:1d:
a1:4f:ac:f0:23:99:93:7d:c7:04:e8:29:f2:f0:e5:
4e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:90:D4:7E:4E:20:90:3F:48:C9:B4:AF:92:E0:1F:DB:7C:7A:64:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/9d7706b7-1de5-3cd2-b8e0-b0fbb5c62463.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8/4bc604de-ac2b-4921-b601-a2c976ab18e8.crl
X509v3 Authority Key Identifier:
keyid:5D:EC:C2:1E:9D:07:9D:B1:09:72:20:A7:5D:09:3D:FA:E3:FC:AC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4bc604de-ac2b-4921-b601-a2c976ab18e8.cer
sbgp-ipAddrBlock: critical
IPv4:
162.219.52.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:33:c5:28:a0:94:6c:8e:92:2e:88:26:38:d0:73:54:c4:3f:
79:07:58:51:1b:23:a2:f6:be:d4:60:39:fe:d7:a7:f3:d7:a5:
20:69:dd:6a:ad:54:41:44:c3:4f:aa:ef:5a:79:7c:06:cd:11:
14:7a:70:8f:09:c4:3c:02:f4:88:65:34:0c:04:57:59:b8:55:
bd:c8:00:2b:50:03:a3:74:90:f6:38:7e:c4:ce:d8:b5:f3:13:
4f:1e:3a:70:4a:d1:b6:9d:19:fd:29:17:4a:8b:28:ca:c1:db:
99:53:d5:86:f7:1a:02:e5:c0:ca:e7:ac:ff:16:da:71:ef:61:
4a:89:7e:f4:4a:0a:d8:06:0d:4e:82:de:e1:56:46:2b:39:db:
a9:b8:56:f8:08:30:e4:b5:ae:fa:0c:21:e1:2b:45:d4:57:12:
1f:84:10:59:c0:0e:bd:2f:4d:e2:d8:00:02:fb:85:5e:c0:c8:
be:37:c2:7b:44:64:15:ef:be:ba:ac:fc:74:63:80:2d:03:2f:
42:e1:41:7a:a0:30:fd:00:9f:25:9b:06:28:4a:21:96:4e:4d:
86:3f:e7:05:d9:13:fd:8e:b1:13:4b:15:87:9a:c3:5d:75:11:
24:49:d8:fc:9c:6f:49:b4:04:9a:15:75:6d:4c:e0:11:7d:3a:
b7:f9:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:26:29 2025 by rpki-client