Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/383db263-dfa3-378b-9465-6691c04a9ccd.roa
File: 383db263-dfa3-378b-9465-6691c04a9ccd.roa (raw, json)
Hash identifier: l79/nexuwORzm6aRxoTKhR5kcIFD36nMJHvSTGq3pZ8=
Subject key identifier: 5C:4A:EF:EB:AD:08:4F:F2:F6:20:AF:9D:92:52:86:79:20:42:A6:1A
Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial: 010D0C9F432858493673BF1F9398A1C1985BD080
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/383db263-dfa3-378b-9465-6691c04a9ccd.roa
Signing time: Mon 17 Mar 2025 01:00:37 +0000
ROA not before: Mon 17 Mar 2025 01:00:37 +0000
ROA not after: Sun 15 Jun 2025 01:00:37 +0000
asID: 16509
IP address blocks: 159.41.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:36:73:bf:1f:93:98:a1:c1:98:5b:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Validity
Not Before: Mar 17 01:00:37 2025 GMT
Not After : Jun 15 01:00:37 2025 GMT
Subject: CN=ca2ff3f4-bd13-468a-b674-0de9d7f4172e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:74:44:07:b4:df:ad:83:fd:3e:7c:a1:20:
27:ef:ae:ff:e0:70:57:25:d3:05:ca:3c:1b:74:e4:
9e:4a:00:3a:91:3c:ec:c8:99:53:8b:34:fd:ff:c1:
07:ad:22:b7:5a:45:37:18:a2:1c:2a:ab:f1:8b:8e:
9d:35:db:7a:f9:43:7d:83:38:d5:c7:e3:b2:20:e6:
e6:66:3b:60:3a:7c:08:b2:8c:56:f4:45:c5:67:80:
fd:1c:bc:10:a2:99:ee:69:b5:a1:f9:a4:0e:2c:0a:
e7:17:f2:8c:c8:67:1a:ce:9b:c5:d1:ed:98:3e:19:
08:4f:4d:2d:d1:3c:9d:2e:f3:30:44:f2:49:da:20:
eb:d0:7c:7a:23:24:f9:54:61:fd:26:ee:20:42:1f:
4d:8a:d3:76:a2:57:55:4c:fa:87:36:5b:5d:e3:e0:
23:18:0e:74:6e:e3:88:6b:78:b3:a2:bb:40:c5:f6:
6d:43:fe:87:30:1d:27:99:b5:cc:eb:b7:f1:ce:91:
c2:dc:75:5c:70:2f:fd:e8:32:60:dc:0c:3b:7c:ba:
fb:36:ed:24:d3:83:f4:29:8a:c9:b2:cd:b2:82:c6:
c7:d0:b9:3c:44:8c:65:74:5d:1b:82:7d:a3:39:e7:
78:f0:87:35:87:a9:0b:d2:9f:a0:54:5b:1e:f2:66:
12:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:EF:EB:AD:08:4F:F2:F6:20:AF:9D:92:52:86:79:20:42:A6:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/383db263-dfa3-378b-9465-6691c04a9ccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
X509v3 Authority Key Identifier:
keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
sbgp-ipAddrBlock: critical
IPv4:
159.41.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:9f:76:bd:7c:5d:6d:4e:9a:57:de:01:ea:ec:d0:8e:ad:75:
d2:36:8d:b0:68:0a:d0:97:9b:27:0a:01:bf:17:11:e0:ae:d3:
6e:58:ab:cc:4a:0a:ed:71:65:8d:42:90:e7:ea:dc:54:c3:d9:
4d:d4:a5:9c:2f:b1:97:3e:c1:b3:8b:e8:ee:2d:eb:24:56:f8:
5f:e3:e7:03:a2:1d:95:4e:38:4f:f3:47:70:ed:30:4e:96:6b:
98:9b:05:87:1d:45:83:6d:7c:a8:6d:5e:e0:24:85:3c:39:33:
52:2e:4b:69:f9:04:5e:93:7a:52:7e:40:fe:73:61:8e:a2:05:
85:87:a1:fc:c3:a3:12:a5:e4:b3:ea:98:c9:13:c8:d8:29:35:
1e:46:f3:65:d3:88:a2:57:99:61:dc:e2:e1:c7:b3:e6:bc:a5:
73:06:ca:63:68:57:6b:3f:2d:dd:62:fd:87:b9:c1:90:67:b3:
85:1d:c9:52:56:30:89:65:86:9e:6c:8f:93:ae:22:83:6a:d3:
e8:01:b2:9c:e8:74:58:75:90:04:86:64:24:fa:b3:3f:b0:93:
92:be:f6:b3:a0:eb:9f:dd:20:de:10:4b:7a:ff:64:21:31:49:
69:5d:59:1a:fc:04:3d:1f:f8:31:ff:7f:c4:1d:8f:59:b0:30:
f8:51:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:00:25 2025 by rpki-client