Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/aa088a9e-e7b3-355e-a7d9-845158b85a72.roa
File: aa088a9e-e7b3-355e-a7d9-845158b85a72.roa (raw, json)
Hash identifier: pOoR5Xc/xxHAlv2xbk6Mtk2pDTLI0nVDmvupx4vFrU8=
Subject key identifier: 0A:7A:28:4A:57:22:40:55:7B:1C:E7:D9:75:6D:9A:A4:1E:A0:10:14
Certificate issuer: /CN=5a77e320-aa58-4bb9-bf65-322bab53aa7c
Certificate serial: 010D0C9F4328584812D5327885BA3662305AF7C0
Authority key identifier: D4:32:08:E3:3D:FF:C5:FA:DC:03:1D:6D:51:3A:E6:C6:6A:DA:51:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/aa088a9e-e7b3-355e-a7d9-845158b85a72.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 14618
IP address blocks: 162.221.182.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:32:78:85:ba:36:62:30:5a:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a77e320-aa58-4bb9-bf65-322bab53aa7c
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=6572f5c4-2cef-4276-9725-e41392aee453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:ed:b5:62:c5:ed:9b:0d:23:1d:f0:96:04:
98:ee:8f:11:92:55:25:c2:3c:d2:1d:b5:bb:43:a6:
a5:67:15:cd:87:83:81:44:e2:04:64:5f:da:5e:c7:
c0:03:d9:09:bc:2f:0a:f4:2b:f9:5c:b8:db:c4:04:
7e:8e:62:ef:93:ec:3b:6f:dc:bf:2e:d3:83:34:a2:
74:46:d8:5c:ac:6e:8a:25:71:3e:e5:ba:ed:28:85:
43:3e:5c:a9:f0:40:65:05:0d:c7:7a:6d:fb:97:69:
3c:2f:4e:56:65:9c:46:fa:b6:64:47:9b:01:9a:8a:
c1:d4:ed:10:ec:41:e3:52:7d:b9:df:8f:d0:43:c2:
88:7d:8a:cc:d9:29:e3:0b:00:51:7f:55:99:34:6d:
fa:9a:70:3b:0c:d4:ec:c0:d0:cd:1d:f0:2f:66:66:
9c:e1:44:97:1d:4d:b5:6e:db:fa:d4:bc:b6:c7:df:
b4:73:fe:cb:4b:ac:9c:a3:a3:e9:ba:41:43:a9:d3:
64:06:c5:5e:fa:bd:9e:2f:8f:2c:f2:f3:3c:15:91:
e4:cc:d8:86:88:24:c7:e3:41:4b:3d:af:1d:82:5b:
d0:4c:5e:e8:f6:3e:94:86:1a:f0:bf:16:ce:cc:41:
21:2c:d3:24:f8:80:87:d0:3f:a1:71:ef:f9:ad:7a:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7A:28:4A:57:22:40:55:7B:1C:E7:D9:75:6D:9A:A4:1E:A0:10:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/aa088a9e-e7b3-355e-a7d9-845158b85a72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c/5a77e320-aa58-4bb9-bf65-322bab53aa7c.crl
X509v3 Authority Key Identifier:
keyid:D4:32:08:E3:3D:FF:C5:FA:DC:03:1D:6D:51:3A:E6:C6:6A:DA:51:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5a77e320-aa58-4bb9-bf65-322bab53aa7c.cer
sbgp-ipAddrBlock: critical
IPv4:
162.221.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:c9:73:ab:a1:31:05:53:a0:ff:ba:31:7d:4b:84:6b:b2:f4:
05:3b:be:dd:ea:97:59:22:ee:67:a3:a7:94:5b:e9:c1:ae:d7:
36:e5:16:bc:9a:3b:ff:23:89:8c:cf:83:c0:43:c0:46:48:02:
b8:1e:f4:6d:b2:2a:ee:14:f2:e8:59:95:c0:8b:6b:c1:b2:9e:
ad:78:53:1a:21:f8:58:4d:ef:4e:2f:c4:91:e0:0f:97:cc:d6:
8c:3b:ef:af:4a:09:a5:42:28:8d:01:34:2c:67:70:87:52:85:
76:53:19:1e:5c:2a:87:47:4c:fc:ba:ee:06:c2:35:d6:f5:ac:
62:25:3f:7d:a7:d3:ad:93:fd:d4:5e:70:bf:0c:58:f9:e9:ee:
6d:c1:ac:f3:8f:70:2a:70:d3:a2:58:c2:f5:9c:4c:67:c4:7d:
e1:0b:b4:21:39:3f:be:ec:a9:0f:17:42:bd:80:06:17:dc:79:
5e:d8:24:9c:ce:4c:fc:3a:ac:a6:46:db:5b:00:19:f1:3f:e3:
ee:74:be:e0:bc:ef:f2:d8:2a:16:f6:14:18:9b:3a:e9:ce:c0:
61:12:be:3d:db:d1:22:73:df:91:ff:59:30:70:f9:58:5e:32:
d5:96:39:ab:85:a0:89:ad:2c:dd:16:fa:fb:8a:ac:a5:5d:55:
19:ac:11:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:38 2025 by rpki-client