Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90a8a49-5cc2-3355-acd8-8784ece9ab44.roa
File: c90a8a49-5cc2-3355-acd8-8784ece9ab44.roa (raw, json)
Hash identifier: QhDDJLX4F4TGukye1kGFOi9l21O7sf/TUHwT+kUcW1E=
Subject key identifier: 66:7B:BC:34:2C:D8:AF:29:FD:C6:99:11:3C:9A:9D:53:1B:B6:0D:C6
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F43285848424ADF0012F1C28EF5261CC0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90a8a49-5cc2-3355-acd8-8784ece9ab44.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6461
IP address blocks: 162.249.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:df:00:12:f1:c2:8e:f5:26:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=8484eb23-aa3d-4a04-acdc-9e51e1b48e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:a0:3c:6c:b4:cd:9b:f5:d3:54:b8:b7:ec:
1a:23:06:47:f9:7d:52:e6:02:d5:91:02:30:11:1f:
c7:f1:ca:26:1e:6f:79:ec:2a:52:84:b2:4a:05:7c:
e7:ef:31:ac:a6:d7:d9:a9:04:9b:a6:8b:f0:42:17:
55:40:84:68:ca:cf:60:55:6f:70:ad:28:9d:2e:dd:
49:e7:3b:14:51:f2:56:9a:f0:44:d9:b5:05:fb:15:
54:2c:41:10:c0:12:ea:39:4c:d2:a0:c0:08:bc:7c:
65:74:60:1b:47:57:86:45:bd:95:d0:39:32:d5:25:
aa:b1:db:72:76:8e:68:fc:1b:93:53:81:6f:bf:6e:
40:32:c6:85:d5:ce:d1:c9:bb:28:97:b2:76:d6:d8:
6a:27:67:89:45:2b:bb:4d:a0:a6:ed:bb:af:6a:69:
3b:84:22:6a:b1:df:f6:b1:7d:69:c0:01:dd:b8:69:
f5:37:d0:d2:83:ef:10:7c:a6:9b:20:37:a9:00:21:
d8:3e:ba:91:45:64:70:f5:21:c2:60:ec:16:c0:bb:
12:ce:79:1d:48:c5:ba:91:52:9b:6b:a7:8d:72:6c:
2f:58:7e:6d:d5:f0:4b:d4:24:5e:36:05:d5:c7:7e:
a1:b4:cd:22:f3:ca:49:1a:f7:0d:4b:39:c9:5a:ac:
db:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7B:BC:34:2C:D8:AF:29:FD:C6:99:11:3C:9A:9D:53:1B:B6:0D:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90a8a49-5cc2-3355-acd8-8784ece9ab44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
162.249.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:4c:8a:28:8a:15:11:3c:5d:06:5e:27:c0:8d:38:f1:97:2d:
93:6e:d8:b2:10:54:05:e3:fc:9b:88:33:29:16:0e:9a:93:47:
64:60:73:42:0c:fa:ac:50:0e:71:8c:30:20:e2:a4:29:b8:2a:
b3:65:d2:38:50:4c:a0:04:dc:3c:e2:6b:17:f7:8d:9f:71:d5:
6c:4a:b3:eb:62:a2:86:05:8d:3e:35:c4:6a:24:94:b2:ee:08:
35:2b:e1:74:7d:78:9e:54:b1:f1:7a:9b:8d:90:07:6e:ca:68:
ea:ac:02:5b:fa:6f:21:4c:4f:c4:e2:0f:81:44:61:09:cd:af:
1d:53:d0:88:7f:e0:52:2f:94:ee:37:16:d4:3d:76:26:5e:01:
ef:71:7c:2c:84:85:72:5d:e3:01:2f:fb:39:50:0d:3a:c2:1c:
6a:b1:2a:46:b1:09:9a:c5:09:fd:c5:e6:85:5a:09:fe:e6:8b:
ef:c8:f7:b5:a9:00:79:44:1f:3b:62:a0:e9:f8:68:c5:a7:d2:
fa:3c:bf:e2:f6:89:0e:34:58:52:44:15:8f:47:3c:4f:5d:28:
4a:2d:35:15:14:fc:31:1e:01:c4:53:2d:58:77:92:11:7d:33:
b1:a1:e2:83:1c:a3:cb:f2:db:64:7d:a6:23:bd:35:e4:3e:c0:
15:37:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:06:16 2025 by rpki-client