Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa
File: 771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa (raw, json)
Hash identifier: 4Ks51LczDrijtSt499I5A941zoavLjf9+WUJ5ph2MIg=
Subject key identifier: 8F:FA:20:25:3F:DC:AC:1E:86:20:66:6A:AD:D9:0F:71:28:62:40:A1
Certificate issuer: /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Certificate serial: 010D0C9F432858483F803BDB43B76524EC0E20C0
Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 13506
IP address blocks: 164.95.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:3b:db:43:b7:65:24:ec:0e:20:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=ed9cedb4-3206-47fe-8ba4-f2aa5fc203f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c0:64:0d:94:65:81:f6:99:52:c4:6c:73:03:
3f:6f:6d:98:c2:ba:61:2b:25:6b:55:b9:78:15:22:
10:f3:4a:f1:d5:43:59:3d:16:01:80:31:d9:ba:f3:
c6:5d:62:c5:6b:71:ff:66:b8:79:46:69:b4:4e:8a:
b0:8e:ac:1e:f3:77:77:8e:3e:79:68:af:9d:0b:97:
c0:74:13:c7:91:30:b4:e2:73:b7:4f:e3:45:e8:43:
f3:9b:05:1e:91:d0:5a:9f:59:8f:6d:40:fb:7f:f7:
5b:16:61:9e:27:03:6e:93:6b:3a:50:94:9b:0e:af:
41:c3:82:fe:d2:4f:2b:0f:ed:f3:f5:90:ab:56:43:
38:24:72:19:fa:4e:8e:24:b9:7f:ca:3f:6f:7e:f7:
6d:09:4c:0c:a9:c8:d2:98:13:27:1b:c9:7a:f0:7a:
ed:8d:7f:cb:2f:69:8e:17:dd:e6:96:4a:2f:32:1b:
e4:40:4e:29:63:43:05:6c:90:06:0f:f7:62:04:87:
f6:fd:56:d0:29:72:21:98:a0:23:9f:08:84:1d:b0:
28:9d:3a:2f:47:76:4c:f5:80:d9:2d:c6:b8:99:06:
fc:f9:bc:7a:de:06:57:90:a4:7f:c9:9e:e4:d4:44:
b0:42:5b:62:c9:5c:a5:c8:12:35:e6:93:58:29:5b:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FA:20:25:3F:DC:AC:1E:86:20:66:6A:AD:D9:0F:71:28:62:40:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl
X509v3 Authority Key Identifier:
keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
sbgp-ipAddrBlock: critical
IPv4:
164.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:11:d4:2e:b3:74:1e:66:5f:56:65:9a:48:ef:9f:38:1f:21:
2e:8e:b1:3b:2f:45:53:b7:6f:67:8d:5b:bf:04:54:c0:1e:28:
99:78:a6:62:57:bb:e5:11:27:6e:9d:26:a7:29:3c:7b:fa:2e:
d8:2d:d6:41:b2:f6:ab:1a:f1:8b:29:62:09:ec:55:45:c2:10:
12:46:f5:1b:f8:9e:c8:0f:95:ba:c2:52:a1:b5:3f:58:8e:84:
3c:6c:8d:ed:34:3f:85:e4:1c:3d:14:bc:a6:e6:8a:83:f2:c4:
bb:fe:0e:16:92:b5:da:d8:ea:9c:cc:93:4f:ba:f8:1b:4e:23:
d9:ad:4c:b2:10:30:4b:5b:d5:dd:b0:f1:f0:e3:87:b8:6c:4f:
8d:39:a2:a5:ec:9b:c0:90:dd:d3:8a:f6:3a:98:05:3c:ec:5e:
2d:07:33:ea:a7:bc:dc:27:5c:2f:b7:62:42:3d:69:bc:84:37:
e3:10:d2:47:66:ac:b9:d8:99:2d:33:ef:53:f2:d8:ba:8e:00:
1e:95:d0:7a:c9:ba:d2:c5:1d:85:65:20:71:7e:d2:98:7d:a7:
48:ad:b9:b5:6e:fa:16:36:64:1f:ef:ba:08:80:15:38:43:6f:
8f:80:fb:e8:4a:97:e6:7f:2c:5e:2c:76:93:c8:44:18:34:07:
af:7e:32:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:40:59 2025 by rpki-client