Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/a53e08d2-ffb8-3135-baff-8ed9c3fd7b9a.roa
File: a53e08d2-ffb8-3135-baff-8ed9c3fd7b9a.roa (raw, json)
Hash identifier: Av9EOWcO+SmRR41B6zFyri9SFgmCZCa/BlZqBumH2tM=
Subject key identifier: 0A:F1:14:4E:D1:AA:68:7A:B3:7E:1C:66:AB:57:55:52:46:2F:5E:BE
Certificate issuer: /CN=c24d54f2-22ea-4242-9583-989286d76aac
Certificate serial: 010D0C9F43285841EC2D4E5BCD28AEE6AE65CA40
Authority key identifier: 6D:4B:D5:F6:3C:E8:2A:AF:29:38:C3:09:AF:7D:10:2D:FF:E8:E6:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/a53e08d2-ffb8-3135-baff-8ed9c3fd7b9a.roa
Signing time: Thu 18 May 2023 13:00:18 +0000
ROA not before: Thu 18 May 2023 13:00:18 +0000
ROA not after: Wed 16 Aug 2023 13:00:18 +0000
asID: 19382
IP address blocks: 162.221.147.0/24 maxlen: 32
162.221.144.0/22 maxlen: 32
162.221.146.0/24 maxlen: 32
162.221.144.0/24 maxlen: 32
162.221.145.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:41:ec:2d:4e:5b:cd:28:ae:e6:ae:65:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d54f2-22ea-4242-9583-989286d76aac
Validity
Not Before: May 18 13:00:18 2023 GMT
Not After : Aug 16 13:00:18 2023 GMT
Subject: CN=066c1f9d-e892-42e8-8233-fc33b0e290b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:dd:db:95:37:21:8c:69:c1:e8:16:b9:9b:
04:ca:38:3a:0a:49:06:77:f3:45:a4:9a:3d:7d:df:
63:16:1e:32:fb:0d:1e:3d:b4:e2:2c:0e:ee:24:d4:
29:b0:e1:95:83:cd:b6:fc:13:b3:d2:a2:ff:91:60:
c4:6a:82:e6:be:39:3e:86:34:a8:be:ae:48:f5:ce:
a4:03:db:3e:6c:0b:50:8b:df:62:50:46:0d:88:f9:
ce:85:2b:92:92:5e:08:7c:58:ad:e8:f5:84:ef:80:
cb:21:43:03:ec:c4:cd:f3:d4:17:60:d0:3b:7a:5f:
76:46:22:a3:69:82:ab:47:7b:cd:f1:18:de:9a:c2:
ce:f3:e2:e3:98:39:33:db:87:5f:52:33:ee:6e:f7:
36:cf:c7:ec:fd:27:a9:64:e7:61:57:83:84:81:76:
86:f0:51:17:ee:9f:8d:a3:7b:f6:90:fa:91:95:ec:
e3:cc:ca:82:ae:83:23:1f:63:02:3e:e0:49:fe:1b:
c1:77:c3:41:d3:9e:1e:2b:aa:96:a4:9e:a6:e6:ec:
fc:09:63:26:da:49:7a:a5:30:83:ed:ea:28:71:64:
5f:1f:0b:13:49:f1:69:25:db:1c:89:f5:43:86:e9:
fd:1a:24:a3:a9:a8:bf:d7:91:99:2d:d2:99:18:e3:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F1:14:4E:D1:AA:68:7A:B3:7E:1C:66:AB:57:55:52:46:2F:5E:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/a53e08d2-ffb8-3135-baff-8ed9c3fd7b9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac/c24d54f2-22ea-4242-9583-989286d76aac.crl
X509v3 Authority Key Identifier:
keyid:6D:4B:D5:F6:3C:E8:2A:AF:29:38:C3:09:AF:7D:10:2D:FF:E8:E6:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c24d54f2-22ea-4242-9583-989286d76aac.cer
sbgp-ipAddrBlock: critical
IPv4:
162.221.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:2c:76:f8:63:4a:7c:70:da:f7:ad:db:7a:53:be:91:d5:e4:
93:7c:1a:49:14:7a:44:46:b6:1b:b3:25:3f:3c:e1:84:90:8c:
87:fb:43:45:3b:6e:54:af:2a:07:ad:3d:21:37:d4:b8:b5:a9:
bc:8c:63:f5:c5:69:e5:f7:56:08:5f:f4:81:4f:35:91:d7:ef:
14:0c:63:0c:9c:49:a8:90:01:59:f3:6d:cb:fd:ac:f9:4f:b3:
1d:35:8f:d2:b2:89:db:c2:15:b4:0f:66:42:0e:c6:ee:67:4f:
11:13:72:8f:8f:67:32:ad:af:d3:c7:c1:72:14:ca:bc:a9:d8:
71:a0:70:14:50:f6:90:94:a6:a6:93:ec:4c:05:20:51:d0:80:
a4:c7:dc:d6:fb:f2:99:ee:56:47:15:19:1d:66:87:5a:b3:85:
38:cc:d7:7d:26:51:01:fd:db:88:40:1d:56:41:8c:13:2d:9e:
af:d3:dd:34:02:f5:7b:e7:df:f6:03:73:45:b3:e8:f5:39:0b:
62:45:46:eb:a4:bb:e5:ec:7e:88:b9:7a:24:e4:4a:07:c4:88:
c7:f4:2c:e3:d1:5c:01:8f:c1:c7:1e:84:dd:59:c0:96:f1:b1:
74:40:da:53:07:38:a1:43:60:79:7f:8d:85:2a:92:16:54:b1:
fa:ed:8d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:01:36 2025 by rpki-client