Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/c460f802-ce9b-3229-a6c9-9a2705631c38.roa
File: c460f802-ce9b-3229-a6c9-9a2705631c38.roa (raw, json)
Hash identifier: yKjtDbNiivUAPwFq0mXW3lQLCe1wfdM0Wx103io4gs8=
Subject key identifier: EE:8C:83:C9:26:25:4C:B5:F4:6D:ED:BA:EF:25:A3:44:65:D9:12:AD
Certificate issuer: /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial: 010D0C9F432858486695B83FA6C9135A81608A80
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/c460f802-ce9b-3229-a6c9-9a2705631c38.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 23154
IP address blocks: 143.116.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b8:3f:a6:c9:13:5a:81:60:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=14701e8d-074f-4ffd-a11e-38ad1e130f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:b3:8a:87:b7:45:92:41:bb:d0:9a:dd:6b:
4f:a7:ff:4b:b7:47:1f:bc:a5:3e:4e:72:e3:2e:4d:
82:4a:d5:d9:24:bd:a6:29:62:a2:d3:ca:ff:08:2f:
51:0c:8e:fb:ab:26:1c:0a:fe:3c:d1:d0:a9:d4:2a:
e6:f6:99:51:73:73:c7:26:db:78:fe:f2:e5:a1:35:
fc:59:29:0e:6f:43:af:c1:1c:20:43:88:ab:8d:39:
77:55:b3:89:95:2a:da:f0:0f:69:08:2b:a9:84:82:
9d:c8:b7:b7:ae:7e:27:d1:fb:ed:7f:8d:1a:f2:de:
d6:df:b7:36:6f:d0:f0:69:34:76:b8:98:e0:11:a3:
71:39:be:14:d0:b3:89:dd:53:4e:b5:07:43:f1:b1:
d9:73:1d:0c:5b:9b:f5:75:ac:e1:3e:b0:96:d0:a9:
64:6e:f3:78:cf:64:9b:a3:94:83:de:57:2d:37:8a:
61:fa:53:0a:ed:13:dd:d1:29:5f:bb:1f:fc:eb:01:
66:06:fd:6b:f7:c5:5f:aa:ce:a2:f5:16:06:4c:eb:
59:89:da:5a:77:c6:3a:cc:f3:ec:18:39:87:2c:fa:
6c:b0:7f:c2:80:67:f9:29:ba:6e:c3:24:e7:22:c7:
57:16:90:d9:29:0f:60:03:42:3b:df:67:44:3c:16:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8C:83:C9:26:25:4C:B5:F4:6D:ED:BA:EF:25:A3:44:65:D9:12:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/c460f802-ce9b-3229-a6c9-9a2705631c38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
X509v3 Authority Key Identifier:
keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
sbgp-ipAddrBlock: critical
IPv4:
143.116.94.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:d9:3f:c6:a2:c0:28:f1:d7:76:5e:cb:9c:19:14:b1:b2:8e:
ee:45:f0:4f:b3:20:f6:02:00:17:23:87:b3:b3:f3:cb:31:ce:
f3:14:30:52:b7:b0:c0:c5:41:6d:44:7e:79:f6:f1:18:00:22:
c6:c5:7a:b0:94:b1:5e:58:fe:16:d5:34:50:cb:be:d5:fa:c0:
12:15:da:d3:10:e3:bf:c1:9d:c9:62:07:45:c8:74:0c:4a:a5:
e7:16:10:31:68:89:b4:3e:ce:ce:4d:38:cf:71:8f:2a:63:86:
6a:51:76:57:61:95:08:13:fc:07:b0:b0:e5:aa:71:f5:77:42:
7f:50:96:8a:06:bc:53:84:b6:e5:da:f4:be:f3:d2:17:0a:9a:
79:de:d1:32:7d:67:1c:c7:71:92:55:77:e3:eb:db:65:52:a7:
f5:c9:6a:e1:b0:a3:59:b5:6b:16:0d:20:93:3d:86:89:e9:20:
35:b0:ab:77:31:f1:8e:47:a0:4d:fe:ae:b3:25:2b:88:33:aa:
1d:27:25:41:ff:37:5d:8b:b4:9e:aa:05:8e:22:35:a3:d4:1d:
16:87:cd:68:b0:44:04:21:e4:f7:aa:a0:9f:b2:8d:b4:14:f1:
42:e2:e1:22:98:33:3b:2d:e2:35:b6:23:ac:1a:cd:5a:dc:0a:
8d:8f:48:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:22:44 2025 by rpki-client