Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa
File: 12211a98-a467-395a-802f-13b6b78c07d9.roa (raw, json)
Hash identifier: W6+ILnVUkmdTaMDQGFLoU+iEIcTdRh0kQuuft9yaOOA=
Subject key identifier: 70:3D:61:4A:AA:B3:8A:D5:BE:D9:B6:8B:56:47:16:5B:88:99:AC:24
Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial: 010D0C9F432858482EC00791F2508FABB133D8C0
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 8075
IP address blocks: 161.221.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:07:91:f2:50:8f:ab:b1:33:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=cb5088a2-6e99-4b74-855d-af00d7313388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:69:d6:ec:63:bb:50:af:29:4e:7d:11:90:
dc:47:15:55:8c:f5:31:db:04:68:9a:15:e3:e9:b4:
6d:e5:58:49:34:01:9d:f3:97:41:da:d1:20:7a:21:
48:37:b7:00:69:c7:4f:d9:35:26:f7:64:62:b7:10:
86:6a:40:66:a5:ca:26:e3:7a:f7:27:fb:d5:6f:0e:
ef:0e:f8:79:b3:06:23:4b:fe:ad:1f:db:86:5f:7e:
35:c1:12:5f:95:56:eb:b0:ba:b8:c6:a7:2d:79:8d:
80:3a:e4:1f:54:2f:f0:42:b9:7c:e9:3b:8c:c3:27:
07:91:56:37:e5:f7:4d:8f:23:4f:9a:ec:f3:ee:b7:
39:b8:fb:66:b2:45:93:da:53:c2:00:bb:49:30:37:
58:6c:7d:b0:b5:ba:4d:38:68:aa:b8:a5:c3:b7:ea:
e4:9b:a7:52:6a:8b:dc:18:1a:c3:ba:3f:78:bb:dc:
18:11:67:ff:79:6d:7a:a1:f2:3c:70:cd:b1:6a:98:
ab:90:a3:c9:1d:d1:e6:04:84:74:5f:8a:b8:09:7d:
de:65:2e:28:0a:5a:d1:87:1d:c6:b9:50:a3:1b:99:
4c:c0:72:6b:4c:53:79:d0:ba:f3:00:b6:fb:ba:ce:
ed:2f:d2:61:bd:21:ef:38:97:9e:72:66:23:90:94:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:3D:61:4A:AA:B3:8A:D5:BE:D9:B6:8B:56:47:16:5B:88:99:AC:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/12211a98-a467-395a-802f-13b6b78c07d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
X509v3 Authority Key Identifier:
keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
sbgp-ipAddrBlock: critical
IPv4:
161.221.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:5e:48:3b:a4:86:49:66:fc:ee:6d:36:ba:35:fd:6f:8b:f9:
e9:0a:94:a2:ba:db:ce:1b:64:03:f4:2e:41:52:df:dc:8e:a4:
a0:72:32:c5:b7:cc:ee:ab:16:1d:c9:ce:21:69:d5:0f:a7:35:
40:d4:11:2b:1d:60:78:14:cd:68:69:13:68:76:dc:2a:31:22:
84:ef:24:b6:f8:d6:be:09:18:1d:95:da:64:7b:71:5a:53:c1:
96:6e:b9:1a:75:44:51:33:6f:29:4f:a3:b1:ce:b0:71:72:e4:
15:a9:5f:ad:b6:51:7d:13:db:87:f5:d0:39:a5:1f:dd:24:77:
49:6f:1c:2a:7b:0a:fd:c6:74:55:a3:2d:5c:66:d6:3a:ff:e2:
89:0a:b9:40:80:62:4c:f0:25:44:01:8d:d0:c8:c2:cf:89:be:
dc:49:22:2c:40:e2:20:95:69:ad:35:0d:fd:5f:99:74:04:8c:
db:be:de:a6:17:6d:f0:18:4b:74:45:18:fe:22:d7:c3:19:a1:
64:44:78:51:b4:f5:73:bf:f6:cc:6d:04:8f:e2:67:8c:0b:68:
94:6a:57:ec:d8:a0:f4:aa:87:4a:5a:f2:ad:96:5f:42:1b:a5:
69:45:1d:56:0a:1d:d4:4d:d0:e4:e4:98:c4:3a:19:b4:ac:7b:
85:87:91:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:21 2025 by rpki-client