Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa
File: e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa (raw, json)
Hash identifier: WUdqS1rbRWH6XDKKiS40fwFFD2yZyvm0Ee6shkqzWdE=
Subject key identifier: 27:3E:3A:17:5C:6F:82:C6:CE:F9:75:A1:8E:9D:98:84:5B:6A:BA:7F
Certificate issuer: /CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1
Certificate serial: 010D0C9F43285848D2113F5841452D09CA4F7380
Authority key identifier: DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa
Signing time: Sun 09 Feb 2025 02:00:39 +0000
ROA not before: Sun 09 Feb 2025 02:00:39 +0000
ROA not after: Sat 10 May 2025 01:00:39 +0000
asID: 398203
IP address blocks: 142.202.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d2:11:3f:58:41:45:2d:09:ca:4f:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1
Validity
Not Before: Feb 9 02:00:39 2025 GMT
Not After : May 10 01:00:39 2025 GMT
Subject: CN=165e200e-71d7-49e6-973c-e30f1958e91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:7b:23:1c:e6:d2:5f:3b:dc:24:ce:41:73:
a3:8b:b4:00:cd:5b:1e:01:ce:a2:1e:02:08:32:c4:
92:22:2b:af:3f:21:77:17:48:32:fa:4f:53:8b:2c:
2d:2f:2a:8b:8a:12:c7:dd:97:a0:d9:1e:f5:c7:ec:
a1:ee:dd:fd:4c:3b:91:27:b6:24:7f:87:6a:2a:b5:
84:fb:60:8d:19:1e:4c:14:2a:6c:dd:66:da:58:21:
27:3a:e7:8f:0b:40:64:9d:e6:c8:10:46:82:47:41:
86:d4:83:e7:18:f2:9a:3f:03:55:88:af:4e:4e:c0:
ab:a4:84:4e:ed:df:4a:59:d7:cf:ae:42:7b:a1:a3:
43:53:f2:bf:8f:4f:6d:97:68:88:dd:cb:fe:cf:f7:
60:d3:ac:74:45:2a:7c:f6:dc:ee:94:87:21:82:ac:
44:12:0e:c5:b5:09:71:ce:ab:c3:45:38:a7:23:b0:
cb:8f:5c:e1:ca:45:43:25:3b:89:8d:c7:d0:ab:83:
8c:2c:ef:50:e7:f0:8e:eb:b8:f3:8b:59:4a:8f:07:
ae:85:f4:8c:2e:b6:70:cd:99:11:63:37:54:e3:c4:
11:8f:72:3f:98:fa:5d:6c:ba:f0:5a:39:56:aa:21:
82:6c:1d:91:26:c7:3c:71:b7:fd:f7:32:d0:9f:b8:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3E:3A:17:5C:6F:82:C6:CE:F9:75:A1:8E:9D:98:84:5B:6A:BA:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/e821c7f2-031f-3fe4-867d-a095b5a7eb0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.crl
X509v3 Authority Key Identifier:
keyid:DD:F6:09:95:17:8B:B7:4A:6E:9C:AA:DF:B0:69:85:38:26:70:0B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b86a4ec3-a3b5-4d72-bee2-f58c3cde01a1.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:5a:06:c3:36:1e:2c:e4:1f:ac:aa:6e:0e:ac:f3:56:e8:2a:
49:42:c4:84:89:3d:42:77:99:b1:0f:7b:a9:3e:44:a7:c1:26:
70:22:03:6c:35:20:fb:55:de:b7:1c:6a:e1:20:07:9d:23:28:
c8:6c:f7:91:17:41:17:bf:89:1e:18:ef:0d:84:dc:1f:eb:1a:
00:b9:23:11:5f:fe:2e:3e:5a:8b:e4:57:60:e6:40:23:11:e2:
1a:3f:6e:55:1b:4a:3c:f7:c2:85:02:6c:6d:ae:d9:c2:a4:6a:
22:61:a7:33:d0:d8:33:c4:df:54:25:b9:e8:af:f5:00:d6:30:
75:d7:da:1a:2f:f9:8a:b2:86:9b:f4:6a:64:51:24:34:72:d6:
95:45:b2:40:a0:98:8b:72:c8:ff:ec:58:ae:32:f8:4d:dd:bc:
7a:ea:54:f6:26:89:2a:20:6c:14:c9:2a:52:cf:24:85:19:53:
59:9f:81:87:e9:2b:3b:fe:d8:0c:76:b7:16:f0:c4:77:25:9a:
4d:51:74:9e:a5:7d:35:b5:e2:94:b2:5f:17:e1:de:8c:d6:41:
af:8f:61:33:b4:71:00:ce:c4:39:13:34:16:91:6c:da:31:6b:
e3:c8:9f:4a:68:1c:66:cf:1f:4b:01:3e:54:dd:ab:fb:79:ce:
d8:cb:50:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:35:42 2025 by rpki-client