Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/07697771-7db7-302a-a9e4-1ff02fdc45cd.roa
File: 07697771-7db7-302a-a9e4-1ff02fdc45cd.roa (raw, json)
Hash identifier: mRI3v0b4B/ewNo39PZD1ALMdhzYHJiHhQHna5sWrH9k=
Subject key identifier: C0:39:06:97:E9:F4:B4:F2:AE:33:C3:96:75:F2:F0:C0:0C:43:6F:50
Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial: 010D0C9F43285848222FD8B021D03AB79A24D100
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/07697771-7db7-302a-a9e4-1ff02fdc45cd.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 192.161.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:d8:b0:21:d0:3a:b7:9a:24:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=d9b0b286-d35c-490f-b3d5-e3b942d7c2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:8e:4c:bc:a1:8e:e7:42:3b:20:f3:f1:b1:
f0:15:28:f3:7e:9e:8a:0a:e1:21:28:4c:76:0d:d9:
64:e5:29:95:eb:c6:36:f8:c8:ec:b9:13:01:e7:e4:
a0:79:53:3c:ac:61:5d:d1:1d:cb:6e:1c:ae:71:da:
74:7c:f5:44:27:d2:b3:fd:88:f4:95:4b:e1:ba:50:
55:aa:7b:48:cb:ca:41:b1:7a:ad:07:27:60:d8:76:
2b:e0:ae:60:68:4e:14:d6:82:27:9d:74:b7:1b:03:
a6:db:c5:33:5b:bf:85:20:3a:96:d2:88:2a:f4:51:
20:75:66:57:c2:00:89:2c:0d:2d:37:3a:ee:94:76:
29:b9:6e:cd:61:50:56:4e:c9:0d:61:54:c4:d3:19:
ba:c5:ae:e4:94:6e:3f:1d:07:78:b4:be:52:b1:72:
e8:fc:71:11:0f:da:c1:fc:c1:82:b7:10:20:b4:d2:
71:65:ee:a8:7e:4b:97:80:2c:8f:2c:22:65:7c:97:
7b:ef:52:74:73:77:8c:0f:59:73:23:b2:3c:5e:cc:
97:9c:a4:6f:6a:71:14:ac:1c:49:42:7e:ae:41:be:
51:c4:cd:0f:8e:fa:23:9c:d7:9f:7c:3c:39:3c:c0:
16:8c:76:91:73:80:75:76:cb:55:90:cc:93:4b:0a:
5f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:39:06:97:E9:F4:B4:F2:AE:33:C3:96:75:F2:F0:C0:0C:43:6F:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/07697771-7db7-302a-a9e4-1ff02fdc45cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
X509v3 Authority Key Identifier:
keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
sbgp-ipAddrBlock: critical
IPv4:
192.161.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:bf:2d:c2:30:9b:40:d6:e0:20:e7:fc:0e:45:5d:68:40:78:
aa:4d:cc:2e:c6:3e:e7:3a:1b:3f:dc:fc:e1:80:52:61:8f:6f:
93:42:62:2f:b7:84:21:06:b9:24:9b:38:9d:28:ee:dd:bc:41:
55:fa:3b:a1:5c:f7:62:37:23:6d:98:1c:68:3f:28:c9:ea:14:
c0:b9:0c:fb:7c:f0:11:2a:48:38:aa:09:63:53:7a:2c:c3:d1:
53:80:90:f8:62:66:ac:e0:33:d2:8c:4e:d5:db:ed:aa:c8:75:
17:47:40:0a:72:24:67:dc:29:0b:b1:65:b0:07:15:a6:48:b3:
84:ab:fb:32:69:7b:a2:a2:63:d6:c6:08:d8:80:65:00:13:37:
d5:ca:2b:a2:5e:57:f4:58:0b:68:a5:d4:5e:33:07:9f:61:38:
f9:bc:83:c3:e6:90:8c:16:89:ee:a8:b1:61:67:58:d5:67:6b:
80:2c:79:f0:f8:93:6a:37:6e:a9:38:40:c0:38:fa:79:93:9a:
5d:5e:aa:61:1c:4c:24:4b:94:18:d2:00:57:e4:50:a5:ce:c3:
3e:7d:4b:f4:d8:34:a3:66:3e:de:7e:73:ea:41:b0:bd:7c:99:
20:0e:b6:b0:cf:6b:6b:3f:2c:e9:c5:26:25:a4:09:50:a3:eb:
b0:bc:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:42 2025 by rpki-client