Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/161b9751-0ee4-37c8-ab57-7679b16d2c07.roa
File: 161b9751-0ee4-37c8-ab57-7679b16d2c07.roa (raw, json)
Hash identifier: vrL5aa5PJa3xc2qNf8AAwSspYoK8Ez3fbXyqYToAa1I=
Subject key identifier: 30:F7:90:D6:9A:93:05:EF:38:E4:A2:84:16:9B:81:D6:56:1B:DA:B1
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F43285847F154F00107783E4793E3BC00
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/161b9751-0ee4-37c8-ab57-7679b16d2c07.roa
Signing time: Wed 20 Nov 2024 14:00:52 +0000
ROA not before: Wed 20 Nov 2024 14:00:52 +0000
ROA not after: Tue 18 Feb 2025 14:00:52 +0000
asID: 931
IP address blocks: 161.129.32.0/24 maxlen: 24
161.129.33.0/24 maxlen: 24
161.129.36.0/24 maxlen: 24
161.129.37.0/24 maxlen: 24
161.129.38.0/24 maxlen: 24
161.129.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f1:54:f0:01:07:78:3e:47:93:e3:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Nov 20 14:00:52 2024 GMT
Not After : Feb 18 14:00:52 2025 GMT
Subject: CN=1251c281-7731-4271-926b-c5a12857e2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0b:ad:39:e9:8c:ff:1c:a1:f8:6f:95:d5:58:
03:9c:a1:6d:49:49:ab:bf:68:bd:fa:58:18:e4:f5:
2d:74:77:34:93:e8:3a:45:52:06:b2:58:8c:76:59:
47:a6:02:28:30:75:32:a3:13:ec:13:28:f3:29:95:
9d:62:ca:0a:e7:54:1d:e3:6c:b3:83:f8:ec:f2:96:
5a:22:d5:40:a4:c0:3b:86:b9:88:02:27:5b:18:0a:
8c:8e:a2:e7:ca:2a:52:39:ea:ea:eb:5e:de:d5:29:
ff:a4:7a:24:6a:96:1a:08:fe:de:27:24:69:cb:c9:
1f:c9:18:34:c5:43:8c:38:c4:18:7d:67:88:3a:60:
18:f0:13:ed:84:ac:1d:2a:35:ef:61:a3:46:a6:8b:
1c:0c:b4:d8:ac:6d:1b:b7:a9:7b:ba:4f:67:27:53:
86:bd:87:05:06:4c:31:bb:16:73:ed:65:b0:b5:2b:
12:75:79:a9:2d:7c:5b:96:e1:a1:da:66:a5:63:da:
6c:2f:88:4b:e8:42:94:2a:7a:27:a4:09:3f:ee:ed:
a0:33:af:b9:31:1f:c1:1c:9e:3e:21:ce:5a:d2:58:
a0:64:dc:98:d8:68:92:73:50:51:7e:51:63:15:2e:
25:7f:c0:1d:4d:76:ed:e3:52:18:7f:7d:6b:82:c4:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F7:90:D6:9A:93:05:EF:38:E4:A2:84:16:9B:81:D6:56:1B:DA:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/161b9751-0ee4-37c8-ab57-7679b16d2c07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.32.0/23
161.129.36.0-161.129.38.255
161.129.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a0:ec:67:27:03:a7:77:8c:4e:4c:d0:66:12:ed:ad:3d:fc:
51:8d:a7:49:59:f3:fb:3d:28:06:2c:ca:78:2a:a6:8d:a4:d1:
6c:76:53:f2:3b:b2:6a:2a:db:4b:e8:84:92:67:77:c9:1a:fb:
9e:d1:fa:9e:17:34:81:3a:ef:80:aa:ac:de:0b:5d:98:53:ba:
3a:df:4d:6d:92:6e:cd:93:43:47:1f:21:6a:ee:1a:6d:7c:5b:
5e:ca:de:ea:f0:5c:16:3b:ea:fa:2f:aa:c5:ce:6f:7e:00:30:
c7:e7:87:25:69:4c:a0:f2:a9:ef:ca:fc:a0:2a:5a:3e:b6:a4:
6c:20:b4:40:0a:58:74:43:ad:79:9a:49:97:33:e9:6d:9d:f3:
6d:13:28:38:f7:c7:e8:08:c5:c2:2b:76:57:aa:a6:b8:0d:9d:
b1:8a:a5:5c:72:cc:cd:08:9c:7f:c2:7f:49:a9:eb:a7:2f:f6:
bd:aa:15:d4:57:45:70:7f:8b:90:31:16:18:12:ca:0f:bf:1e:
50:cc:c6:05:e1:89:2f:fb:54:f0:5e:a4:34:a8:cb:c8:68:fd:
89:99:5e:a0:f0:66:77:67:92:6d:bb:2b:1c:95:72:eb:d2:96:
0c:21:f2:a7:6a:16:57:63:1e:e3:1e:7b:3b:ec:f9:e9:cc:cb:
ab:35:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:06:04 2025 by rpki-client