Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1fda95ac-3843-3be1-be0c-4e0693659ba3.roa
File: 1fda95ac-3843-3be1-be0c-4e0693659ba3.roa (raw, json)
Hash identifier: m/BtqYW70RERSMn8n9xhbgKxvFatP3BJfiYtKlG9w2Y=
Subject key identifier: 45:11:12:1E:C6:F0:E6:66:A3:9F:EE:02:B8:E0:F9:44:EC:F0:98:35
Certificate issuer: /CN=bb69a441-76b7-4b20-a411-7a618bd61bcb
Certificate serial: 010D0C9F4328584812D53A79215586B3AB468880
Authority key identifier: 09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1fda95ac-3843-3be1-be0c-4e0693659ba3.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 32338
IP address blocks: 162.251.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:3a:79:21:55:86:b3:ab:46:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb69a441-76b7-4b20-a411-7a618bd61bcb
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=08ad7b5e-280f-4374-865e-7a72dfb30810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:df:b8:0d:57:af:19:9a:d4:c3:b9:dd:e8:5b:
22:a5:6d:d1:03:cf:4e:16:12:fb:ce:54:7d:d5:e9:
33:1c:35:84:0c:0a:d0:16:01:63:d2:69:78:61:5a:
b3:f0:21:75:d3:74:99:82:c3:4f:d3:cd:2f:9e:00:
77:64:b9:b7:66:3d:75:25:ea:f6:b6:70:38:42:58:
b5:85:54:d6:fb:bc:e2:c5:ca:26:d0:2a:77:90:25:
9a:5e:8b:65:06:6c:51:ef:a2:2f:3a:15:43:ab:74:
21:8e:cf:23:ab:64:89:98:9d:48:27:39:0d:ab:a0:
23:75:06:02:d4:17:ec:43:7c:3a:9c:d7:8b:33:dd:
c8:37:a0:f4:f0:f0:30:32:34:85:5f:e6:7f:f6:32:
c6:9f:55:ae:9d:f5:72:31:10:1b:4e:a1:c7:12:e7:
03:7f:84:fc:15:dc:3e:ef:3c:8e:38:03:ac:f6:59:
cc:d3:72:06:84:76:80:8f:12:56:8d:5e:14:5f:d1:
f5:39:13:4f:57:6c:39:7f:9e:57:9b:3d:c9:fb:3f:
68:f6:39:42:75:29:a3:0a:2e:0e:60:8b:59:93:b2:
01:07:e2:bb:09:f9:6b:89:a9:57:e3:49:88:f8:b6:
3a:a7:81:30:9a:2b:ea:7f:a7:49:d7:57:2a:9e:64:
f9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:11:12:1E:C6:F0:E6:66:A3:9F:EE:02:B8:E0:F9:44:EC:F0:98:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/1fda95ac-3843-3be1-be0c-4e0693659ba3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb/bb69a441-76b7-4b20-a411-7a618bd61bcb.crl
X509v3 Authority Key Identifier:
keyid:09:46:D0:A7:31:C8:12:1B:5F:66:60:53:4B:90:0C:BD:5D:9D:15:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bb69a441-76b7-4b20-a411-7a618bd61bcb.cer
sbgp-ipAddrBlock: critical
IPv4:
162.251.108.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:4f:26:c5:3f:35:d5:dd:c9:e5:b5:c4:32:63:80:17:f7:61:
00:b2:f9:6c:4e:d6:e3:d6:8a:b1:f6:cf:6a:95:8c:44:b1:f7:
8d:a8:64:5f:13:e8:05:85:f9:39:99:80:38:1a:af:8a:5a:ba:
ea:47:92:11:8e:08:f4:68:0f:93:da:e6:03:aa:20:18:de:08:
97:fe:45:17:9e:3e:ce:10:7d:88:ae:2e:24:a0:a9:a7:9d:03:
bb:8f:a5:f7:2d:9e:53:5c:73:0d:b8:b7:01:89:39:70:d5:77:
e3:99:bf:6a:93:18:e8:35:7e:1f:22:94:7e:df:1f:9a:b3:84:
6b:13:61:22:8e:67:45:e3:c8:c3:aa:f2:01:f2:66:e3:5e:b7:
e4:6d:16:0b:e4:3c:a0:fd:3e:7f:9e:3b:5d:12:01:ed:f1:d4:
72:5a:14:70:f4:95:df:0d:09:67:ea:57:1e:f2:b1:22:1f:21:
e9:6d:75:2b:a1:72:fa:2b:24:10:e7:f1:6a:86:59:2f:aa:fe:
5d:a9:0f:c9:9e:3f:0d:75:51:9b:ab:31:4a:d0:35:34:37:df:
87:81:4c:ac:1f:03:ca:df:e7:68:54:37:4d:4a:7d:84:45:a5:
3a:da:a3:2a:8a:bb:d1:85:59:0b:14:95:22:15:65:06:c6:f0:
54:4f:55:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:36:41 2025 by rpki-client