Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
File: 536a1a59-e74e-326e-909f-14a772e3d7fe.roa (raw, json)
Hash identifier: tTkFILelM5Cvzn+3WHkIzP61Fpo+spIlbSwzq7WkYr8=
Subject key identifier: 4D:0A:D0:F1:45:45:ED:24:C1:40:A6:5A:D9:A9:F8:F7:98:E9:6E:31
Certificate issuer: /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Certificate serial: 010D0C9F432858481F652112DEE3D1FA656D7780
Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
Signing time: Sat 07 Dec 2024 02:00:39 +0000
ROA not before: Sat 07 Dec 2024 02:00:39 +0000
ROA not after: Fri 07 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 161.199.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1f:65:21:12:de:e3:d1:fa:65:6d:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Validity
Not Before: Dec 7 02:00:39 2024 GMT
Not After : Mar 7 02:00:39 2025 GMT
Subject: CN=af4b0497-b72a-41bd-9086-53333a56bc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:43:51:e5:20:7d:23:f5:ae:4d:d7:60:78:
8d:2c:23:88:ec:a7:d8:7c:02:08:ee:81:e3:03:8d:
04:5d:3a:df:31:f3:a3:36:2e:64:f0:f0:d4:01:40:
53:a4:ea:86:a2:f6:86:2f:a2:0e:6b:7c:6f:18:d3:
00:f3:35:6a:58:35:9f:cd:aa:fd:16:e7:63:56:bd:
1d:5c:a0:81:95:74:2f:8f:01:58:23:e7:06:fe:75:
2d:a7:c5:58:47:d2:db:94:6a:4c:57:6b:ff:c6:86:
18:49:71:c6:7e:bf:f4:52:d4:de:0a:f0:1a:59:26:
0b:2b:86:91:4a:ff:a8:6d:6d:03:dd:d6:84:f8:dd:
ef:1c:52:b0:de:34:63:8b:2d:b2:40:6d:aa:df:a5:
bd:14:79:58:a2:4e:d2:a7:0f:47:88:1e:59:60:9c:
72:2d:1f:e2:45:18:9e:d0:9d:5b:81:c9:35:9e:28:
cc:f6:be:79:99:13:4f:14:35:2d:59:82:18:a2:ed:
14:2d:cb:bd:6e:cf:9c:cc:9e:34:b2:51:85:67:7b:
79:a5:5f:c5:7f:63:cb:5a:16:1d:4d:89:29:c3:ad:
39:ee:23:8d:ec:41:47:ce:b9:d4:1b:fd:0a:b0:cf:
0b:83:fd:41:33:88:b0:33:c4:e0:32:19:ad:ab:dd:
f6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0A:D0:F1:45:45:ED:24:C1:40:A6:5A:D9:A9:F8:F7:98:E9:6E:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl
X509v3 Authority Key Identifier:
keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
sbgp-ipAddrBlock: critical
IPv4:
161.199.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:96:40:06:6b:5e:fe:7c:cf:a1:7f:3d:e2:a7:36:12:3a:bf:
99:87:4e:29:52:39:2b:bc:e6:a8:eb:f0:cd:62:8f:b8:09:c9:
8f:db:58:52:f0:b3:db:33:99:9e:c1:aa:94:62:21:b1:99:a7:
6f:dd:6d:04:64:32:85:ec:5b:99:d7:a6:8e:34:67:7f:e6:fd:
cc:97:86:48:5c:f0:46:2a:b8:33:36:52:76:07:37:4e:ea:7d:
45:00:e9:61:98:27:17:e3:27:9c:70:1d:0e:97:ef:72:78:ba:
7e:b2:60:bc:8c:15:37:dd:c5:04:ac:94:2b:20:3c:df:35:21:
6a:4b:40:dc:35:ed:ec:2f:d4:55:35:c4:96:ca:eb:3c:46:bb:
9a:88:c8:cd:a8:22:73:0d:09:48:dc:21:09:47:9a:ad:be:d6:
b0:4d:92:9c:2e:8d:db:46:ea:81:26:53:2c:fa:41:5d:e5:5b:
94:c3:e1:9b:57:55:10:50:79:a9:0a:94:ff:05:42:8c:52:ec:
7a:e6:9a:cb:d1:15:fa:b1:09:f8:b1:ab:08:c2:a0:aa:96:d5:
dc:a0:5a:4d:7c:3a:cf:60:d6:be:3a:03:91:00:06:3b:7e:82:
8c:e5:65:27:0f:2e:4c:46:ee:d5:72:f8:a0:8d:87:ce:b6:fc:
85:bf:6c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:31 2025 by rpki-client