Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/f851c2c2-de47-3e35-85ca-156d6c109859.roa
File: f851c2c2-de47-3e35-85ca-156d6c109859.roa (raw, json)
Hash identifier: GdcrEyl+lBAAPkGH6LLnvaPpQJ2gTUbWtbBqkYS1cxU=
Subject key identifier: B3:8B:EA:3C:66:04:B2:99:1A:3B:C3:BF:A8:5B:B5:48:36:4F:B0:98
Certificate issuer: /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Certificate serial: 010D0C9F4328584858A056A54FC4201153898380
Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/f851c2c2-de47-3e35-85ca-156d6c109859.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 26523
IP address blocks: 162.252.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:56:a5:4f:c4:20:11:53:89:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=53af9508-261b-4eee-aaf0-60aa0a0eeb78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:41:40:46:50:a0:f7:2f:b0:ae:47:24:22:97:
33:69:3b:66:22:28:72:f3:e8:86:48:c2:34:ca:67:
3e:83:93:63:49:e7:05:8b:e7:2e:13:08:04:7a:63:
c0:20:d6:77:70:fe:4f:0f:d0:4a:56:fa:f7:9a:fd:
97:b8:bf:ae:34:35:14:5e:8d:7e:28:54:59:9f:23:
43:a4:29:23:6b:70:9d:3c:79:a6:f6:c5:49:f9:b2:
49:04:da:68:b3:99:32:f7:5b:c5:f2:af:50:88:f0:
d8:e7:ee:23:d0:62:9d:89:34:b1:3e:e1:a3:29:8e:
4d:50:27:9d:01:0e:63:9c:7f:2f:c2:4a:49:ec:08:
52:4f:74:d4:13:5b:b1:a6:8a:38:9a:5d:ce:46:0f:
c5:70:4a:87:41:97:02:09:e1:7d:d9:1a:f9:66:f2:
77:41:e8:f0:eb:5f:80:0d:55:08:8b:cb:3e:23:d0:
e1:13:55:42:29:02:12:d2:a8:af:d2:ef:73:b7:de:
c7:db:11:49:54:bd:58:57:70:7f:0b:0e:0b:ea:38:
0e:b7:e9:8d:ba:35:d2:d3:35:d8:34:f2:02:c8:1c:
63:82:56:d3:f6:e9:0b:98:24:88:39:4c:f2:0e:22:
56:1a:93:31:e6:be:b9:aa:4e:02:95:d3:e9:a8:a3:
dc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8B:EA:3C:66:04:B2:99:1A:3B:C3:BF:A8:5B:B5:48:36:4F:B0:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/f851c2c2-de47-3e35-85ca-156d6c109859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
X509v3 Authority Key Identifier:
keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
sbgp-ipAddrBlock: critical
IPv4:
162.252.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:8a:f3:9d:2c:af:96:43:91:c9:49:49:3f:0a:e9:b7:64:29:
22:f8:60:97:ee:5e:29:e2:24:5e:5b:17:48:4f:e4:2b:1c:5c:
5d:8e:c9:4d:d4:0f:cc:40:47:be:25:80:ad:d2:b7:b4:ce:c3:
d0:18:50:6e:0e:ac:98:fb:31:a3:95:36:d3:05:b2:33:15:ec:
66:d3:04:76:f7:e2:55:8d:a1:01:02:8f:2d:74:dc:a6:27:53:
9c:5d:b1:22:d7:96:72:07:31:19:cd:29:56:41:5e:52:1a:86:
24:2c:6f:55:f0:99:30:69:cf:2a:55:f6:58:c3:ab:36:cd:13:
a4:bd:ca:a4:fc:83:74:7b:45:f4:85:52:cb:7c:45:91:86:f0:
29:fc:92:29:5a:04:56:23:d9:ea:36:af:0b:05:e8:2b:23:10:
e1:df:a1:be:b5:07:d5:6e:59:95:2b:c3:94:04:af:8c:c8:74:
e0:5c:cf:1f:1e:0e:14:7d:e7:b7:f1:6e:d4:6a:5a:32:41:3b:
cc:6b:d0:db:4e:9d:9b:2c:1f:d2:f9:8f:12:0b:6d:0f:b7:0f:
84:90:ea:34:39:9d:42:cf:ce:ea:5f:2f:6d:b5:5d:92:a9:b2:
73:b5:3a:7b:1f:e2:35:07:6f:1d:43:33:ae:8d:8c:4c:fe:e8:
86:2b:b7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:21:17 2025 by rpki-client