Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/e6c21d39-e2ce-3d69-bab5-f56c14a230a0.roa
File: e6c21d39-e2ce-3d69-bab5-f56c14a230a0.roa (raw, json)
Hash identifier: D76NSEfmndPp331sXqorbw3k8UsRYuWHtrGooNSd66A=
Subject key identifier: 5A:09:54:38:4E:A4:D5:B5:61:06:63:E8:DC:FC:B1:59:E9:F6:7B:57
Certificate issuer: /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial: 010D0C9F43285847FF4A3DB6D72D3AA141949600
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/e6c21d39-e2ce-3d69-bab5-f56c14a230a0.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 19551
IP address blocks: 160.129.0.0/22 maxlen: 22
160.129.4.0/22 maxlen: 22
160.129.8.0/22 maxlen: 22
160.129.12.0/22 maxlen: 22
160.129.16.0/22 maxlen: 22
160.129.20.0/22 maxlen: 22
160.129.24.0/22 maxlen: 22
160.129.28.0/22 maxlen: 22
160.129.32.0/22 maxlen: 22
160.129.36.0/22 maxlen: 22
160.129.40.0/22 maxlen: 22
160.129.44.0/22 maxlen: 22
160.129.48.0/22 maxlen: 22
160.129.52.0/22 maxlen: 22
160.129.56.0/22 maxlen: 22
160.129.60.0/22 maxlen: 22
160.129.64.0/22 maxlen: 22
160.129.68.0/22 maxlen: 22
160.129.72.0/22 maxlen: 22
160.129.76.0/22 maxlen: 22
160.129.80.0/22 maxlen: 22
160.129.84.0/22 maxlen: 22
160.129.88.0/22 maxlen: 22
160.129.92.0/22 maxlen: 22
160.129.96.0/22 maxlen: 22
160.129.100.0/22 maxlen: 22
160.129.104.0/22 maxlen: 22
160.129.108.0/22 maxlen: 22
160.129.112.0/22 maxlen: 22
160.129.116.0/22 maxlen: 22
160.129.120.0/22 maxlen: 22
160.129.124.0/22 maxlen: 22
160.129.128.0/22 maxlen: 22
160.129.132.0/22 maxlen: 22
160.129.136.0/22 maxlen: 22
160.129.140.0/22 maxlen: 22
160.129.144.0/22 maxlen: 22
160.129.148.0/22 maxlen: 22
160.129.152.0/22 maxlen: 22
160.129.156.0/22 maxlen: 22
160.129.160.0/22 maxlen: 22
160.129.164.0/22 maxlen: 22
160.129.168.0/22 maxlen: 22
160.129.172.0/22 maxlen: 22
160.129.176.0/22 maxlen: 22
160.129.180.0/22 maxlen: 22
160.129.184.0/22 maxlen: 22
160.129.188.0/22 maxlen: 22
160.129.192.0/22 maxlen: 22
160.129.196.0/22 maxlen: 22
160.129.200.0/22 maxlen: 22
160.129.204.0/22 maxlen: 22
160.129.208.0/22 maxlen: 22
160.129.212.0/22 maxlen: 22
160.129.216.0/22 maxlen: 22
160.129.220.0/22 maxlen: 22
160.129.224.0/22 maxlen: 22
160.129.228.0/22 maxlen: 22
160.129.232.0/22 maxlen: 22
160.129.236.0/22 maxlen: 22
160.129.240.0/22 maxlen: 22
160.129.244.0/22 maxlen: 22
160.129.248.0/22 maxlen: 22
160.129.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:3d:b6:d7:2d:3a:a1:41:94:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=5d961927-4762-47ce-8996-b5aecc807923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:42:bb:e9:68:e4:e0:ad:07:a2:52:51:3f:ae:
61:87:ee:fa:d5:58:db:61:7e:f3:84:69:a4:af:dd:
f8:6d:ae:db:5f:dc:dd:66:90:72:f2:8b:07:df:2d:
c1:22:51:4e:d9:c0:4d:04:c3:33:d5:69:6c:48:6f:
9a:81:bb:37:8a:fa:31:ab:ce:8a:41:1b:fa:8a:3f:
de:71:0b:08:ea:18:74:c0:62:e6:63:59:27:c0:f5:
28:c7:56:83:9c:c0:d7:b7:3c:0e:0a:19:3f:ba:68:
1e:3b:fa:91:10:a2:8a:94:b5:c9:e0:7c:10:87:9c:
b0:4e:e7:eb:5f:64:f8:da:0b:e0:ad:48:b1:73:07:
32:96:d5:39:69:ee:92:bf:fa:f3:b9:19:72:43:b1:
53:54:a5:6c:91:51:b6:78:f1:1f:3b:82:40:61:77:
94:85:d3:8b:98:76:3d:fd:a5:be:c9:3b:70:d6:da:
31:04:9b:6b:e2:d8:9b:c8:d0:7d:8f:2d:2a:30:67:
3d:da:93:b8:84:9f:c9:b4:d6:b5:f1:9d:6a:06:10:
7f:02:ae:7b:5d:ca:b5:11:1a:94:74:c0:41:70:fa:
eb:6f:e0:03:70:6d:c7:36:8a:d3:af:9a:12:9d:e3:
17:6e:88:74:0a:3f:c4:20:c1:ed:e9:3d:c7:ef:80:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:09:54:38:4E:A4:D5:B5:61:06:63:E8:DC:FC:B1:59:E9:F6:7B:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/e6c21d39-e2ce-3d69-bab5-f56c14a230a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
X509v3 Authority Key Identifier:
keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
sbgp-ipAddrBlock: critical
IPv4:
160.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:66:81:a0:2a:91:d2:96:1b:08:eb:6b:2e:bb:37:d9:2c:f9:
65:0a:38:27:fc:95:f9:c1:8e:45:da:2a:46:3d:a1:33:a2:f5:
e0:2f:a5:48:cd:cd:a8:2d:f9:8b:dd:d7:9c:ac:81:17:6b:fc:
e7:fc:24:fd:4f:f8:cb:9f:22:ba:01:fa:de:1a:c2:3a:84:8b:
f7:f3:7a:08:0b:8e:81:6d:68:6d:58:b8:9f:3a:c0:99:18:41:
f4:b8:92:cd:e2:59:a8:af:53:46:fd:74:6b:f2:1b:59:f6:7e:
b1:d4:ad:e2:c7:01:f7:3a:14:45:56:d6:c8:02:35:8f:ed:b5:
19:ac:0e:22:6e:b0:a9:ab:6c:e5:6f:fa:6d:c7:8a:ba:26:21:
f6:44:e6:b2:93:07:73:38:dd:33:9b:8e:4b:28:97:63:ce:78:
ea:2c:d3:a7:b1:26:27:2d:e2:7c:06:ae:11:44:13:fb:76:36:
a2:b7:6c:8d:b8:0c:95:a4:39:69:ee:b2:5d:6c:07:e6:4b:88:
ef:e4:81:65:ce:73:49:16:65:03:97:60:e6:df:a5:a0:7a:1b:
98:4d:33:e0:70:2a:c1:19:db:81:61:86:5b:82:42:8e:51:ad:
e6:0f:17:fc:f7:3c:77:70:c6:ab:36:4c:ad:75:c3:49:17:77:
79:92:9f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:24:56 2025 by rpki-client