Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/883b23d3-dd14-312b-bf7f-622906886c92.roa
File: 883b23d3-dd14-312b-bf7f-622906886c92.roa (raw, json)
Hash identifier: r/KdbtoVnqw401QCEWxSosNLwSkLiMOX9sOOFAbMwiE=
Subject key identifier: 69:B0:DD:B2:E4:43:C2:3B:5F:C3:E8:01:C0:28:56:CE:2E:8A:00:AB
Certificate issuer: /CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
Certificate serial: 010D0C9F4328584812D52FD36D8B330CBB572B80
Authority key identifier: A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/883b23d3-dd14-312b-bf7f-622906886c92.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 12129
IP address blocks: 152.160.0.0/17 maxlen: 24
152.160.128.0/18 maxlen: 24
152.160.140.0/22 maxlen: 24
152.160.144.0/22 maxlen: 24
152.160.184.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:2f:d3:6d:8b:33:0c:bb:57:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abca546-ca81-48f5-bdd4-8c111ba523ea
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=843e39ac-a264-440c-b2bd-adfbe57287c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:30:77:08:04:fd:ed:c0:54:31:90:5f:36:
d6:1e:20:f2:26:1d:c5:99:ef:f0:c5:7d:1a:81:d5:
fb:5a:8c:18:ae:54:73:cd:c2:7f:6b:3e:72:54:10:
37:65:26:fa:6c:cc:8e:2a:56:0e:80:81:de:44:16:
83:b0:64:48:2f:5d:fb:a9:8c:b6:10:8f:10:17:c0:
aa:54:16:07:f8:b7:ee:d5:20:fb:78:dd:f4:2d:e5:
6a:74:cd:6f:71:23:48:15:9e:0a:36:26:62:84:f1:
e8:28:f2:34:22:d8:7c:77:f3:0f:8a:2f:f0:3b:dc:
14:b7:94:14:f5:ea:d9:e3:68:c6:a2:6f:ad:b9:bc:
67:d9:f5:f7:d5:f4:ff:4a:3f:f9:f2:6a:3d:29:59:
e0:ba:b4:04:aa:38:61:b5:c2:32:c0:d9:7f:46:ac:
43:0f:12:9f:b4:32:0c:66:97:ba:c6:0a:80:70:df:
8d:5f:d5:63:77:52:b0:57:a4:4a:e6:23:96:15:1d:
36:d0:3c:89:e4:d7:41:2b:80:2c:a4:7c:94:c8:af:
dd:79:be:15:66:5a:3b:74:5a:29:a3:53:ab:df:d9:
a2:63:69:eb:31:d5:54:5c:73:27:20:57:d7:c1:f5:
7c:af:6f:14:23:68:8a:a5:e2:15:d4:3b:fe:73:31:
05:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B0:DD:B2:E4:43:C2:3B:5F:C3:E8:01:C0:28:56:CE:2E:8A:00:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/883b23d3-dd14-312b-bf7f-622906886c92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea/3abca546-ca81-48f5-bdd4-8c111ba523ea.crl
X509v3 Authority Key Identifier:
keyid:A1:81:19:63:D5:60:F5:75:A7:A9:0D:F4:A2:20:63:50:66:E9:C9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3abca546-ca81-48f5-bdd4-8c111ba523ea.cer
sbgp-ipAddrBlock: critical
IPv4:
152.160.0.0-152.160.191.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:61:32:ca:cf:f6:9c:04:38:a5:c7:10:2a:39:3e:16:19:d8:
04:15:89:8c:0f:f8:50:c8:65:b7:9b:de:cc:11:32:de:ee:70:
d6:f1:34:1c:45:fc:cd:7f:eb:8a:f3:fc:0a:88:a3:d5:13:a2:
93:15:68:f7:42:c1:24:e7:4a:2c:4a:3c:2a:51:4d:ee:22:74:
80:77:4d:a7:73:6f:fa:90:74:39:d3:0b:81:c0:38:ff:f4:fa:
17:02:ca:8d:46:23:51:a2:7e:56:72:ad:08:37:40:33:c3:2f:
bf:45:86:71:dd:9f:05:db:56:6f:e2:9f:b0:0e:c6:ca:67:0b:
dd:92:4d:76:90:f1:6a:c8:e2:b5:66:05:9c:10:fd:19:fc:bc:
0c:63:d7:0a:3a:ae:a4:9c:27:4c:e0:0a:38:2b:3c:04:5b:88:
98:c5:ce:70:b0:21:4b:0e:37:73:07:b7:c6:ac:e0:6e:21:c4:
be:51:b6:17:c9:5c:c7:28:fb:08:90:cb:a1:dc:e6:80:1e:5b:
7e:e9:e5:c7:09:92:ce:51:fe:45:a9:db:66:66:9f:b2:7c:24:
12:75:66:57:0d:63:b8:b4:3b:b3:79:12:d0:da:82:ac:6b:4a:
ac:3a:ac:52:2d:fe:f2:25:55:b2:fc:2d:21:7b:39:f0:5a:3a:
1e:af:41:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:10:36 2025 by rpki-client