Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/305b85b8-38e8-3366-afff-21661c5eaa16.roa
File: 305b85b8-38e8-3366-afff-21661c5eaa16.roa (raw, json)
Hash identifier: mXyLSb/czDdPMIE40iP/mxrPMNo6Me0COQt1hPT/+D8=
Subject key identifier: EF:54:1C:38:03:C5:79:F0:0E:5C:12:51:26:50:47:C9:7C:F7:85:48
Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial: 010D0C9F43285848037B6A95291C9424FF6E7B40
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/305b85b8-38e8-3366-afff-21661c5eaa16.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 192.161.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:6a:95:29:1c:94:24:ff:6e:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=7d5b0acf-1036-473f-af41-9dcc7b1c4a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:de:ac:1e:a9:9d:35:4e:9d:9f:c9:59:3c:af:
da:83:76:78:43:54:91:89:bc:63:37:46:3d:f8:65:
d5:86:23:fd:60:57:8e:01:89:19:9d:11:9d:b1:6d:
8f:be:fa:b1:93:8d:e6:78:af:21:50:86:f7:d1:dc:
98:ed:b6:6f:c0:99:16:ae:dd:56:cb:99:b9:3e:3a:
67:57:bb:49:14:35:5c:5c:86:a9:64:c1:64:16:b9:
9c:2e:e2:a0:f6:db:ef:93:6a:01:1c:de:3f:c0:5b:
b5:ac:e7:d5:c6:92:b0:58:76:85:ba:5d:76:4d:90:
a4:e3:22:3f:3d:0d:07:90:23:a6:c7:05:21:5c:b5:
01:ca:c0:ae:3a:af:e2:c5:ec:bc:cb:5e:de:f7:8d:
c1:11:80:70:30:5c:67:63:2e:f9:7e:8e:d9:e8:d6:
39:1c:c7:ef:05:6e:f4:e8:67:14:2a:28:02:06:a2:
50:80:5c:8c:b7:a9:c8:df:4f:d4:ed:b8:b7:16:35:
49:43:fc:1d:b8:d1:d1:23:85:a4:9a:c1:d6:c6:20:
35:d5:13:0b:12:bf:18:d0:69:fa:f5:72:2c:51:d6:
cc:05:cd:83:cd:36:89:e1:aa:00:7c:5e:2c:3a:35:
d1:58:6f:cf:3f:10:c6:bd:90:44:6e:ee:ec:ec:3d:
6c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:54:1C:38:03:C5:79:F0:0E:5C:12:51:26:50:47:C9:7C:F7:85:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/305b85b8-38e8-3366-afff-21661c5eaa16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
X509v3 Authority Key Identifier:
keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
sbgp-ipAddrBlock: critical
IPv4:
192.161.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:7d:ab:08:7c:a5:a2:8a:51:83:76:44:c4:61:75:0e:da:34:
33:6f:43:fa:24:72:f6:d7:e6:3a:dd:2c:68:e9:38:7f:b5:73:
6d:b8:21:05:83:e7:52:9d:d2:78:4f:79:f5:14:dc:22:45:75:
21:a1:6f:e5:98:cc:7f:11:bd:6b:43:b3:f9:d6:ba:b0:c4:af:
e8:54:ac:50:ed:2c:bc:23:5f:b0:e3:ee:9d:95:2b:9c:ca:fb:
8e:40:c7:1f:0f:e1:63:d3:03:f3:29:c6:73:4c:c2:58:5a:68:
a6:24:3a:73:8c:75:0b:9e:73:ca:96:02:11:ad:4b:a8:a5:ef:
ae:e6:d8:13:c0:c1:62:8c:df:00:e4:3a:38:29:cd:96:31:1e:
4a:82:d8:4d:f9:7d:fd:35:f6:f0:70:cf:79:ec:e3:f2:96:65:
9d:42:b6:62:d6:16:07:e0:d4:8e:ec:ab:5b:08:b3:e0:78:bb:
bf:49:4d:27:d2:a5:c6:bc:1c:cf:19:db:5a:b5:73:1f:ed:0f:
4d:11:18:2a:e4:f7:04:1e:b3:f1:13:cb:d5:fe:23:4d:45:eb:
77:96:46:df:91:95:3d:de:a2:26:79:26:60:49:43:72:25:ed:
92:5b:5f:cb:68:9e:02:6f:9c:3a:3c:35:b6:84:43:b3:2e:a4:
24:b0:0d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:42 2025 by rpki-client