Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c57102d8-3cbd-3865-8113-05facb712676.roa
File: c57102d8-3cbd-3865-8113-05facb712676.roa (raw, json)
Hash identifier: FWNmu6YQgdxtNxwTxSy7ffzXOiJFA1Lxw2N6mDUh07Y=
Subject key identifier: 1E:1D:31:30:58:2B:A0:57:12:E5:43:13:F7:28:9F:8D:7E:D6:FD:91
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F43285848854B486EDE23D83143142380
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c57102d8-3cbd-3865-8113-05facb712676.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 7922
IP address blocks: 161.129.33.0/24 maxlen: 24
161.129.36.0/24 maxlen: 24
161.129.37.0/24 maxlen: 24
161.129.38.0/24 maxlen: 24
161.129.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:48:6e:de:23:d8:31:43:14:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=80670a70-a226-4b76-a84e-2c3d37c81b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:f5:a8:07:fd:75:14:27:2c:0a:11:30:88:
92:80:62:29:98:15:0d:d9:d1:af:f0:d6:2f:5c:bf:
c4:74:a6:1e:5f:69:39:e9:17:b0:18:2a:51:2a:f9:
55:77:7a:16:61:36:dc:bc:70:c3:d2:cd:93:3e:db:
0c:72:93:f2:d3:12:fd:eb:b9:ee:6c:47:90:c7:e5:
05:54:e9:4a:97:70:1b:03:51:6d:1f:3a:14:0a:66:
f3:50:7b:85:64:85:ce:b1:e5:98:e3:26:91:e6:14:
da:2d:51:aa:42:49:40:1a:5e:9c:e6:e4:58:1d:b5:
ad:6c:87:91:82:8d:e1:cb:4d:ed:fd:a9:fb:c6:66:
25:e7:d8:35:4d:c8:f8:76:9b:07:5f:d5:c9:49:41:
b9:a9:2c:76:9f:e6:39:2c:bd:c1:ba:99:36:c1:2c:
e5:ea:fa:94:fe:e4:38:8e:3c:1d:a9:ed:15:aa:16:
c1:15:a9:c4:35:ff:79:bc:de:87:7c:47:fe:e3:bc:
80:53:b8:bb:fb:1f:72:81:9d:80:c3:e5:6b:a0:74:
12:36:05:7a:c6:14:1b:b5:aa:d6:50:f0:ea:08:77:
95:95:eb:cf:6d:61:ac:01:e8:74:91:f4:df:82:bc:
9b:22:ab:e9:2f:95:7e:fc:a6:2c:47:df:8c:fd:e5:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1D:31:30:58:2B:A0:57:12:E5:43:13:F7:28:9F:8D:7E:D6:FD:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c57102d8-3cbd-3865-8113-05facb712676.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.33.0/24
161.129.36.0-161.129.38.255
161.129.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:a4:85:b0:14:9b:d3:05:6b:1f:14:bc:a8:db:cd:44:75:94:
af:40:21:92:07:a4:69:ba:b6:f6:c6:e0:f4:a7:39:8a:4a:fc:
e3:fb:ae:8f:94:b4:f0:bf:53:21:48:74:f1:fd:28:f2:75:7d:
77:a3:e1:c8:72:5c:b2:3d:cc:12:d0:de:27:37:5c:0e:32:1c:
85:69:15:44:31:7c:f8:71:a7:12:55:f6:1b:f7:2b:36:4f:b8:
12:0c:97:fb:a6:cb:f6:6f:17:75:7e:61:dc:d6:00:e7:00:c7:
14:b9:67:93:e5:3d:ec:65:e3:0f:2a:76:36:9c:76:c0:0c:5b:
35:67:6c:6b:03:48:aa:d0:3c:db:44:a3:74:33:f6:89:bb:cd:
20:dd:de:6c:62:a9:83:0f:a6:34:5c:cf:3e:31:b1:85:3b:3e:
bc:a4:8f:52:fb:60:cf:cb:b1:d1:8d:95:c2:14:d2:4e:d8:93:
22:26:41:e1:e0:75:af:76:0b:e0:a9:6e:25:3d:67:3b:a2:fd:
e2:51:fa:af:1e:b3:18:b2:59:3a:f9:00:d3:df:3b:95:ac:74:
bd:d6:70:a6:45:bd:b3:5e:6f:2c:4c:c3:4a:66:18:33:8f:44:
f0:31:43:76:e7:b2:e0:b8:48:90:c7:a6:1c:c0:bd:03:84:a0:
7f:63:18:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:54 2025 by rpki-client