Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/f63f43b9-1451-3329-8551-da5f7e93cc14.roa
File: f63f43b9-1451-3329-8551-da5f7e93cc14.roa (raw, json)
Hash identifier: Jytc8ICnCO8fdiKQpwwBk2TgPgbVJ3WuWju3PnkXrnY=
Subject key identifier: 27:CC:6D:97:17:C2:74:AF:4A:AE:E8:06:DD:2F:07:A7:26:1B:6E:D8
Certificate issuer: /CN=a5114e69-a8e9-416a-a99b-8144e07664ce
Certificate serial: 010D0C9F4328584871C075920FE4ACC42AF42E00
Authority key identifier: 7A:78:0C:84:76:4A:9B:D5:80:56:A3:70:68:96:11:50:7F:77:FF:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/f63f43b9-1451-3329-8551-da5f7e93cc14.roa
Signing time: Sun 05 Jan 2025 14:00:52 +0000
ROA not before: Sun 05 Jan 2025 14:00:52 +0000
ROA not after: Sat 05 Apr 2025 13:00:52 +0000
asID: 53356
IP address blocks: 167.253.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:71:c0:75:92:0f:e4:ac:c4:2a:f4:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5114e69-a8e9-416a-a99b-8144e07664ce
Validity
Not Before: Jan 5 14:00:52 2025 GMT
Not After : Apr 5 13:00:52 2025 GMT
Subject: CN=33ab6d15-93c1-4d21-b36d-9d8e13c8231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:82:cd:b5:ee:32:84:f8:c7:e7:c1:6b:36:
35:7f:d8:13:11:22:b1:e2:3b:42:64:49:99:ac:3f:
f3:65:85:ee:a5:5d:8e:ed:b6:86:64:c4:32:58:1f:
32:a4:06:0f:99:e2:42:53:47:b8:ae:91:ed:d0:b0:
43:96:03:92:73:6d:74:af:38:f8:a7:8f:04:ae:08:
b8:51:6c:69:2c:39:f3:ab:5b:b0:29:cd:85:f1:59:
eb:9e:e9:e7:a2:14:b8:17:d3:cb:b0:ee:af:40:cb:
40:96:89:c9:b8:41:cd:c7:28:bc:d6:a8:2a:5e:8f:
d1:58:8c:77:81:a4:13:dc:4b:f8:29:ac:25:8d:c8:
39:c9:aa:3d:99:ee:55:0d:d1:34:a8:49:35:f2:a3:
67:83:27:73:f9:5a:f5:c8:31:7f:88:e1:ac:ef:2a:
5b:39:0d:3b:6b:a2:25:5b:fc:60:2b:8c:49:01:81:
90:39:ef:7c:6a:fe:b9:d9:29:83:7e:14:c8:fe:c4:
e2:be:89:fd:5f:dd:3e:31:50:76:6f:62:e7:8d:38:
16:bd:6d:ff:0f:c6:95:4c:3b:68:f8:1c:2b:c7:94:
40:b4:47:15:99:97:77:7f:bb:57:e8:36:2e:d5:9e:
ac:e0:bc:40:bd:29:f9:de:c1:a2:f1:9f:d6:e5:74:
03:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CC:6D:97:17:C2:74:AF:4A:AE:E8:06:DD:2F:07:A7:26:1B:6E:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/f63f43b9-1451-3329-8551-da5f7e93cc14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce/a5114e69-a8e9-416a-a99b-8144e07664ce.crl
X509v3 Authority Key Identifier:
keyid:7A:78:0C:84:76:4A:9B:D5:80:56:A3:70:68:96:11:50:7F:77:FF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a5114e69-a8e9-416a-a99b-8144e07664ce.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:66:fe:15:55:3a:51:47:76:2d:db:8d:da:a7:57:f4:1d:c9:
77:a2:f6:ef:7f:eb:53:16:a7:9c:dd:22:4e:30:3e:ba:77:f8:
5f:68:58:8e:89:d5:de:9e:48:48:c0:c9:f1:e7:88:3a:20:f0:
a6:42:e2:bc:c5:b6:33:d5:85:57:bf:a3:17:bc:09:b3:ea:4a:
51:26:bb:9b:30:e9:bf:06:46:28:30:b7:05:81:70:4e:12:4a:
53:79:0a:2a:fc:80:6c:ff:ae:4f:f1:29:f4:9b:0a:24:8e:e4:
20:c7:92:dc:a3:aa:2e:0c:30:3f:8e:a5:20:03:7f:30:f0:12:
5c:05:71:bb:1f:9b:09:d7:8f:6d:7c:02:b0:aa:5c:9d:b3:bd:
19:ba:69:8c:7c:bd:7b:d9:51:e5:36:ee:77:aa:13:a8:16:e7:
7d:64:4e:b0:c6:7c:9b:fe:71:4e:b9:e8:b0:56:86:b7:28:cf:
4a:84:1f:b9:34:40:b8:82:02:02:fa:66:0f:d9:7a:9f:61:50:
89:e7:ee:e0:df:fe:b5:11:47:2f:55:d4:47:7d:db:04:d0:94:
21:48:a5:e3:2c:d0:42:a5:e0:15:c4:19:8f:f3:9b:e4:ba:6d:
2d:db:9e:f1:c1:46:b8:e6:f1:43:cd:a5:cd:e8:f6:d4:59:d8:
72:c6:0d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:55 2025 by rpki-client