Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/2b654aa1-a886-3bab-aa04-1bc12d9d838a.roa
File: 2b654aa1-a886-3bab-aa04-1bc12d9d838a.roa (raw, json)
Hash identifier: YkfjVrrn0QNrQ/tjGWs9y9XOouL28RZwYlOEq5HYJYA=
Subject key identifier: 29:B7:96:0B:57:C7:B9:23:5F:65:53:D3:92:66:2F:AF:AA:01:74:ED
Certificate issuer: /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial: 010D0C9F43285848854B3FFFAF2EC8487B657300
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/2b654aa1-a886-3bab-aa04-1bc12d9d838a.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 18004
IP address blocks: 163.181.24.0/24 maxlen: 24
163.181.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:3f:ff:af:2e:c8:48:7b:65:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=a048914e-b21a-4ac9-8d14-2338e9944a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4a:3a:8b:0c:98:1a:34:23:fa:df:ac:f2:9d:
7e:58:cc:fc:db:46:47:60:73:84:18:db:33:07:9a:
54:be:9d:89:41:4b:de:1e:d9:0d:99:d6:73:06:09:
23:0c:27:60:fa:5c:f8:4a:47:f2:70:e4:4e:d7:e2:
0e:41:72:7e:cf:13:22:00:ea:92:88:df:c9:14:56:
0a:2a:7e:e5:05:e3:aa:5f:69:bb:c2:15:59:79:07:
03:9e:60:fa:af:30:e9:61:df:a7:1e:4f:a0:5c:d3:
cf:a4:d5:63:0d:11:d7:8a:5c:c2:45:ba:b5:86:b0:
7f:15:49:d8:fa:95:5a:b5:91:03:6c:e1:88:06:4d:
31:29:88:df:3e:ff:07:6b:df:0d:e6:0f:11:65:72:
7c:de:50:40:f9:cc:bc:de:36:a8:93:5b:06:52:c3:
c5:73:90:f5:0c:35:99:58:d1:4f:98:b3:98:21:3a:
55:c1:d3:4b:34:0b:e6:15:18:69:6e:ba:53:b2:93:
bf:69:c1:0a:98:4c:78:0e:3e:df:e9:82:04:8d:6c:
90:11:e6:f2:dd:41:30:42:37:b7:48:bf:c5:c1:b3:
72:ca:10:3f:51:df:15:1b:4a:66:87:6f:2b:48:78:
a6:4e:d7:2a:12:0f:61:fb:4c:1d:21:c2:7c:14:e8:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B7:96:0B:57:C7:B9:23:5F:65:53:D3:92:66:2F:AF:AA:01:74:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/2b654aa1-a886-3bab-aa04-1bc12d9d838a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl
X509v3 Authority Key Identifier:
keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
sbgp-ipAddrBlock: critical
IPv4:
163.181.24.0/24
163.181.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:3e:05:b7:5c:75:0a:59:26:f1:af:bd:20:dd:01:dd:e8:c5:
80:2f:04:2d:23:fb:14:eb:e0:62:06:e8:bf:a5:7a:c1:ed:37:
98:7c:6f:6c:eb:00:e2:09:b7:8f:fa:99:b5:12:59:a9:73:87:
91:1a:84:1e:d8:b2:70:3e:14:d5:5b:04:38:3a:f0:00:94:0f:
8c:7b:c2:69:6d:d7:a5:34:e3:d5:38:09:10:db:48:31:10:f5:
19:a5:c4:9b:fa:c0:71:51:41:14:d6:ac:5c:19:f9:fd:6e:f9:
7e:d0:a7:79:c1:bd:bb:d0:15:e8:96:c7:21:f1:26:d1:40:5a:
22:6a:51:b9:c4:93:50:27:02:15:7c:a2:ea:ac:7d:ae:13:65:
c0:e0:e2:10:d5:71:b3:01:3f:92:2c:ec:c0:81:c0:c9:2b:ef:
0d:e4:a9:34:fd:0b:12:4d:a6:11:60:82:d7:c5:5e:21:1f:0f:
09:2c:d3:01:c2:fd:9c:85:51:4e:73:8d:48:a4:c4:73:a8:f3:
b0:41:7d:0e:62:01:ca:36:1d:d6:5b:77:68:b8:4a:03:6b:32:
45:96:8e:03:ca:18:df:39:42:a2:56:5b:a7:db:1a:bf:6f:ac:
f3:33:5f:c8:33:39:7e:86:98:b4:b2:95:ce:68:45:31:0f:f6:
8b:46:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:41:07 2025 by rpki-client