Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/0409117d-54a8-39ec-bb51-017bc80bd644.roa
File: 0409117d-54a8-39ec-bb51-017bc80bd644.roa (raw, json)
Hash identifier: enAefrsN6DrtZDe18bECGY9yVcjaxu/uMk/dme/q0QQ=
Subject key identifier: 94:84:22:35:88:0E:2F:13:B0:3B:65:98:1D:9C:96:2C:27:7E:CC:B0
Certificate issuer: /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial: 010D0C9F432858486EF5B859C9119684EA51D540
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/0409117d-54a8-39ec-bb51-017bc80bd644.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 16509
IP address blocks: 164.55.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:b8:59:c9:11:96:84:ea:51:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=3a33ac31-d94f-4944-b0c4-c16a917b64bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3d:20:12:f0:d9:5a:39:40:b6:01:90:ea:c4:
48:bc:63:41:75:0e:f8:9b:89:17:34:eb:51:2b:71:
05:b2:eb:72:3c:79:0a:d4:5e:56:20:0a:b7:0d:ed:
91:f7:37:cf:ea:67:ec:36:be:62:85:6f:d3:63:69:
bc:df:76:11:e6:e3:a3:c1:bb:30:67:38:71:7a:24:
43:91:d1:b8:f5:a1:a8:17:7b:8a:9d:20:31:b6:62:
72:f9:e1:f8:9f:95:bb:2d:72:21:12:de:c9:af:d9:
3a:35:0f:3c:6c:6f:54:d4:2d:e8:d5:79:8c:a9:ae:
64:d7:ed:7b:a5:db:b2:4c:5c:0f:ea:fe:92:c6:df:
eb:ec:16:63:17:78:12:95:2d:59:6f:db:4e:a8:2a:
38:5a:5e:e9:97:1d:e8:12:95:f0:d2:3b:71:3a:c0:
67:7b:97:24:a3:59:7a:5e:9b:98:e0:76:b1:8d:76:
21:f4:74:75:cd:3c:fd:a4:95:99:2b:4a:0d:2a:ac:
6f:47:e4:db:51:87:0b:83:37:d5:6f:a9:c1:0c:36:
25:d2:97:c2:56:07:fa:6d:2e:1f:85:01:27:40:1e:
99:8e:af:87:fe:c1:20:92:6d:2e:bd:07:75:c5:d0:
5b:33:e0:34:33:e9:9f:28:82:9e:d5:3f:88:ff:71:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:84:22:35:88:0E:2F:13:B0:3B:65:98:1D:9C:96:2C:27:7E:CC:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/0409117d-54a8-39ec-bb51-017bc80bd644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
X509v3 Authority Key Identifier:
keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
sbgp-ipAddrBlock: critical
IPv4:
164.55.233.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:f1:26:86:ec:44:f2:f8:22:98:cb:bb:c3:32:ac:db:9b:12:
c6:fb:82:ef:48:b4:ef:04:37:16:f6:1a:d3:ef:f4:41:67:b8:
ed:4c:92:b8:b0:b2:cf:e1:c8:7a:25:9e:c8:08:2d:5c:71:aa:
22:fb:70:99:82:61:b9:4c:d6:4a:81:d4:f6:7e:60:a5:c9:48:
69:ac:5b:ee:41:49:59:ee:6e:ce:db:d5:70:79:23:c5:a4:af:
94:01:6c:74:41:ad:0e:1d:8a:50:1d:e0:10:b8:e5:ba:a9:9c:
1d:d4:dd:67:d3:1d:56:b9:d7:1d:b7:9f:93:92:ec:4c:64:44:
9f:eb:56:3b:e4:46:c4:7c:24:23:fb:94:5c:5f:90:5d:44:6a:
4f:49:9d:2f:49:1e:89:af:3a:aa:0c:da:e1:6b:d0:da:9d:6a:
69:20:4e:68:2b:34:28:7a:ba:a0:04:66:3a:8d:ab:58:b4:e5:
65:1c:bc:a6:f3:ec:e3:09:01:b9:4d:4a:60:b2:a0:ef:80:92:
fc:c6:6c:99:ee:07:57:52:c2:cf:a3:29:64:a6:b0:8d:d7:d5:
62:6b:5d:69:1a:f8:f4:95:ea:88:96:57:88:5e:7f:5c:fe:06:
eb:75:1e:2c:f9:08:92:3c:c8:06:f1:2d:12:00:fd:fc:70:6e:
53:31:07:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:03 2025 by rpki-client