Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/adc7b3e0-e9b8-3353-be01-0e3b09a8b8ca.roa
File: adc7b3e0-e9b8-3353-be01-0e3b09a8b8ca.roa (raw, json)
Hash identifier: MwSbBu0jgT8JW5Q2nZ8t4B6zJcMJd1sdoZKUDbPZZBA=
Subject key identifier: F5:EC:67:B6:D9:77:A0:57:6C:FA:00:D4:DB:F5:49:7E:2F:09:D9:49
Certificate issuer: /CN=0457dcf9-b13b-4e0f-b761-d109e41cd945
Certificate serial: 010D0C9F43285849419E7B6F6150A13B7A411F20
Authority key identifier: 5D:A7:A4:B5:AF:64:F3:A5:3D:AD:D3:9C:59:CE:66:B5:54:C6:45:36
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/adc7b3e0-e9b8-3353-be01-0e3b09a8b8ca.roa
Signing time: Fri 21 Mar 2025 01:00:39 +0000
ROA not before: Fri 21 Mar 2025 01:00:39 +0000
ROA not after: Thu 19 Jun 2025 01:00:39 +0000
asID: 393301
IP address blocks: 162.248.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:41:9e:7b:6f:61:50:a1:3b:7a:41:1f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0457dcf9-b13b-4e0f-b761-d109e41cd945
Validity
Not Before: Mar 21 01:00:39 2025 GMT
Not After : Jun 19 01:00:39 2025 GMT
Subject: CN=1456985a-45fc-43ed-b007-b923bbe55ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:91:ec:8e:b3:3d:e0:30:41:42:ae:60:33:
eb:ad:d8:29:0c:a0:76:5a:ae:21:38:8d:bf:ad:65:
61:40:40:6c:36:05:b4:11:70:09:16:a0:5f:55:00:
bf:df:5e:16:5c:54:44:e1:dd:d2:23:38:b2:46:83:
8a:82:7e:2f:24:95:a3:ed:d0:d5:09:fe:e9:a7:56:
3c:ba:b8:36:06:a9:40:ba:98:b1:d1:f5:6e:55:73:
73:3e:27:fd:5e:e4:69:a3:8d:9c:51:69:24:9c:35:
6b:26:8a:89:e1:0e:e4:be:b4:06:0f:71:46:fd:51:
a5:13:f5:c3:03:b5:b0:de:25:87:28:fb:cd:e3:c6:
b3:c6:78:25:db:4f:d6:51:9c:90:73:f2:83:d5:cf:
e6:01:85:b2:b7:08:84:c7:d3:df:d8:22:73:ef:9c:
7d:00:2d:30:69:0d:86:81:87:12:fd:49:15:b2:b0:
3e:af:d0:99:4e:74:39:23:86:1e:c9:55:2d:26:de:
fc:dc:8b:4e:05:d4:2e:e9:af:7e:36:ec:c0:2b:09:
79:08:34:fe:28:e3:e1:39:31:9a:8e:22:44:e0:9b:
08:dd:42:44:07:23:63:28:b6:95:4f:27:a8:87:a2:
1f:1f:37:e8:52:17:77:be:bf:43:7a:af:04:25:9f:
ee:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EC:67:B6:D9:77:A0:57:6C:FA:00:D4:DB:F5:49:7E:2F:09:D9:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/adc7b3e0-e9b8-3353-be01-0e3b09a8b8ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945/0457dcf9-b13b-4e0f-b761-d109e41cd945.crl
X509v3 Authority Key Identifier:
keyid:5D:A7:A4:B5:AF:64:F3:A5:3D:AD:D3:9C:59:CE:66:B5:54:C6:45:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0457dcf9-b13b-4e0f-b761-d109e41cd945.cer
sbgp-ipAddrBlock: critical
IPv4:
162.248.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:13:ee:f4:ad:17:5a:a8:79:e5:1a:8f:63:8d:44:38:5d:e5:
f8:29:fa:1c:b6:d4:f7:3f:76:7e:0a:da:fd:d8:cd:14:b2:d6:
0d:dc:9e:cc:c0:15:14:0b:46:43:63:24:f2:f8:f6:e7:3d:68:
b2:aa:a9:8f:88:29:85:ff:9d:db:1b:03:b9:11:9f:fd:7d:65:
7d:99:a2:13:df:9d:2a:17:85:59:02:d8:84:4d:92:f3:f4:c0:
85:45:79:18:5c:7d:f0:0b:01:b1:6e:da:02:bb:5a:e2:8f:87:
67:5c:39:9b:f9:94:40:50:15:c4:62:d4:34:c8:f3:85:84:b9:
c4:ae:e4:72:25:a1:48:6a:57:25:56:8f:d3:d3:12:ea:1f:61:
3b:25:1a:8c:fa:c4:d2:3a:2b:15:fa:f9:6b:ee:01:fe:54:84:
19:31:43:95:64:18:72:54:40:74:0f:74:93:2d:ab:c6:d8:38:
48:ae:99:24:d4:0b:67:e6:40:d3:c6:07:7a:d0:94:ce:38:f6:
3f:03:2b:f5:f6:78:08:78:60:96:0b:99:29:ed:d2:a0:fd:60:
34:22:1c:cd:c0:10:1d:ab:b9:50:b0:0e:6b:41:c5:a5:ca:01:
66:3a:3d:1d:9f:1c:68:dc:33:a1:f3:4e:56:1a:70:04:7d:56:
c7:60:14:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:40 2025 by rpki-client on console.sobornost.net