Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cffbd94a-211e-3b29-bde8-76840353621b.roa
File: cffbd94a-211e-3b29-bde8-76840353621b.roa (raw, json)
Hash identifier: HQj0wIacbU8xJSumsci8rVnpDYCQwlNyUR4+ucLG+dM=
Subject key identifier: D9:ED:74:A9:2D:1C:33:F0:79:82:F6:66:DE:94:C7:65:BB:ED:A3:E1
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F43285848424ADEE7AC5D5F1E9A94A120
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cffbd94a-211e-3b29-bde8-76840353621b.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6461
IP address blocks: 162.223.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:de:e7:ac:5d:5f:1e:9a:94:a1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=36ef59b2-d780-46ad-a0ee-768beecf559e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:cd:0c:fa:86:67:05:26:97:50:92:5c:0c:
d7:c9:7e:e1:be:86:5e:05:be:58:6d:f3:5c:b3:63:
44:c2:61:d1:8e:c0:be:62:68:32:56:8b:dd:4f:68:
31:13:17:10:4e:3e:78:3e:be:ec:1a:ba:cb:7b:f1:
9f:6d:ab:b2:65:8d:b3:51:85:e4:8c:a0:44:5a:79:
e2:97:9a:f1:30:b5:75:3b:50:69:ae:d7:b9:85:ff:
68:f2:13:fe:71:8d:15:04:f1:2a:c3:00:35:5a:d3:
82:dd:b3:ce:3d:40:ee:5e:56:e2:67:89:56:03:00:
e5:04:88:c1:31:c5:ad:ce:d9:73:57:00:5a:e2:fb:
72:2f:5d:f1:50:c8:85:18:a1:91:12:5f:56:14:67:
45:7a:9f:83:df:07:e8:4d:dd:9c:cf:1a:43:03:2e:
26:90:e0:df:61:1a:ba:8b:6d:2d:72:b8:0d:f5:11:
90:b0:ba:3e:53:1c:6c:61:9d:c3:84:e6:80:46:19:
b3:73:09:3f:81:35:c1:ac:22:c9:c6:27:ef:0e:89:
de:3c:f3:2c:3a:07:e2:0d:c2:9d:13:02:b4:3e:c4:
59:85:89:53:2f:d8:e6:89:50:db:50:19:e5:37:fb:
87:94:20:21:22:fd:ea:5b:f5:d5:a1:84:71:3a:26:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:ED:74:A9:2D:1C:33:F0:79:82:F6:66:DE:94:C7:65:BB:ED:A3:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cffbd94a-211e-3b29-bde8-76840353621b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
162.223.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:11:0f:59:96:75:24:e8:5c:62:4c:47:46:98:5b:05:d0:2f:
44:f9:26:ab:cc:1e:b3:44:aa:5b:9e:97:ff:9f:9e:10:1e:96:
32:dc:43:02:e6:e4:fb:39:09:23:13:1c:ee:aa:d1:3b:3e:fe:
47:6c:34:f2:6e:f5:7e:5d:1f:7d:c9:1f:52:cb:d9:7b:50:d1:
dc:7d:58:69:d8:0a:30:d8:04:65:47:20:8d:49:02:75:2f:98:
8c:90:9c:7c:b0:c9:b4:83:c6:94:cd:67:93:cd:48:dd:d4:de:
58:01:eb:d2:d0:3c:f6:64:66:70:18:ca:4d:e3:b4:aa:db:da:
00:28:93:bf:53:9a:b8:27:55:1f:84:10:a0:50:75:7a:38:51:
6b:bc:1e:ac:4b:bd:1d:34:f6:4c:43:60:f1:f5:58:08:99:83:
ad:83:bd:4b:05:4b:90:cf:f8:b3:b3:90:85:0e:96:26:85:b7:
fd:20:37:7c:ba:54:64:a4:4d:35:32:fc:7d:ee:8d:cb:35:01:
db:e6:0a:7d:89:34:da:d4:a8:1d:87:4a:b7:28:2f:9b:21:76:
a6:ad:a6:8f:e4:b5:73:54:96:aa:6d:26:e6:f8:64:7c:ca:51:
c9:9a:4b:a6:10:0a:74:5d:fd:b8:eb:84:c5:0d:bc:a0:1d:21:
22:46:00:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:02 2025 by rpki-client