Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0bb6e42d-39c9-3771-b079-96d881d2b624.roa
File: 0bb6e42d-39c9-3771-b079-96d881d2b624.roa (raw, json)
Hash identifier: CiHoQBfUTsWY8uKTxm0S/Th1bDrehnVKKG0LYTJD2/I=
Subject key identifier: BC:CC:1A:B9:60:86:57:DE:D3:94:9B:83:E1:EA:23:31:D2:6A:61:A8
Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial: 010D0C9F43285847FB1A323F4B20B261A7547740
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0bb6e42d-39c9-3771-b079-96d881d2b624.roa
Signing time: Sun 24 Nov 2024 02:00:27 +0000
ROA not before: Sun 24 Nov 2024 02:00:27 +0000
ROA not after: Sat 22 Feb 2025 02:00:27 +0000
asID: 5645
IP address blocks: 108.161.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fb:1a:32:3f:4b:20:b2:61:a7:54:77:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
Validity
Not Before: Nov 24 02:00:27 2024 GMT
Not After : Feb 22 02:00:27 2025 GMT
Subject: CN=be9dfcc9-d192-4b2b-aa20-4dfafdac1f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4b:ec:dd:72:aa:c5:4d:ec:2d:6d:5d:c5:97:
10:0d:4a:3e:f0:f8:9d:bd:cd:ab:16:3a:6d:b4:02:
33:9d:d1:99:c6:76:82:76:cc:c6:bc:bc:ea:a2:f9:
14:76:c7:db:3a:c1:62:20:2a:60:16:a7:ad:26:8e:
8d:0c:b5:dc:23:29:66:43:82:84:3c:df:44:6e:d9:
11:89:a6:df:1d:76:b2:7a:40:2f:5c:b1:d7:c1:42:
06:c6:eb:57:ae:af:3a:c5:14:30:2a:f4:ab:6d:3b:
ac:69:74:ff:5c:3e:3d:a9:1a:c7:d4:8b:7b:92:31:
37:f1:e2:67:95:b3:f4:56:fc:c8:62:ae:c3:b1:59:
3c:2d:a6:f3:94:15:d7:09:ab:1a:e7:7a:cd:d1:5d:
15:63:67:e7:24:60:a9:ff:5b:1e:1f:52:76:f9:55:
be:fb:f9:0a:40:5a:0a:be:c1:a2:49:4c:8e:8a:59:
32:37:b9:41:59:4a:9c:4d:b6:27:19:c1:de:d3:f1:
15:23:f6:55:2e:da:9d:af:51:47:19:6e:b3:84:50:
bb:96:8d:81:57:77:f3:eb:e9:22:fd:58:e6:75:9b:
7b:7e:24:ca:f7:0c:2d:20:c6:1e:45:4b:39:94:80:
79:e6:55:25:17:27:44:40:94:17:b1:d0:92:d8:26:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CC:1A:B9:60:86:57:DE:D3:94:9B:83:E1:EA:23:31:D2:6A:61:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/0bb6e42d-39c9-3771-b079-96d881d2b624.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
X509v3 Authority Key Identifier:
keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
sbgp-ipAddrBlock: critical
IPv4:
108.161.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:68:1f:11:59:34:e7:b8:65:ff:81:43:bd:6b:8b:bb:0a:76:
14:0e:e4:71:12:87:0c:94:5a:84:36:76:e0:5e:42:ca:09:32:
d8:b4:c0:6b:6f:a3:03:43:f5:48:78:cb:3d:8b:ae:61:a6:86:
a4:9f:d6:2d:58:c0:6c:af:20:1f:2c:68:3e:36:d3:c7:70:11:
fb:c4:e7:cc:21:4d:a6:75:30:d1:01:b0:0f:05:39:7c:ee:2a:
08:2b:b0:05:cf:53:d8:79:67:ed:77:16:db:25:01:bf:e9:79:
e2:00:34:83:75:29:f2:63:88:5d:be:38:d8:2b:b9:09:3e:77:
80:be:d0:88:b8:ec:f6:fe:95:64:ad:41:29:79:8e:34:f4:14:
6a:17:94:d4:b5:b6:d7:8f:39:d0:aa:1f:9e:d2:8d:20:dc:57:
87:3a:b6:67:ff:c3:d8:3b:4a:da:bc:05:3d:7f:3c:86:b2:00:
02:ba:10:2c:36:19:5b:44:74:61:81:bb:93:cc:66:98:df:ea:
ff:d6:c3:70:bd:57:87:5f:10:89:26:c3:25:ff:67:e3:e9:a8:
7c:fc:3d:ce:9d:f8:d9:7f:58:c7:c8:62:ff:6e:70:8c:77:4c:
4f:2f:7c:8e:a5:e4:70:33:7d:90:67:00:78:01:70:5b:ac:6b:
5c:e4:39:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:10:24 2025 by rpki-client