Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3830910a-5f6a-3411-a058-552266331016.roa
File: 3830910a-5f6a-3411-a058-552266331016.roa (raw, json)
Hash identifier: 3CTSHtdk8+8zYNIhdJ2AqfkE7XiRR5Z6O6mI3iYLexM=
Subject key identifier: 84:CE:B2:91:43:34:A2:6E:BE:A8:65:0B:23:A4:E8:94:70:B7:C2:F0
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D166104A58264898A98A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3830910a-5f6a-3411-a058-552266331016.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 47.225.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:66:10:4a:58:26:48:98:a9:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=9c33edf8-4713-4ac9-993d-f3085c447f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:b2:c2:f0:17:bf:b5:3d:0b:68:09:1f:34:
d3:48:88:87:d2:1e:25:1e:af:5c:b5:c3:86:b1:1d:
08:5d:f0:fb:56:48:0f:37:ee:f5:c6:6f:72:a0:a2:
09:86:66:71:00:bd:ec:58:60:0f:bf:e1:56:3e:3a:
8b:46:e1:6e:6e:07:36:30:61:4d:4b:ad:a8:95:a7:
98:a8:58:40:e0:5c:51:9e:52:b4:e9:f1:d1:02:c8:
6f:bd:16:aa:81:da:a3:b0:65:d0:9c:6a:78:34:b7:
a0:e6:ca:32:5b:b7:48:83:fe:dd:4c:d2:4c:12:a2:
17:6c:2f:aa:72:78:24:a6:b3:58:e9:2e:34:a5:40:
59:ce:d8:a1:30:12:85:5b:29:20:16:e1:60:b2:7c:
e4:d2:11:ad:ac:20:ec:62:71:b4:02:f1:79:db:38:
8f:80:79:1b:64:c2:51:c7:54:ef:f3:5f:73:9c:70:
95:bb:89:39:87:f1:19:90:9f:84:be:fc:40:72:1f:
e3:dc:29:1a:e8:46:dc:ce:e1:1d:b6:f3:87:86:9f:
e7:da:2f:f4:9e:43:ec:c6:72:b9:b4:d1:17:fb:83:
50:c9:06:10:f9:d8:88:1e:2c:a0:0e:d4:4e:19:b6:
fe:5f:88:d1:86:b2:34:44:3d:d5:37:d5:cd:2f:89:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CE:B2:91:43:34:A2:6E:BE:A8:65:0B:23:A4:E8:94:70:B7:C2:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3830910a-5f6a-3411-a058-552266331016.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
47.225.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:47:00:c0:5d:8b:3e:2c:99:48:80:ea:30:0d:a0:71:4d:26:
09:4a:ec:0b:91:89:58:46:24:8f:63:0f:90:46:91:c9:5e:f6:
7e:f6:a3:31:5e:ef:3c:e6:54:27:d0:22:03:81:7d:03:43:54:
1c:21:c8:06:25:ac:b6:2c:6f:fa:dd:20:95:5e:b7:19:f5:a6:
ba:53:7d:31:28:c4:a7:cc:d5:7d:58:0c:9a:13:16:bc:21:42:
91:b2:4d:47:42:22:8d:c5:dc:32:1c:5b:be:b8:ab:79:85:bb:
6a:ae:fc:83:20:47:28:e8:af:e1:bb:a4:6e:91:4e:bb:dd:02:
6e:0a:db:01:08:e3:e0:d0:09:ab:8b:1d:bb:65:84:a3:66:50:
f3:4a:95:03:18:9c:2c:98:b8:ee:e0:a0:5b:91:11:85:d2:5f:
05:37:e7:02:2e:f4:e6:d4:51:cf:e6:5d:05:76:48:47:0e:6c:
48:74:dd:97:d2:cb:14:91:cb:16:b1:3c:03:e5:79:85:29:67:
c6:02:2c:32:72:5d:ad:b6:8c:58:8f:8b:16:1d:2a:77:46:81:
d6:04:c5:17:88:e9:85:5b:05:66:71:a4:5b:5e:13:c7:8a:a6:
85:e3:83:23:8e:91:f4:5e:f6:81:4a:46:66:2c:ed:4c:86:2e:
ee:68:6e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:30:13 2025 by rpki-client