Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5ae9e84-8331-356b-b2a9-0099d0e68482.roa
File: d5ae9e84-8331-356b-b2a9-0099d0e68482.roa (raw, json)
Hash identifier: sK8bwZj6dpkZcatLRmtCaFtyaBsasvMDqRdgaykRcUo=
Subject key identifier: 0F:E6:3B:58:28:6A:CD:D8:AA:57:FC:A4:C6:49:40:5C:A8:51:B7:54
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584921842821FDC0F13BFCBF3B80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5ae9e84-8331-356b-b2a9-0099d0e68482.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22394
IP address blocks: 168.201.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:28:21:fd:c0:f1:3b:fc:bf:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=dbcf152d-dfc8-477d-a856-c535268ccd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bf:22:bc:e1:c8:38:b4:f3:26:48:e8:8e:8d:
e2:f9:ea:b1:ea:f7:ff:85:88:28:c1:3b:30:56:24:
4c:a1:08:c6:05:43:09:d7:81:1e:0e:9a:d2:61:a3:
38:ae:c1:76:f5:c6:34:1c:90:e3:22:f5:9d:5c:cf:
14:35:e7:72:5e:d4:8e:4d:fc:8b:52:5a:fd:67:4f:
2e:79:fa:be:d6:7a:b7:91:50:92:21:8c:15:16:e0:
61:89:af:fb:d6:d6:49:c0:37:d5:0e:ba:37:b3:bc:
14:d5:79:c7:a2:d4:dd:65:96:c9:56:24:48:cc:79:
9e:46:d9:53:30:af:69:ec:59:84:98:2a:dc:a8:d8:
73:77:1b:44:64:d2:86:c2:57:c1:29:57:d4:67:fc:
a2:7e:90:bc:6b:18:18:ae:ff:4f:0b:e0:92:9b:00:
3b:af:d1:5a:69:4e:5a:9f:ad:9d:13:82:78:bf:d2:
b6:e2:bc:79:89:41:4b:0f:18:a5:77:75:84:c0:fc:
89:2c:c1:0d:7f:02:a1:3f:5e:ae:49:66:8c:4d:17:
75:fe:ac:4e:8d:82:bd:b1:8e:6d:0b:bb:9c:ae:f3:
12:6f:cd:06:5e:94:5e:bb:87:7d:30:f0:d4:c5:bc:
23:95:f5:0e:1b:b7:3f:6f:8e:b2:c6:f3:4f:c4:cd:
25:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E6:3B:58:28:6A:CD:D8:AA:57:FC:A4:C6:49:40:5C:A8:51:B7:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d5ae9e84-8331-356b-b2a9-0099d0e68482.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
168.201.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:5c:72:cb:b0:a4:16:ff:d8:32:4c:7e:1b:8f:1b:1f:00:0a:
7d:d3:65:af:6a:18:17:b8:90:2d:59:ba:94:b8:01:a4:eb:3c:
4c:bd:d2:b4:90:2a:1a:30:0f:7c:f7:50:05:d5:a9:4d:b9:cd:
ac:43:2d:99:72:ed:bf:e7:32:ee:73:dc:7e:7f:f2:c7:17:7e:
3f:2b:3e:c5:27:b6:24:53:02:2e:9f:28:4c:f5:10:9f:a7:57:
94:76:79:2f:b9:e3:e5:00:a2:28:10:f3:16:13:e2:83:97:99:
29:b1:46:a0:eb:2a:31:d6:91:2a:36:1d:f8:d5:8f:38:c2:8f:
c5:09:f8:e2:02:2a:e0:c6:fd:a2:62:e2:01:1b:fe:f7:27:64:
3c:68:9f:21:a7:37:fa:cd:cd:b5:47:3f:69:05:66:c2:e4:f5:
b5:94:42:ad:fe:34:2c:f2:f2:ec:9a:88:30:b5:2e:06:e4:15:
d0:60:23:df:6e:c4:a8:b1:b8:d2:70:3f:8a:b3:ea:d8:da:bb:
75:eb:30:96:5a:92:e7:c5:28:93:a5:2a:b1:c7:7b:e7:62:71:
b8:9d:d8:e7:e5:44:e8:a5:75:51:1c:95:3d:96:d4:3c:df:ee:
d6:e4:9c:8d:99:94:f6:92:aa:a1:5d:77:03:c0:00:b3:20:19:
8b:c1:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:15:49 2025 by rpki-client