Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/9146a66e-ec27-3e61-9d55-68bad909f1c0.roa
File: 9146a66e-ec27-3e61-9d55-68bad909f1c0.roa (raw, json)
Hash identifier: 0aPHLBsIkNtAUcyzh7rMxQuhLDXOaVBqoXVQu1rGYAc=
Subject key identifier: 8B:84:A8:56:2A:86:96:04:F3:2C:4F:C3:49:64:73:37:8F:0B:DE:92
Certificate issuer: /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial: 010D0C9F432858486695B20554DF6F1F72E20800
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/9146a66e-ec27-3e61-9d55-68bad909f1c0.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 143.116.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b2:05:54:df:6f:1f:72:e2:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=b2a8cc78-8a43-47a0-97b2-df999dd8d5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:d1:ba:62:2c:67:b8:28:bd:d4:b1:72:a9:
7d:2c:1d:38:d0:86:bf:06:99:f0:7b:d8:1c:2d:94:
80:ce:52:f4:18:5c:1c:8a:2e:e3:9f:e8:40:3d:65:
20:1c:f7:8f:d3:90:26:68:be:1f:ab:65:f4:86:5d:
19:b6:45:95:2e:9a:c8:9b:f8:85:42:d9:e4:61:ba:
01:e6:21:91:04:1f:20:eb:90:25:cf:df:b3:e4:f5:
c2:1f:ab:54:23:f2:1c:1a:90:d5:f0:06:c5:f1:3c:
a3:e6:09:9d:6b:bd:a3:4a:dd:39:b5:84:f8:94:ca:
70:f3:53:a4:d5:95:8c:66:d3:60:70:9f:3b:55:ce:
73:a3:d8:4f:5e:b4:51:19:ab:84:51:7f:3f:6d:7b:
94:65:10:d2:d5:a2:d0:d6:4c:5a:46:1c:bb:75:4e:
9f:ce:2f:36:be:16:23:dc:89:15:c2:a1:d8:df:bf:
fa:60:ec:a7:e4:6c:c6:f1:b6:55:25:87:e7:d2:68:
2d:14:7d:c5:a1:53:9c:0b:05:c4:c3:ce:e5:ae:40:
86:2b:ae:31:09:ce:07:88:64:88:b0:b9:75:91:da:
91:b3:aa:b7:ca:a2:42:32:74:7f:ba:7e:95:94:a9:
14:0c:b4:53:29:47:eb:c6:98:8c:b7:33:7f:df:b7:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:84:A8:56:2A:86:96:04:F3:2C:4F:C3:49:64:73:37:8F:0B:DE:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/9146a66e-ec27-3e61-9d55-68bad909f1c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
X509v3 Authority Key Identifier:
keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
sbgp-ipAddrBlock: critical
IPv4:
143.116.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:b6:0b:43:d9:f9:b4:64:2c:97:81:63:a5:b3:16:67:39:9e:
3f:44:a9:fa:a6:29:2e:79:08:49:fb:78:62:f5:ac:e1:fb:75:
ac:07:e1:99:88:10:9d:46:12:82:dc:df:e7:bf:2f:c3:7d:be:
0c:9a:e5:47:24:24:ec:b5:d9:e4:9b:51:f9:bd:9c:7e:5c:d3:
04:d8:e6:18:72:55:fb:32:5c:f2:54:c2:c7:10:75:a1:52:4a:
e4:94:ad:da:eb:3b:c3:23:2e:ae:ce:22:10:00:5a:56:a1:39:
86:5a:fb:57:3a:62:53:db:77:6f:5f:15:6a:03:14:8e:f7:74:
60:6b:29:12:06:dc:69:1c:66:29:fd:dd:c5:9a:50:05:92:4e:
5c:cf:ae:8a:26:24:b0:72:9e:06:ea:1c:18:8c:3e:e3:62:b3:
b2:c7:36:08:54:02:f3:62:21:af:4e:1f:d3:af:4d:d4:1a:7b:
6b:fd:e1:c2:f7:6c:9a:39:e4:22:17:50:1c:3f:8c:79:af:be:
04:c4:8b:ce:a5:3c:87:65:92:eb:c2:b7:9c:84:9f:07:3c:ef:
c3:74:da:88:68:75:d7:28:d8:41:91:97:3d:c9:c5:e6:75:d4:
50:21:19:c4:c9:48:c6:fc:6e:56:90:dc:e4:ac:cc:b4:f8:cb:
36:9a:a0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:23:45 2025 by rpki-client