Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b896e77a-a22f-3c11-b044-0022771a3505.roa
File: b896e77a-a22f-3c11-b044-0022771a3505.roa (raw, json)
Hash identifier: 4WpsluklbzEoJgyXXFc8gQi4NDZI+53zLwQZVKGTIL4=
Subject key identifier: D2:45:3B:49:B0:94:B4:8D:35:1E:92:2D:30:E0:1E:0E:E8:29:03:E9
Certificate issuer: /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial: 010D0C9F432858489A3B49EC50F12E58198A1940
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b896e77a-a22f-3c11-b044-0022771a3505.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 13760
IP address blocks: 142.190.160.0/23 maxlen: 23
142.190.162.0/23 maxlen: 23
142.190.164.0/23 maxlen: 23
142.190.166.0/23 maxlen: 23
142.190.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:49:ec:50:f1:2e:58:19:8a:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=54ed0a1c-0c04-487f-96a5-2ca0b8509b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ca:ab:f9:ec:ae:47:4e:61:b1:f0:b7:fa:37:
3d:97:51:b7:31:0e:92:ee:34:cf:2a:a5:29:4c:a9:
c2:ee:31:cc:9d:5d:d9:b7:44:2e:d0:af:c7:ca:a1:
46:90:b9:5a:f9:56:62:5d:41:4d:98:21:d8:07:8c:
f6:79:fe:71:bd:e7:90:bf:b0:c8:72:e7:ee:92:12:
14:2e:fe:29:fd:db:96:2a:33:50:bb:00:f3:12:0f:
b0:ad:f8:1a:f7:8f:4c:c2:a9:f3:3f:ab:1d:02:cf:
65:42:1b:bb:fc:57:e4:91:25:c3:4f:1b:76:08:26:
8a:28:76:80:aa:9b:a1:d3:a1:64:17:d3:2f:5a:e7:
62:2c:25:b7:af:fc:15:88:81:8f:70:fc:c9:d3:71:
56:40:e5:6b:9b:00:64:d1:b6:f2:57:1f:d0:15:4c:
82:31:cb:61:53:dd:5f:29:53:3c:20:da:a3:3a:eb:
98:21:85:a8:7e:5f:de:fe:65:1b:22:e9:bc:e2:49:
ce:d8:88:f0:d0:28:a4:7f:95:05:70:04:83:28:dd:
a8:7c:0a:21:cf:c5:e6:1a:a1:82:e5:72:11:83:c5:
b3:b1:6f:a2:47:fe:62:6b:8d:99:c8:46:54:c7:f5:
39:5e:f1:0d:d7:0e:b9:85:be:48:bb:d9:1a:f8:d5:
6b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:3B:49:B0:94:B4:8D:35:1E:92:2D:30:E0:1E:0E:E8:29:03:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b896e77a-a22f-3c11-b044-0022771a3505.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
X509v3 Authority Key Identifier:
keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
sbgp-ipAddrBlock: critical
IPv4:
142.190.160.0-142.190.169.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:85:55:01:e6:18:83:d5:22:7a:98:89:f8:50:a3:25:25:e3:
1c:41:2f:9e:f9:20:b1:cc:61:11:2e:61:a7:20:ba:cf:66:48:
74:e7:22:e1:a0:6e:fb:7b:32:5c:92:ba:58:aa:01:22:36:ff:
b5:b8:88:82:f9:5b:de:0c:4d:f2:1c:26:09:6a:0e:88:47:2a:
27:6b:1c:95:3d:b6:5c:7f:32:d2:6d:39:70:fb:47:58:96:02:
9d:84:98:3b:79:4c:73:98:d4:7a:5d:9d:0d:26:b4:da:75:fd:
04:f7:49:78:db:9a:72:b1:a2:d4:56:e6:1a:eb:ff:99:a2:aa:
fb:ce:a5:18:1d:0f:8f:f9:cb:d6:39:27:10:e3:c8:8e:5f:da:
47:95:6d:d9:e0:07:7b:a7:67:72:37:0c:2c:11:06:41:af:91:
1d:5e:d7:19:2d:b0:cf:ed:67:14:71:4e:4b:68:10:d1:0a:41:
2a:13:57:36:05:93:09:be:03:1c:cb:3e:84:be:19:9f:69:0a:
c5:e0:a9:dc:c9:d0:fb:40:fe:8e:3c:33:78:1b:75:1c:9b:24:
47:27:36:3e:98:ba:4f:9c:6b:d2:9e:9f:a2:01:a0:cc:6f:bd:
61:61:dc:d2:43:65:3f:c2:3b:96:50:ed:45:a8:b2:e9:34:c0:
b0:07:0e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:46:52 2025 by rpki-client