Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/148471f6-afa7-3f62-ac8d-1a7a880a2409.roa
File: 148471f6-afa7-3f62-ac8d-1a7a880a2409.roa (raw, json)
Hash identifier: FQTZvEoz+QnjckqwsPh3B9r1T8vOfW1Lk5r7D9C6nJo=
Subject key identifier: F8:67:2E:DD:00:29:05:95:BD:6B:3F:E7:C5:FB:02:FD:38:34:85:6D
Certificate issuer: /CN=7cafc1ae-8aed-47d8-a718-169a271736a5
Certificate serial: 010D0C9F432858488C45CE94C2D4C28827CB6880
Authority key identifier: F2:8E:00:8F:88:BA:DD:98:6B:B2:D9:86:CD:8E:0D:60:A4:3C:3C:3B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/148471f6-afa7-3f62-ac8d-1a7a880a2409.roa
Signing time: Wed 15 Jan 2025 02:00:39 +0000
ROA not before: Wed 15 Jan 2025 02:00:39 +0000
ROA not after: Tue 15 Apr 2025 01:00:39 +0000
asID: 396189
IP address blocks: 163.123.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8c:45:ce:94:c2:d4:c2:88:27:cb:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cafc1ae-8aed-47d8-a718-169a271736a5
Validity
Not Before: Jan 15 02:00:39 2025 GMT
Not After : Apr 15 01:00:39 2025 GMT
Subject: CN=b4727e17-f30a-4a5b-87de-982a69107e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:ec:b9:ab:90:be:d0:82:7d:3b:70:9c:73:
11:e6:11:a6:36:4d:6d:14:be:49:09:1f:7d:75:b1:
34:05:df:1a:43:63:69:d0:a4:7a:cb:2b:2f:76:f9:
d3:b6:73:07:ca:2a:e1:c4:94:ac:90:59:59:0b:27:
c6:3f:5e:92:0e:0b:6e:c6:a1:73:8e:07:60:a1:b7:
e9:00:65:b4:d5:c5:90:03:34:2c:98:25:55:b6:c4:
93:ed:e6:80:4b:88:7b:9a:13:5e:ca:4a:3f:cc:e3:
8c:0e:b0:00:d3:8b:3e:02:c9:8d:f5:7e:5e:e2:da:
ed:41:0a:6d:49:19:5e:9d:46:99:e5:45:c7:81:1a:
5f:3f:e9:a1:9b:8e:78:2e:61:49:fd:d8:c5:0f:2d:
1c:0d:28:f7:97:02:f0:bc:c2:15:18:e9:35:d5:93:
4c:8b:94:b9:2c:ef:d3:54:08:de:f4:6e:61:d9:42:
92:7a:b7:50:6f:2f:2d:e0:f3:77:64:0f:ba:7f:72:
00:5d:66:a4:18:e9:89:26:a2:a7:f7:6c:95:b8:4e:
6e:4c:53:4b:9f:18:0d:61:b7:4f:6c:ad:69:fa:8f:
35:43:34:26:a0:ad:5e:c8:e4:e7:54:f6:9b:c8:45:
f5:62:c9:e8:7b:c2:a8:ec:1e:45:7d:a1:11:9b:54:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:67:2E:DD:00:29:05:95:BD:6B:3F:E7:C5:FB:02:FD:38:34:85:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/148471f6-afa7-3f62-ac8d-1a7a880a2409.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5/7cafc1ae-8aed-47d8-a718-169a271736a5.crl
X509v3 Authority Key Identifier:
keyid:F2:8E:00:8F:88:BA:DD:98:6B:B2:D9:86:CD:8E:0D:60:A4:3C:3C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7cafc1ae-8aed-47d8-a718-169a271736a5.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:90:6e:7b:14:1a:3a:50:2b:fe:31:a3:4a:c9:a0:20:ad:eb:
db:e9:90:e2:a8:9a:fa:5e:cc:c5:f4:d6:05:d5:17:66:65:89:
dd:1c:bb:67:1b:16:c2:c2:d3:e2:86:48:6c:af:0b:f3:a9:72:
a5:f2:b0:0e:48:9f:1f:55:ff:32:60:70:4d:b6:2d:2f:1a:13:
ba:45:79:bf:03:bf:02:fc:97:50:b0:69:83:f5:cc:42:6a:cb:
32:0a:44:89:18:c9:1f:24:55:d4:8d:a0:e2:44:da:ce:cd:95:
73:a8:4b:5f:8d:1a:dc:58:9d:d6:f4:71:e7:65:62:f1:bc:7c:
6d:cf:18:78:cf:da:98:ad:0c:7a:37:9d:70:76:95:ac:09:e9:
9e:20:af:25:cd:38:f0:0f:fb:3f:ac:a1:ef:a0:c0:be:78:a4:
b2:4c:54:03:16:60:ed:e2:07:57:7a:af:cf:59:67:e3:68:49:
cd:31:fc:91:77:62:5e:79:46:f5:fc:3c:6b:45:39:eb:c9:69:
5f:0c:c5:25:65:47:dc:4c:a1:e0:50:9a:5f:08:7b:95:cb:32:
ed:02:31:98:60:c7:dd:a3:46:ae:63:53:c3:7e:42:72:1d:b4:
45:6b:0e:14:db:64:43:4a:f0:8a:61:33:51:8f:4b:17:04:a4:
fd:10:92:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:36:38 2025 by rpki-client