Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4e55439e-b78a-365f-8c84-5ae476680d04.roa
File: 4e55439e-b78a-365f-8c84-5ae476680d04.roa (raw, json)
Hash identifier: XS9xH88ilRiTFI0VlJeGyrvOERlueZeqnW+4FgRxrhg=
Subject key identifier: 1D:DD:6D:0B:F1:C3:D8:2C:0E:41:19:04:25:23:C2:35:DA:CF:E6:7B
Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial: 010D0C9F43285848573ADB36A8F64C1282B4A580
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4e55439e-b78a-365f-8c84-5ae476680d04.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 26548
IP address blocks: 162.249.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:db:36:a8:f6:4c:12:82:b4:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=98faa97a-f78b-4506-9877-333dd19216b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:ad:a0:4e:15:51:90:86:6d:83:56:a4:d7:
7b:fc:eb:a9:fd:f7:dd:89:25:40:67:23:e6:b8:77:
d3:39:99:0b:45:c3:ca:dc:92:0a:6c:9d:19:c5:1b:
21:5a:a5:d9:19:fc:c9:ae:c1:cb:11:7f:c4:0a:06:
b3:62:b4:ce:b4:57:98:41:0e:6e:90:c3:35:2f:26:
be:26:9e:74:b9:9f:16:92:4c:6d:8f:7c:a5:8f:63:
86:d2:82:c5:e9:12:5d:b7:22:d8:f1:20:bb:9b:e8:
47:a3:b7:8c:18:e0:bd:b5:d8:6f:34:a3:4e:0f:1b:
35:82:63:21:60:99:41:b4:cb:b1:fa:49:d2:7c:13:
f5:79:f5:24:c5:d6:6f:29:15:1e:b5:73:5d:d2:f1:
46:63:fc:d2:3b:ca:fc:78:0b:c2:27:b2:f6:5e:d3:
c0:1d:c3:8e:2b:eb:34:c6:47:b5:c0:39:51:6b:a1:
ca:07:91:8c:46:e9:d9:55:d6:be:f2:09:35:b2:b8:
c6:47:59:fc:27:0f:a4:32:0f:e7:b1:11:c6:e8:2a:
8f:fe:fe:ee:e9:45:13:05:d1:41:b0:19:a5:69:b0:
e0:f3:e5:ec:e9:ed:e6:4b:f8:1e:c1:7d:4e:d0:35:
dc:2a:5b:f9:ce:33:73:84:7e:da:05:2d:49:0c:0b:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DD:6D:0B:F1:C3:D8:2C:0E:41:19:04:25:23:C2:35:DA:CF:E6:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4e55439e-b78a-365f-8c84-5ae476680d04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
X509v3 Authority Key Identifier:
keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
sbgp-ipAddrBlock: critical
IPv4:
162.249.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:b9:ef:16:c0:b4:06:fe:6a:fc:3a:72:e1:29:9b:80:7c:b8:
c8:bf:64:82:c1:3e:56:59:dc:0c:d7:03:16:c7:4c:e1:76:19:
84:dc:12:b2:76:b0:96:12:a5:32:d6:7b:89:70:dd:c3:83:b7:
45:98:89:3d:ba:7d:6b:86:2a:b8:ad:6c:38:73:de:c7:2a:fd:
9e:05:93:1e:b2:1c:07:80:cd:08:99:97:cf:38:47:30:55:52:
f4:a1:95:64:2e:23:3d:4a:db:15:c6:52:97:3f:fc:40:79:5f:
4a:12:ba:30:04:fc:1a:72:c9:59:bb:95:4a:c9:17:c7:4b:92:
77:eb:df:eb:eb:16:ce:a8:d4:39:2a:a1:e8:78:24:ec:5a:79:
b7:9a:44:f1:38:4e:37:cc:0a:d1:a5:28:92:2e:d7:93:5e:2d:
f6:2b:ea:34:52:40:7d:6b:a2:a4:6c:4b:16:b1:4a:df:7a:29:
3c:ac:b4:fa:6f:6f:48:9d:dc:b4:8f:ca:c6:aa:29:f5:bb:b8:
c2:02:74:9b:f3:0f:78:e8:e0:9f:7c:b6:36:67:15:6e:52:a3:
cc:16:c5:7e:f5:72:bb:94:77:7d:43:01:e3:85:b6:0a:48:2f:
10:53:a0:ef:64:a6:9f:1e:8e:a5:10:b0:63:06:cc:91:4f:8d:
a9:67:71:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:44:00 2025 by rpki-client