Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa
File: fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa (raw, json)
Hash identifier: TIICFrnNIMq9H/g3x88sxm0NzNZUJ/CgiI7vj4D4Z6Q=
Subject key identifier: 54:AD:CD:56:D1:65:2A:5F:51:1E:9D:56:EC:F3:2D:4E:CA:E9:9A:EC
Certificate issuer: /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial: 010D0C9F432858483F8034304D2E2780E9B5AF90
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 31898
IP address blocks: 161.221.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:34:30:4d:2e:27:80:e9:b5:af:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=303cb648-a6cc-4758-8aab-b55bb1f76b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:19:52:ab:46:0c:73:70:da:f7:2e:17:c3:
8f:be:aa:8c:42:62:c6:02:ed:bd:3e:5d:c4:46:c8:
c0:05:90:d6:7b:7e:2d:27:15:a1:e6:f8:2e:65:8e:
2c:fb:86:98:df:e1:49:70:26:15:12:0e:14:4c:4e:
20:cf:86:73:78:23:85:ff:2f:a4:4e:9d:a6:97:55:
a6:c0:1b:c7:ad:38:da:71:47:8a:04:49:d5:e2:d7:
dd:68:2e:ba:6f:d3:fb:83:02:c2:3e:d6:71:79:a4:
e2:20:19:46:97:5f:79:42:07:8b:fe:01:4f:cd:88:
f5:5e:c2:07:1a:1c:d0:35:82:5e:e9:05:be:bf:b2:
9a:41:7e:b4:aa:1c:cd:61:3c:2d:60:66:3d:48:01:
d4:1c:c9:df:84:97:c0:0f:a7:16:15:2d:6f:f6:08:
e8:9a:bd:90:35:5e:30:7a:4c:26:37:63:21:b1:16:
75:0a:1b:6f:1c:11:95:0d:ce:1f:4a:a2:41:5d:94:
67:c8:76:be:84:a0:48:3c:d1:f7:8c:7f:f3:71:ad:
cd:f3:11:91:ef:3c:c2:fc:51:d5:3e:6d:99:cf:dd:
35:e4:ce:b9:5c:1f:08:3d:a6:9a:97:5c:6b:d3:64:
b1:db:ac:c1:1c:4a:54:f2:21:7a:dc:65:99:3e:17:
50:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AD:CD:56:D1:65:2A:5F:51:1E:9D:56:EC:F3:2D:4E:CA:E9:9A:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/fb9aa6fb-dadb-32e6-a62c-fa1719294a9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
X509v3 Authority Key Identifier:
keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
sbgp-ipAddrBlock: critical
IPv4:
161.221.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:5b:e9:15:99:84:5a:43:53:6e:0c:49:18:ee:3c:17:3e:b2:
9f:07:57:17:fa:7d:bd:6c:7b:83:d2:66:c1:b3:fe:20:93:21:
33:b4:69:11:8d:f5:e4:33:ea:db:9d:b7:e2:7b:38:f0:fb:fb:
1d:b1:8b:bf:51:a0:27:3b:46:13:cc:bf:a8:29:3b:82:a0:46:
c8:35:47:56:ee:1c:da:fc:33:ad:e4:7c:ae:bc:15:62:da:ee:
80:02:b3:eb:47:f7:59:e7:1e:67:90:d0:68:94:3c:ee:34:3c:
b9:eb:4d:e8:47:87:7b:8b:46:4a:90:67:46:5c:94:be:b0:ab:
e9:08:a6:5a:0b:2d:be:60:42:1b:9b:af:5e:37:77:76:10:06:
ed:aa:73:0c:04:be:2f:5a:b2:bd:30:96:0c:a0:e5:d1:9a:b4:
04:11:29:99:7e:4b:b0:db:97:76:1f:50:34:d6:d3:c5:21:12:
3e:20:e4:82:8d:e5:a0:33:16:0a:a6:e6:f0:2a:d1:5a:52:f3:
27:0b:4e:46:76:3a:6f:f0:3c:4d:09:18:f2:f6:6e:8b:8c:a6:
a5:82:3a:5b:e9:87:a6:ba:35:f6:70:78:6b:a2:e6:a9:2a:0d:
e5:77:5f:8b:b1:20:e7:29:ca:16:d1:6d:80:57:2c:cb:f7:96:
99:c5:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:39:05 2025 by rpki-client