Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa
File: 6c64e825-16bf-3331-8877-9a759754bd51.roa (raw, json)
Hash identifier: lIyUCHvITkG+rMyA3oSE4dQZnFUj3eXwlXDq2e/U+sA=
Subject key identifier: 4E:74:2B:0A:4D:FD:8E:45:32:01:8C:D9:8F:95:53:89:CF:8E:CD:98
Certificate issuer: /CN=49b876c3-2c45-48fd-9b06-9930edf118fa
Certificate serial: 010D0C9F432858480EA5053DB9C4BDAAC4581A80
Authority key identifier: EE:E2:29:5C:7C:0B:88:A3:24:EB:14:04:AB:80:4F:A1:52:41:83:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 46626
IP address blocks: 142.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:05:3d:b9:c4:bd:aa:c4:58:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49b876c3-2c45-48fd-9b06-9930edf118fa
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=19107259-e29f-4502-9f12-49ff1e6f1956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1b:b2:83:90:15:1d:83:99:b1:e5:8c:6a:9e:
03:70:a0:79:6d:21:b6:31:b4:e4:1e:d3:a8:45:89:
1b:9e:95:d4:92:55:a5:07:43:d5:41:b3:90:17:3f:
31:b0:ff:67:a3:76:fc:4f:6b:d5:57:78:20:9f:44:
f0:44:21:20:5a:0a:84:58:f5:a6:31:31:72:24:38:
d2:92:fe:e0:31:91:7f:e9:a8:b5:d3:2c:63:f0:71:
0c:9b:31:5f:12:ed:38:e8:4d:f4:0c:bb:90:a7:68:
79:64:ca:8d:66:32:9e:e1:74:d1:ce:e6:26:6e:83:
2c:b0:3b:bc:be:81:9b:bd:da:3c:af:3c:37:00:4b:
db:bc:86:11:c3:1b:18:5a:b4:34:ae:61:6c:34:81:
62:5d:c1:2f:b6:cb:e4:90:71:a0:65:fd:06:d2:d4:
96:f4:a6:2e:89:06:d1:b8:42:52:07:fb:47:74:dc:
df:70:68:8c:95:eb:95:0f:34:0e:a6:19:7f:0a:51:
84:29:80:10:61:44:f4:ce:f5:5f:15:e5:c6:47:18:
a0:d5:17:93:21:47:ce:4b:b7:25:d4:09:b3:a5:60:
86:52:32:5a:2e:b7:d4:20:c9:f7:45:7d:92:1f:a7:
41:a0:17:3b:ee:f4:73:e7:76:f7:f5:9c:7f:2e:0d:
30:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:74:2B:0A:4D:FD:8E:45:32:01:8C:D9:8F:95:53:89:CF:8E:CD:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/6c64e825-16bf-3331-8877-9a759754bd51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa/49b876c3-2c45-48fd-9b06-9930edf118fa.crl
X509v3 Authority Key Identifier:
keyid:EE:E2:29:5C:7C:0B:88:A3:24:EB:14:04:AB:80:4F:A1:52:41:83:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/49b876c3-2c45-48fd-9b06-9930edf118fa.cer
sbgp-ipAddrBlock: critical
IPv4:
142.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:21:47:fc:2d:0a:0f:d7:e9:ab:80:57:79:d9:fd:8e:f7:a2:
24:54:e5:61:92:6a:9f:d8:71:ac:0c:fd:92:a8:f2:22:6f:1c:
77:f3:fa:df:ee:e2:a0:77:10:78:29:cc:65:e7:77:3b:6e:17:
3e:30:53:2e:7c:51:33:e2:e9:f4:0f:5e:e7:8d:2b:da:f5:b1:
05:5a:1d:e5:b5:07:81:3a:fe:81:27:fa:fc:5e:d8:07:c8:d2:
6f:27:70:f1:75:47:4e:dd:ab:92:6e:7a:85:06:f7:8b:90:8c:
a8:24:8b:e8:80:29:a4:d3:7d:68:00:9e:34:96:0f:bd:fc:71:
d7:bf:01:56:e3:a1:fa:55:00:7c:25:6f:d6:15:3d:43:d5:71:
33:b7:17:0e:3a:d3:3f:c5:82:0d:76:db:8f:39:d5:14:95:59:
e1:fb:6c:3d:2c:b0:fd:eb:af:1c:83:aa:a3:3a:47:db:59:20:
11:f0:19:ca:94:31:d0:d4:3d:40:83:9d:6f:70:0e:80:1f:2e:
33:0a:1a:2e:b7:a9:6b:7e:22:30:82:76:82:be:05:7e:e4:b0:
73:5f:d9:30:99:4e:8e:ac:a1:df:61:2e:38:33:7e:71:2a:00:
6f:fc:cb:1b:e9:57:62:14:b9:a5:eb:6f:a2:7c:4f:3e:25:f7:
91:9b:2e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:59:06 2025 by rpki-client