Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/96525ac2-3951-316b-b1c6-8b0b84089950.roa
File: 96525ac2-3951-316b-b1c6-8b0b84089950.roa (raw, json)
Hash identifier: 5wl62xByPIgu/ca7wHitXlQ8vr0xN+s7WxLhbxcB5Rs=
Subject key identifier: EE:58:67:1E:F8:18:E7:AC:90:48:F6:CE:21:12:71:43:4D:9D:78:80
Certificate issuer: /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial: 010D0C9F432858486EF5BB92DBC094EA7620CDA0
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/96525ac2-3951-316b-b1c6-8b0b84089950.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 14618
IP address blocks: 164.55.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:bb:92:db:c0:94:ea:76:20:cd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=4cf209f9-ddfe-4993-9754-b81ad5de7a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:33:48:c7:95:c6:f2:19:fe:59:10:ca:ff:
9b:c1:eb:cc:2f:29:1a:a5:fd:81:2a:a9:ca:22:31:
20:3d:22:bd:1c:be:56:1a:1a:e6:7b:78:9c:df:18:
44:3f:58:9c:66:0c:4b:de:9e:61:58:75:e5:78:2f:
a4:22:b9:c4:93:5c:04:f2:78:25:ef:3e:ff:5b:05:
2e:73:b7:9a:23:ce:fc:10:a0:37:f8:51:98:77:d4:
5c:85:d7:35:b4:85:46:f4:08:ed:be:b3:0f:58:c1:
67:df:fa:a6:1c:c4:8e:0b:63:6f:b6:90:8d:4f:e7:
af:43:ac:6f:57:08:b6:d2:26:7a:7a:a2:f3:ee:8a:
2e:2c:45:f2:f4:c1:19:9d:09:07:dc:30:0d:20:e2:
7d:bc:92:16:41:de:25:49:55:e8:f1:88:04:6c:92:
42:55:f2:86:73:19:f6:d9:dc:5f:b7:c0:0d:13:a1:
a9:f2:b5:52:42:ff:b5:89:ad:4f:47:2c:1b:94:aa:
22:08:fd:d9:67:63:c7:f2:b9:99:be:6a:b7:6d:ed:
7e:60:8f:ac:d2:0e:91:d4:cf:4d:93:fc:04:12:e8:
ca:91:8d:44:e5:00:af:1f:cf:81:85:05:8b:06:95:
83:a6:63:36:cd:2f:0a:0d:cc:9e:3a:77:fb:dd:fe:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:58:67:1E:F8:18:E7:AC:90:48:F6:CE:21:12:71:43:4D:9D:78:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/96525ac2-3951-316b-b1c6-8b0b84089950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
X509v3 Authority Key Identifier:
keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
sbgp-ipAddrBlock: critical
IPv4:
164.55.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:1c:bc:98:82:9f:e5:60:28:9b:91:cb:fb:22:c8:b1:ee:94:
89:93:3f:71:3c:ef:5c:b2:6e:4e:10:da:00:a7:6d:5e:3c:bb:
85:1c:27:8d:e5:63:1f:9c:61:9b:71:6a:4a:12:48:ac:fe:c3:
25:70:23:c3:ff:46:f3:8f:3d:a8:fd:23:dc:f5:e0:03:93:d5:
c6:ad:32:e8:f2:51:59:68:83:f9:de:22:40:59:65:5c:91:93:
10:bc:bc:1e:81:a4:52:d3:8a:37:e8:1e:99:4f:57:7f:ef:8b:
e0:a8:0e:3d:5b:80:48:a9:64:66:e5:62:86:31:16:0f:7c:07:
71:db:bb:29:21:5a:dd:d4:0d:0c:e4:3e:88:9f:20:77:37:c6:
8f:71:20:1d:b3:bc:88:1f:48:df:12:c3:d6:cb:41:d9:31:22:
38:25:de:c3:e9:c5:0d:e2:93:e4:11:86:2e:9f:2a:d5:59:a8:
fb:69:5e:4f:ec:23:ed:d2:6c:6a:a9:3f:ff:c9:67:92:fb:e8:
cf:73:1d:5f:0d:20:37:de:97:69:3c:8e:52:25:e8:c3:c4:6f:
8e:d0:9a:53:91:ce:71:7c:26:ef:83:9d:09:1d:e4:5b:f8:d1:
d0:6c:f8:ee:68:d8:95:20:19:d0:7f:47:43:7d:ff:74:b6:dd:
5b:de:ca:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:57 2025 by rpki-client