Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a33fbf21-f50e-3e09-8ce9-64c806432986.roa
File: a33fbf21-f50e-3e09-8ce9-64c806432986.roa (raw, json)
Hash identifier: JVXOHOPgAlZFg4eCsLKJB+usizp44RDUH+IVE8r7fMo=
Subject key identifier: DB:FD:A0:E2:8F:4D:3A:5A:CC:58:60:C7:A6:DD:54:43:90:8D:64:1D
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848E2D19CB1681D26F1BEA89970
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a33fbf21-f50e-3e09-8ce9-64c806432986.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20115
IP address blocks: 159.111.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:9c:b1:68:1d:26:f1:be:a8:99:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=1d49fb00-e3c0-43db-92ee-0101945f733c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5c:ce:2a:0e:b5:a4:9b:a6:2d:80:58:e9:a0:
c8:10:ee:6c:f5:7b:82:3e:f6:55:56:36:c3:d1:a7:
52:b3:d9:9f:9f:06:9e:87:2b:8a:94:ab:5b:f6:e6:
7c:52:e2:f9:92:78:f4:92:bc:e0:e1:1c:b6:e3:8c:
8e:67:6f:40:a1:f2:e5:92:4b:ee:e0:6d:95:24:69:
59:3b:af:34:02:bf:71:66:91:04:7c:4f:fc:b9:10:
d7:3c:81:5e:5c:a8:02:c1:56:76:c5:a6:bb:f5:26:
0e:43:b3:68:f1:8f:52:69:d9:be:55:94:51:a3:f7:
21:08:c4:34:fb:42:71:5e:46:8f:f7:91:f1:94:2b:
13:eb:9b:18:9f:3f:16:92:7d:8b:41:fd:db:06:88:
97:13:46:f5:f7:84:d3:18:97:9e:aa:6c:1f:a4:7d:
8a:a6:18:60:b0:74:c3:78:13:af:a7:81:b2:bb:ab:
85:e7:95:1e:dd:b4:64:23:04:ad:6a:d6:8f:62:95:
0b:00:00:4c:24:0e:35:3f:ba:a0:fb:6c:f0:5d:9c:
b1:2e:61:13:05:ba:70:e1:dd:7b:63:a6:8e:31:25:
12:9b:c8:97:e1:fe:34:af:b1:a8:c5:e0:8f:66:11:
31:c7:03:00:a5:87:82:15:9d:4e:04:ae:3a:1a:08:
d3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FD:A0:E2:8F:4D:3A:5A:CC:58:60:C7:A6:DD:54:43:90:8D:64:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/a33fbf21-f50e-3e09-8ce9-64c806432986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
159.111.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c8:d0:e9:70:f7:43:a1:6c:47:1b:09:0d:0b:76:14:bd:4e:ab:
5b:aa:17:3b:80:4e:53:08:33:ca:ff:6c:15:d8:5f:f0:c1:01:
c7:49:9d:5e:56:39:2c:ed:df:e4:01:d8:03:cf:b1:b0:0b:6d:
0e:ef:1d:d9:1b:d9:a2:d6:f7:0b:65:24:3c:7f:a6:6a:fd:6e:
50:1a:56:bb:ef:c1:7d:4a:42:d5:0b:51:71:7b:51:60:f4:39:
f1:31:a3:a3:db:4b:95:07:ed:4b:c5:91:d7:d7:94:b7:9d:8a:
d1:d1:e3:d7:3e:63:c8:e2:df:93:ac:32:cf:da:ad:38:64:ba:
ac:9e:9d:0a:51:a6:a1:31:ee:a2:fd:c1:ff:a4:9e:e5:84:49:
c2:9d:9f:88:49:fa:40:06:95:18:d0:8a:a3:65:fb:cc:4e:90:
9f:44:af:af:ad:ed:22:41:7e:04:ff:84:da:7e:6d:a2:a8:f8:
eb:f0:5b:0a:dd:a9:db:37:d8:6f:15:cc:23:4b:b6:68:79:ce:
05:a8:43:de:b6:10:e2:6e:2d:a1:55:af:c0:ba:82:b4:90:42:
70:8e:be:91:fa:3c:2c:88:81:d5:5e:ee:12:d4:b7:ef:3d:14:
54:ee:b4:5e:4b:a6:b7:4d:35:cf:43:18:68:b1:58:57:82:e9:
42:6d:e6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:40 2025 by rpki-client