Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17f8b609-4908-3fc3-8711-bfa967d1b2a4.roa
File: 17f8b609-4908-3fc3-8711-bfa967d1b2a4.roa (raw, json)
Hash identifier: if1iHS9Edi8joSaC2aJPbFn6lVWXAxa/HLshlJ5KuNA=
Subject key identifier: A9:32:89:AE:4E:BE:C5:C8:D7:4E:39:E3:D7:34:CA:F2:AB:63:26:37
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB7274230070A58859B48C
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17f8b609-4908-3fc3-8711-bfa967d1b2a4.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 701
IP address blocks: 141.158.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:72:74:23:00:70:a5:88:59:b4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=8a0c1069-c33e-4f97-a906-0b97e8cfe17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:82:9e:7f:cd:04:6a:be:be:45:0c:47:06:
ed:e0:42:50:7c:ac:6d:4b:c4:1a:98:bd:e6:ed:5f:
36:59:ba:fb:be:da:90:8a:82:6a:e3:2b:51:93:0a:
6c:1c:f0:98:ad:45:5b:4b:1b:a9:86:a4:d2:f9:95:
33:39:83:c3:5d:6f:aa:f4:2c:37:32:2b:ee:92:ea:
10:94:b8:d1:68:37:0d:8d:fa:8f:e7:b7:05:14:cc:
37:6e:56:cd:ef:2a:13:c2:ee:64:09:bf:ef:e4:58:
e9:32:9e:f0:0e:29:7c:be:fb:32:ab:da:71:d8:08:
99:a8:5d:10:b4:7a:fd:84:18:b9:58:ef:48:fb:a9:
fd:dc:34:8a:63:13:81:11:84:5e:3f:79:ac:09:52:
a0:dc:12:96:e2:be:f8:7f:5f:56:ad:56:f6:8b:62:
01:3e:51:f3:90:e8:35:59:72:ca:9d:5c:0e:ef:03:
ce:f9:b2:16:19:23:8a:9d:96:a9:d8:b0:ae:bd:a6:
81:90:f5:53:a2:98:6c:40:b5:cf:e8:f1:05:80:71:
2c:db:51:82:cc:5e:25:78:c0:f1:5e:67:93:4b:c6:
55:93:fe:17:cd:22:d2:4f:43:d5:bd:ab:f8:94:27:
ec:0f:16:ec:13:32:34:af:72:4a:c8:f3:16:63:dc:
89:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:32:89:AE:4E:BE:C5:C8:D7:4E:39:E3:D7:34:CA:F2:AB:63:26:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/17f8b609-4908-3fc3-8711-bfa967d1b2a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
141.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:5c:39:2c:c9:6d:35:c2:59:bd:be:8e:36:52:19:bf:a4:a7:
2b:34:1d:c6:bb:46:fb:03:ff:3f:f7:92:86:d6:40:16:a8:da:
12:c8:a9:3e:5c:10:58:2e:51:36:3c:c3:b9:a0:8d:5f:52:dc:
ca:be:8b:1f:93:84:4b:40:a4:01:a3:70:5f:50:7e:19:f1:a5:
d1:ff:f5:76:b7:15:b2:9e:50:da:85:42:06:8a:b4:65:f3:8c:
9b:a3:16:86:28:c5:2c:c0:68:8b:7d:c8:78:53:d1:9d:8e:14:
ca:e8:98:e4:17:f5:32:f8:d7:77:70:35:41:5b:75:44:d6:32:
ff:4e:55:98:87:f3:24:fc:d3:5d:30:57:41:e2:02:bf:4e:54:
16:2c:fb:63:da:5e:16:95:fd:f7:6d:e1:bd:cb:12:3e:3d:d1:
61:f6:94:f3:c6:9d:5f:30:43:7f:c4:05:fe:48:2c:3d:4a:b2:
53:8f:b2:f8:47:8d:78:86:54:79:17:09:25:fc:fa:15:f4:32:
df:73:4b:20:3b:0f:8a:f7:08:5a:92:44:6a:fc:51:a8:5f:20:
95:cb:28:d3:3f:16:35:98:13:6f:54:4a:75:22:0a:d8:1a:98:
e2:86:0b:d6:7e:d0:df:33:7b:0e:a7:3c:4a:5d:65:c7:1f:19:
f9:34:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:09:38 2025 by rpki-client