Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa
File: fd05dd98-3073-3868-a202-0a6c4f041811.roa (raw, json)
Hash identifier: 2zJq/n/HDo7oPGgejxlEQs/YkLSz79UoWWr4mO8o55k=
Subject key identifier: 2D:36:46:AE:0F:79:01:86:FF:7F:BD:75:2E:CE:CE:42:3E:31:0D:17
Certificate issuer: /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial: 010D0C9F43285848E59BD2140BCF9D0C5C961080
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 203
IP address blocks: 161.151.162.0/23 maxlen: 24
161.151.252.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:d2:14:0b:cf:9d:0c:5c:96:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=7747c604-4c5b-4d42-b795-60529d7f2e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:a0:8a:7c:6e:c1:92:39:b6:0d:7e:1e:57:
22:8c:f8:03:ed:90:51:35:a0:b2:a7:03:d1:7c:1c:
49:3c:ee:a2:a2:41:46:de:ad:af:7a:c6:86:b7:a7:
cf:cb:67:77:22:4d:c3:12:16:b2:09:10:34:bb:10:
ce:26:89:55:d7:d5:25:45:ae:72:15:23:f5:cb:1c:
79:da:da:b0:02:63:5b:30:0f:ca:20:82:39:6d:13:
cd:62:70:0e:d0:e1:34:78:5e:4d:94:b5:73:83:95:
e1:c0:b2:65:f0:ef:5d:23:ed:18:45:26:bd:24:06:
55:5e:1b:38:f1:fe:17:8a:72:90:e9:63:3f:dd:a3:
85:67:5d:01:57:eb:9e:73:13:b0:ed:95:2c:8f:95:
d5:de:22:59:a1:6f:ab:51:2b:7a:47:e6:f0:3b:fb:
a6:32:08:00:19:e2:77:c0:55:12:f0:a8:f3:62:6e:
d8:9e:7c:b3:40:db:87:40:17:24:42:60:ad:6d:f7:
b6:85:3c:2f:54:b3:40:b6:bb:06:7c:57:41:e3:5c:
ea:1a:d3:91:5d:e9:7d:17:0e:c1:4c:00:a1:79:3d:
2a:7c:3c:bf:8e:68:ba:91:fa:42:1e:50:d3:a1:55:
70:ec:5e:0f:c0:e6:a5:d1:b1:c4:70:79:83:2d:f9:
64:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:36:46:AE:0F:79:01:86:FF:7F:BD:75:2E:CE:CE:42:3E:31:0D:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/fd05dd98-3073-3868-a202-0a6c4f041811.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
X509v3 Authority Key Identifier:
keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
sbgp-ipAddrBlock: critical
IPv4:
161.151.162.0/23
161.151.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:65:a6:c7:df:91:1d:e7:fe:c2:71:a5:0d:9f:37:e3:a3:f5:
67:56:b7:50:ec:8e:2f:a9:97:61:41:d5:db:db:b8:0e:4f:9a:
43:3a:7c:b6:67:ce:c3:b3:33:f3:d9:d4:5b:b1:00:bc:8c:4a:
26:93:d4:24:85:f0:de:40:0e:1d:bf:7d:1b:da:74:2b:92:72:
e5:5d:1e:9c:b4:19:17:72:5b:88:f4:7e:2b:ba:ca:79:f9:39:
81:1b:2f:22:2e:95:cf:6a:13:8a:89:f6:53:ef:fa:bf:51:ea:
cc:ba:97:aa:8d:dc:b3:38:75:5f:f8:49:9f:59:d5:c8:0e:f7:
6a:9c:50:d9:6c:cc:f3:c4:3d:e2:cc:67:55:f2:6e:b3:2c:bc:
d3:7e:cd:2b:df:53:2f:ac:11:f6:02:0d:35:96:42:57:73:9b:
27:da:39:66:42:c4:79:d7:df:9a:35:83:4b:d0:01:20:d6:3c:
b3:5d:5c:c7:7c:98:81:c5:47:44:a6:f1:2a:a0:cc:ce:75:5f:
f4:ac:c5:a4:41:89:c2:06:cb:c3:49:a9:bd:67:f7:ea:81:d4:
5c:f8:98:71:48:a3:9e:99:e6:28:e7:9d:36:f0:4e:34:7e:5c:
2e:a9:81:43:8b:87:cd:ac:c2:dd:be:c7:05:4b:8f:28:ba:af:
b7:51:25:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:54 2025 by rpki-client on console.sobornost.net