Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa
File: 09db520b-31cf-3c16-9501-2fe36da89b1f.roa (raw, json)
Hash identifier: BQ5OPQ7TR6Swx2Zvy7Y8nZLJL/9glOCsk/g284iZ0wc=
Subject key identifier: 7D:58:B2:19:2E:44:D0:57:68:B4:0B:D0:14:A9:87:E1:71:E2:50:4B
Certificate issuer: /CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Certificate serial: 010D0C9F43285848159FF4B0AFAC16D92CCED980
Authority key identifier: E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa
Signing time: Tue 03 Dec 2024 14:00:52 +0000
ROA not before: Tue 03 Dec 2024 14:00:52 +0000
ROA not after: Mon 03 Mar 2025 14:00:52 +0000
asID: 13335
IP address blocks: 169.196.0.0/24 maxlen: 24
169.196.1.0/24 maxlen: 24
169.196.2.0/24 maxlen: 24
169.196.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:15:9f:f4:b0:af:ac:16:d9:2c:ce:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb
Validity
Not Before: Dec 3 14:00:52 2024 GMT
Not After : Mar 3 14:00:52 2025 GMT
Subject: CN=b846a161-6f8e-49d3-bb0a-30bead735f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:b2:f1:a0:92:e5:84:96:5c:a1:1a:f6:98:
b7:58:7a:65:3d:cd:53:48:ae:87:47:d7:8f:17:f1:
d1:44:57:ef:87:84:6b:f4:ef:35:3b:92:ab:b6:31:
8c:8d:03:ec:95:8d:17:8b:94:2a:4d:85:99:fd:b2:
25:ab:28:e8:49:c8:45:6c:de:54:ac:cb:7f:5e:00:
14:20:80:9b:76:1e:92:86:cd:04:89:83:3c:6b:07:
1e:10:75:f0:f8:fa:d2:fa:9b:9d:a2:4a:ad:77:c8:
93:33:18:84:0f:3d:90:19:4f:06:43:19:e9:d7:98:
5a:40:4f:bc:0c:16:4c:84:aa:c5:eb:eb:54:53:ad:
84:7f:a1:2a:74:0e:e7:2a:c2:fc:59:80:d6:5e:05:
33:07:2e:05:43:93:36:c0:ce:a2:00:9a:c0:18:3f:
8d:8c:5f:44:29:13:6e:8c:58:77:ea:f4:10:4e:b7:
3c:5b:a4:12:e8:cf:23:3a:e0:ec:e6:73:ee:52:4b:
ab:26:b6:34:00:1b:ab:08:dc:fa:0b:8f:af:31:86:
64:d4:f1:24:12:3f:13:e7:90:b7:8f:da:19:b6:f3:
43:1f:cd:95:10:c4:50:43:5e:84:7d:ef:98:c4:20:
4b:77:39:c7:e8:cc:19:72:73:19:63:f2:03:7a:e5:
45:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:58:B2:19:2E:44:D0:57:68:B4:0B:D0:14:A9:87:E1:71:E2:50:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/09db520b-31cf-3c16-9501-2fe36da89b1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.crl
X509v3 Authority Key Identifier:
keyid:E5:B7:30:9C:82:35:A3:AE:E3:93:B5:6F:3E:15:4E:51:49:2C:43:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/573ee1bb-bb6b-4cc6-bca1-4c1622dc4edb.cer
sbgp-ipAddrBlock: critical
IPv4:
169.196.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:5c:4a:de:62:07:15:21:7e:20:12:d6:8f:1f:15:b8:b5:01:
08:8a:14:0c:0c:21:c3:15:00:ee:89:22:47:12:8c:1f:b7:4e:
10:b7:c5:79:75:4b:d0:f9:60:b6:5e:dd:f6:7e:3d:a4:06:bc:
8c:79:bd:73:b4:c9:7f:fc:7d:47:3c:69:a6:4f:99:26:b9:f8:
68:0b:ca:7b:8a:14:d7:fb:08:20:24:aa:58:60:dc:d8:d5:e7:
ef:b5:b4:a2:d6:c3:fa:e8:e7:aa:64:e0:01:dd:ab:39:cc:c6:
23:39:22:c4:b6:ba:f8:b3:2b:19:e4:5d:43:85:01:00:33:9a:
38:52:1f:b5:a3:c2:d5:c4:44:09:7c:6e:33:aa:7a:93:06:6f:
0d:ea:08:a2:3d:db:2b:c6:ca:a6:3c:a6:6b:35:28:9b:fb:b0:
81:d5:38:7d:2b:80:b0:7e:cf:cc:1c:eb:fd:28:a9:33:5c:3d:
06:de:42:dd:4e:ee:ba:6e:b7:43:94:60:fd:d9:88:14:73:35:
ec:f1:cd:ea:88:57:17:0f:fd:bf:9e:f3:9a:06:8d:bc:a3:2e:
34:48:61:dd:f4:e2:4c:33:b4:ba:00:74:93:2d:e3:6c:59:97:
aa:cb:bc:9d:71:0b:c1:88:f5:d4:3b:d6:f1:19:08:02:e4:d8:
d2:e0:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:23 2025 by rpki-client