Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ed429099-b678-39b5-8909-68617089d574.roa
File: ed429099-b678-39b5-8909-68617089d574.roa (raw, json)
Hash identifier: 3IRQcGF6vitBCJ8RU5kuBOgR2jZIh3uRHbmXdjJdTQg=
Subject key identifier: D3:CC:78:D7:07:70:59:AD:1C:88:EA:01:34:A8:6C:4A:3A:12:B5:35
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F432858481C9A8FD71F8A1E99A90B5F80
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ed429099-b678-39b5-8909-68617089d574.roa
Signing time: Fri 06 Dec 2024 02:00:39 +0000
ROA not before: Fri 06 Dec 2024 02:00:39 +0000
ROA not after: Thu 06 Mar 2025 02:00:39 +0000
asID: 16696
IP address blocks: 162.223.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1c:9a:8f:d7:1f:8a:1e:99:a9:0b:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Dec 6 02:00:39 2024 GMT
Not After : Mar 6 02:00:39 2025 GMT
Subject: CN=c722be2c-ce84-48cd-bd4f-ccad9644e4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b4:02:9b:bc:5f:b1:37:ab:f0:8c:da:0c:b4:
87:3f:41:a7:14:e2:c6:b7:cc:7b:43:24:13:e2:8f:
a9:38:63:90:c8:ba:81:e9:94:d4:72:da:d0:5f:c4:
9f:86:4c:35:f0:88:02:6a:d2:59:52:3a:1c:45:c6:
34:8f:8c:43:7a:2e:e7:4c:ab:a8:0a:b5:44:1e:81:
96:28:54:1f:8b:eb:61:f5:34:d0:a1:c2:08:8f:72:
ce:6a:d0:23:bc:c1:df:7d:34:dc:26:b3:cb:cd:ae:
2b:ed:7e:6b:cd:0e:58:48:77:87:79:1f:21:a9:b6:
0b:f7:77:ca:80:34:ba:83:8c:7d:83:01:c0:98:6e:
a8:c9:61:62:a5:65:74:8c:4f:b5:3f:d1:70:03:48:
cb:f5:88:10:59:25:e4:57:50:fc:66:fc:fb:b2:bd:
4c:56:9b:09:52:f4:2d:87:d1:1b:db:5b:32:f8:bd:
9e:64:d7:4d:4c:0b:5d:19:f0:5d:98:3b:01:98:05:
7b:f7:11:8d:7d:ca:4b:5c:58:16:75:10:72:2b:1e:
00:8a:48:f9:c7:b2:4c:3b:94:f5:ad:78:a0:70:05:
0e:11:32:70:52:08:45:78:e4:52:b1:14:54:40:d9:
9c:c3:14:29:60:24:fe:f1:10:51:ab:97:45:ed:b0:
74:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:78:D7:07:70:59:AD:1C:88:EA:01:34:A8:6C:4A:3A:12:B5:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ed429099-b678-39b5-8909-68617089d574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
162.223.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:29:32:ed:e2:d4:a1:46:2a:63:77:ed:12:24:fc:d1:3e:05:
ba:64:5d:44:23:13:e8:c7:74:82:92:fa:fb:f8:d9:de:d2:2c:
7d:ab:b1:f4:9e:a0:35:b9:49:45:5c:3c:c1:84:c2:28:22:39:
23:6b:27:59:43:03:33:2d:76:56:d7:3e:34:7a:83:3f:40:0f:
ad:d5:8f:db:f5:1e:04:85:ad:56:d6:37:f9:42:43:12:18:01:
10:bb:79:de:dd:d3:20:d9:2f:68:ee:c8:41:43:8e:13:10:74:
f8:77:1d:dc:f8:21:bb:93:ca:8d:a2:5f:2f:78:97:59:c5:11:
3b:32:7b:1d:18:2a:d0:83:dc:bc:c8:f3:a0:26:3f:07:bc:c2:
e4:e4:7c:ab:9a:66:43:9b:5f:05:00:73:45:42:c9:75:27:dc:
d6:92:3e:59:8d:08:44:13:c3:49:95:03:a3:84:3d:3c:fa:ff:
86:15:16:18:a3:b1:62:9c:92:bd:51:6c:4e:8f:7a:7e:30:d0:
38:09:07:15:9f:1f:33:fe:05:96:2e:66:60:be:3e:41:aa:20:
f3:08:70:76:b9:f8:60:a0:c6:4e:28:72:bd:49:03:36:34:b8:
42:6b:18:34:f1:25:6d:2e:e0:aa:76:5a:e0:76:a9:ef:57:aa:
50:d3:38:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:35:38 2025 by rpki-client