Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa
File: e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa (raw, json)
Hash identifier: 0rKSiwYT1kq/E3V/pD2GRXGagCkeoKb3+PCQO5Gk5n4=
Subject key identifier: 94:F4:10:32:88:C0:28:0D:75:2D:FC:51:07:BC:E4:1A:39:AE:E1:FB
Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial: 010D0C9F432858488AE0900E8CB772E3AB963500
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa
Signing time: Tue 14 Jan 2025 14:00:51 +0000
ROA not before: Tue 14 Jan 2025 14:00:51 +0000
ROA not after: Mon 14 Apr 2025 13:00:51 +0000
asID: 8030
IP address blocks: 161.151.112.0/21 maxlen: 24
161.151.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8a:e0:90:0e:8c:b7:72:e3:ab:96:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Validity
Not Before: Jan 14 14:00:51 2025 GMT
Not After : Apr 14 13:00:51 2025 GMT
Subject: CN=e4ca717b-1245-465f-bddd-ac8112da633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:de:0f:71:fe:49:a1:cf:52:5d:1d:73:e7:6c:
78:9f:32:b8:e4:c6:01:f0:6f:27:d1:88:3a:5b:b4:
72:e7:71:04:03:79:4c:63:06:1f:2e:6e:e4:80:5c:
9a:56:8d:3b:f4:fb:23:65:07:23:d6:7c:9e:50:1d:
6f:83:21:ee:ce:2e:36:02:07:d3:b8:52:0c:41:2e:
e9:95:9a:e4:12:43:e1:fe:59:0a:65:bc:d4:66:6e:
8e:79:dc:4a:76:62:29:0a:30:89:dc:b8:07:3b:0c:
a1:35:4d:a1:cf:b8:09:2f:6a:34:bb:e7:16:dd:0b:
5a:67:ba:2b:a9:2a:6c:b3:a3:85:b1:38:0c:69:f6:
6c:f3:8a:b1:e2:84:ba:d9:cc:ca:2d:de:82:31:6a:
46:f4:ac:b0:02:55:cf:d6:56:b6:d9:31:ed:ab:77:
f2:94:1a:29:63:14:33:47:99:07:ed:fb:9b:11:67:
e7:a0:e5:95:82:fd:be:3f:04:d8:0f:3e:c0:92:87:
b6:dc:bd:31:2d:e0:55:fa:0b:50:00:ad:3f:46:cd:
16:7b:25:c6:25:d5:d1:10:94:81:55:83:27:11:2c:
04:d4:be:d7:08:ef:a6:32:8b:4b:51:d2:19:13:cf:
d0:8b:04:bc:2f:33:1a:3b:97:08:35:d7:bf:fc:dc:
e1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F4:10:32:88:C0:28:0D:75:2D:FC:51:07:BC:E4:1A:39:AE:E1:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/e7a0037c-7c1d-35ec-a9cd-6935014b9093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
X509v3 Authority Key Identifier:
keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
sbgp-ipAddrBlock: critical
IPv4:
161.151.112.0/21
161.151.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:62:40:ec:85:ee:b0:f9:45:d1:9b:13:bd:ac:69:ca:cd:99:
71:b2:29:7f:a6:47:49:db:38:28:6f:bf:6a:06:82:17:20:a2:
4d:c5:dd:e2:8f:bf:5f:40:ef:d5:1c:d8:d2:25:3f:32:64:6b:
0a:47:a8:01:4e:6f:aa:23:6b:95:1d:a2:aa:f8:b7:b3:9f:61:
25:61:88:b3:15:90:45:7a:6f:4b:6c:2b:dd:82:8e:a2:c9:ed:
7c:f9:ec:5c:88:ca:8c:53:dc:8d:39:88:30:f1:b8:dd:80:74:
20:83:8f:85:0e:9a:26:db:7c:09:39:49:36:3b:9f:b0:b5:5d:
2b:d0:b5:64:66:aa:40:51:b7:82:91:9d:1c:02:0e:fa:b2:75:
c7:04:b4:29:a3:b2:8d:df:ac:a6:28:fb:eb:7a:27:08:f0:f3:
23:d8:c8:7d:f5:be:f5:83:36:33:0e:0d:43:f6:02:22:3f:b6:
99:75:45:5f:3f:63:87:75:80:38:aa:7c:36:0f:1d:e1:39:a6:
f4:b4:89:6a:68:d9:a2:d9:3b:52:13:ce:69:5f:73:f1:be:35:
eb:ed:9d:61:0d:30:07:c6:46:30:56:89:8a:b5:61:ce:ec:5f:
f5:a4:02:60:cf:6c:77:3f:b9:8c:ce:55:8d:04:83:6c:c6:0c:
bb:71:1b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:09:47 2025 by rpki-client