Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c18591bf-c1b7-49e4-865e-fa8879486176/8c26f356-4ae0-31e6-9b87-b59b016f2771.roa
File: 8c26f356-4ae0-31e6-9b87-b59b016f2771.roa (raw, json)
Hash identifier: wAKXHKRHE7ffMlz2WuVApPHeP3uBieCxgdIlpDNO+LM=
Subject key identifier: B5:B3:35:99:36:50:C6:A0:BD:DB:0A:F8:1D:52:39:59:D4:F9:F7:B4
Certificate issuer: /CN=c18591bf-c1b7-49e4-865e-fa8879486176
Certificate serial: 010D0C9F43285849121ACCDCC58EDE1F9233BE68
Authority key identifier: E2:5A:7A:08:1A:05:0F:EA:C3:93:D3:74:82:DB:36:20:49:96:BB:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c18591bf-c1b7-49e4-865e-fa8879486176.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c18591bf-c1b7-49e4-865e-fa8879486176/8c26f356-4ae0-31e6-9b87-b59b016f2771.roa
Signing time: Tue 04 Mar 2025 00:32:22 +0000
ROA not before: Tue 04 Mar 2025 00:32:22 +0000
ROA not after: Sun 01 Jun 2025 23:32:22 +0000
asID: 397324
IP address blocks: 158.51.4.0/22 maxlen: 24
163.123.148.0/22 maxlen: 24
192.173.14.0/23 maxlen: 24
2605:2540::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:1a:cc:dc:c5:8e:de:1f:92:33:be:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c18591bf-c1b7-49e4-865e-fa8879486176
Validity
Not Before: Mar 4 00:32:22 2025 GMT
Not After : Jun 1 23:32:22 2025 GMT
Subject: CN=14fac800-675a-4f85-bfd1-ec860d686a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fd:19:76:00:e1:e4:2c:5a:d7:64:53:2b:b0:
a5:22:5b:ed:34:81:64:41:2e:cd:56:57:74:74:df:
7c:fc:00:1b:6b:69:91:25:8e:bc:8d:0f:42:24:6a:
e0:b1:a7:88:b8:bf:7c:ad:0a:72:4f:a5:a1:06:25:
35:b6:0b:19:27:79:33:86:a7:e4:20:af:4f:02:b1:
d8:c6:d3:0c:b1:de:e0:f5:a6:fe:70:8a:cf:37:0a:
11:3a:95:ff:b6:2b:58:51:b1:e0:54:cd:c4:c6:47:
fd:b3:e0:85:19:3e:7a:d4:43:7c:b5:7b:e4:03:3d:
2b:40:0d:97:3a:1c:ef:5c:5d:98:71:42:c1:eb:a3:
62:ee:6c:0f:a4:0f:61:a5:e1:60:63:71:ae:f6:84:
44:f3:26:31:2e:78:02:9c:55:d8:fc:bc:d3:1a:8d:
c4:53:9e:b6:4c:ae:a4:9d:66:60:ad:76:3f:74:c6:
69:62:37:c7:d8:c3:73:69:43:71:4b:02:94:b8:77:
81:9f:66:b2:2e:78:e4:c6:00:53:72:8c:c7:8a:10:
e7:19:54:55:8a:c2:b8:5a:2b:9a:d5:22:8a:aa:24:
63:47:26:ed:ef:be:1b:e0:94:f7:66:57:41:6a:32:
31:f0:b3:aa:96:ad:72:e1:c9:63:ff:e2:7b:7b:6e:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B3:35:99:36:50:C6:A0:BD:DB:0A:F8:1D:52:39:59:D4:F9:F7:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c18591bf-c1b7-49e4-865e-fa8879486176/8c26f356-4ae0-31e6-9b87-b59b016f2771.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c18591bf-c1b7-49e4-865e-fa8879486176/c18591bf-c1b7-49e4-865e-fa8879486176.crl
X509v3 Authority Key Identifier:
keyid:E2:5A:7A:08:1A:05:0F:EA:C3:93:D3:74:82:DB:36:20:49:96:BB:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c18591bf-c1b7-49e4-865e-fa8879486176.cer
sbgp-ipAddrBlock: critical
IPv4:
158.51.4.0/22
163.123.148.0/22
192.173.14.0/23
IPv6:
2605:2540::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ae:1f:24:2d:87:81:b9:47:01:97:b0:14:64:7d:25:30:c0:
c1:5e:6e:92:d2:ed:cb:da:9a:f5:57:da:8c:2d:54:6f:df:60:
67:f1:89:52:12:88:99:52:91:98:68:bb:53:f4:dd:60:90:16:
e2:2b:37:29:0b:0d:a8:57:41:e8:c1:e8:45:e6:7f:17:33:27:
5f:f5:79:9d:68:45:c2:99:53:59:63:c8:5c:e7:fa:23:74:3d:
19:08:0d:d2:5e:c1:1e:92:2f:d0:04:0e:71:aa:a6:37:f2:93:
65:1a:86:af:55:52:f8:41:28:25:eb:27:52:56:e2:c5:bb:73:
88:d1:a9:db:f4:5f:72:d9:6e:1e:60:53:43:c4:20:e3:7d:e4:
3f:d3:ed:2b:9c:ea:b8:eb:bc:ff:34:cc:f6:a6:25:1b:32:0d:
4f:82:2f:4c:3a:91:9d:9b:b2:60:e2:30:ac:08:b9:b5:2e:dc:
8c:52:f6:62:90:e3:73:b0:23:67:70:82:3c:f5:85:d0:74:7a:
3b:11:54:5b:40:76:f3:a0:1e:f1:bd:e6:d2:1b:95:6e:c7:c4:
5b:e7:f4:37:bb:77:d9:96:23:08:c6:c9:f4:49:d3:dd:8f:30:
2c:d1:db:5f:dd:7f:12:38:6b:4d:54:54:c4:7e:b0:0f:2d:a7:
47:29:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:09:29 2025 by rpki-client