Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa
File: 576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa (raw, json)
Hash identifier: E+m3/eggCHMDbCUVTQ5dKOMDv5RceelibFy4K4CcZCE=
Subject key identifier: 5A:22:21:FF:A3:57:41:25:BD:67:B2:71:8B:4A:A5:10:14:08:40:59
Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial: 010D0C9F4328584832F02DA83F9B8211B17B7F80
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 8075
IP address blocks: 161.221.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2d:a8:3f:9b:82:11:b1:7b:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=760e40c6-be33-4fbd-a387-f1ddcb32950f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:fd:ae:4f:6f:5c:34:68:ff:0e:ce:07:49:
c5:df:6e:57:95:72:ab:04:e7:a5:87:a0:6f:f4:fc:
35:dc:25:e5:34:dd:70:61:ce:01:58:f2:44:d6:4f:
b2:24:df:da:de:6e:b5:ce:d7:56:12:16:9d:87:6b:
b8:ba:db:38:c2:22:79:5a:2c:70:ff:8e:cf:84:7b:
eb:ed:eb:0c:c0:a9:b1:04:f1:05:41:5e:bd:12:86:
75:c3:3a:6f:12:6d:23:4a:17:e7:f4:c9:dd:c4:f2:
c1:8c:8d:18:c2:14:8f:6a:31:72:b0:c4:a5:e2:be:
53:9c:4d:ba:39:01:08:4c:88:1a:22:cb:20:51:c7:
92:bf:54:2f:d3:d8:22:76:b7:88:41:9b:ae:2e:0e:
ec:4a:92:f6:9e:a0:23:0f:38:ea:71:8c:a9:bc:8c:
71:4e:b2:c2:46:98:c4:24:f9:86:f7:c8:82:a3:17:
b3:62:65:39:3a:e2:4b:69:4c:5a:68:9f:8e:da:01:
61:7e:d1:71:27:80:c5:68:30:55:5b:fd:26:8d:44:
5e:20:79:f0:b6:75:22:83:5b:66:fa:8c:e3:9e:4d:
c2:b3:37:a1:99:83:27:24:9f:7d:95:f4:8a:c1:51:
2f:18:86:18:ce:9d:a9:b2:8a:3b:cb:b4:30:6c:8d:
c9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:22:21:FF:A3:57:41:25:BD:67:B2:71:8B:4A:A5:10:14:08:40:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/576ebfea-f7f2-36f2-b0c8-1d7389076fc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
X509v3 Authority Key Identifier:
keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
sbgp-ipAddrBlock: critical
IPv4:
161.221.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:d3:69:d5:8b:62:01:2e:ae:8c:38:9a:e4:14:82:78:16:b2:
ad:e6:51:de:e0:03:9e:97:58:97:6f:f4:7d:38:80:85:5a:72:
86:0e:42:a2:ee:32:09:2d:bf:ea:5e:99:9d:b7:c5:0a:70:44:
7c:b3:70:9f:30:9a:22:6d:38:f6:6d:ad:20:99:a9:5f:dd:0a:
81:f6:30:4c:62:b1:0d:86:f2:fc:54:5e:0a:7a:72:90:23:7b:
6e:e8:58:f3:fa:26:e2:20:b3:65:f7:b3:f9:4d:0d:6d:41:13:
d4:e2:29:be:38:12:1c:65:00:e1:88:ba:b1:ea:ef:95:6d:ce:
95:0e:43:08:be:6a:09:97:8d:2d:31:e0:c1:78:10:7c:b5:52:
92:be:c5:9f:c7:a9:38:0b:50:22:f3:44:b5:51:c9:b2:b8:e7:
14:6b:82:42:e7:1b:59:1d:c9:0e:70:f5:61:1b:09:1f:e4:47:
78:f7:b3:63:e9:0d:be:fd:c7:48:0e:c8:99:2f:b2:96:7b:51:
2c:82:b1:2b:45:66:f2:7e:08:fb:6a:54:65:83:7f:a9:4e:81:
01:d9:40:b2:b5:33:b5:e1:82:84:ae:31:19:c3:77:73:eb:0b:
62:ea:03:3e:9d:20:ae:c3:e8:a3:37:02:fc:0a:85:02:80:67:
c0:c7:45:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:08 2025 by rpki-client