Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b67f7b-dd68-3772-a536-83a136b8df01.roa
File: b2b67f7b-dd68-3772-a536-83a136b8df01.roa (raw, json)
Hash identifier: 3iboOS2mCSrmx5k/qDYSCSjEyVzZGMBiTUBpfTGcYKE=
Subject key identifier: 14:04:2E:BD:1A:D2:4E:AF:8D:DE:68:84:7C:EF:39:8D:67:3A:B0:51
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F43285848C57E93117481768C1B2CED40
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b67f7b-dd68-3772-a536-83a136b8df01.roa
Signing time: Tue 04 Feb 2025 13:56:10 +0000
ROA not before: Tue 04 Feb 2025 13:56:10 +0000
ROA not after: Mon 05 May 2025 12:56:10 +0000
asID: 30036
IP address blocks: 150.195.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:7e:93:11:74:81:76:8c:1b:2c:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Feb 4 13:56:10 2025 GMT
Not After : May 5 12:56:10 2025 GMT
Subject: CN=ac20fd6b-d184-44eb-ac29-87c230ef550b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:cc:19:70:f9:0a:cc:cd:a8:c3:d7:ee:73:
42:16:b4:09:3b:0a:c7:4a:70:88:5c:30:0a:81:6d:
74:4a:57:80:a7:9f:02:58:2e:28:b5:6e:13:0d:2b:
fe:72:4f:ba:0f:2c:00:96:75:8b:11:6f:a8:67:ca:
ac:d4:d3:b5:6a:31:f6:4f:f0:c2:27:7f:c4:75:cd:
1d:9b:04:25:04:87:ac:c3:b7:d7:c6:79:d8:b8:c7:
60:14:32:ec:c3:29:38:62:17:a7:19:42:78:45:4b:
4a:24:0c:d6:c5:ec:f0:6d:11:ab:c7:6b:3e:b8:21:
ba:9b:0b:3d:f3:b6:51:1c:18:88:30:10:a0:b2:04:
f8:62:9a:e9:37:93:d5:4c:f4:2f:0c:73:e1:2d:56:
bc:98:50:d5:ae:7f:02:4e:75:0a:a0:01:ba:dc:99:
c2:11:0d:79:bd:85:0f:e7:61:91:2a:dd:ef:11:6c:
23:ec:e1:22:07:e4:4d:8e:fe:4a:30:a3:69:3a:f6:
9e:60:7e:72:04:1e:31:9f:7b:1d:92:fa:9e:d5:0b:
19:8f:dd:e6:f9:60:00:1b:a9:bc:e0:5c:47:66:0a:
3a:20:de:c4:9b:29:13:97:5a:f5:29:10:60:95:61:
2b:5c:a4:b1:0f:4e:43:f2:76:2a:16:ad:9b:f1:fc:
fe:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:04:2E:BD:1A:D2:4E:AF:8D:DE:68:84:7C:EF:39:8D:67:3A:B0:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b2b67f7b-dd68-3772-a536-83a136b8df01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.195.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:31:ae:a5:cd:f9:9d:65:2a:dd:55:f3:bf:ef:25:52:9e:31:
13:63:13:cb:c3:43:13:07:c1:ca:20:44:a0:11:5b:12:56:17:
59:b8:d1:58:58:c7:5a:01:27:d9:80:c7:fb:7d:37:bd:c8:e6:
91:87:47:ca:09:de:6d:ce:98:0e:07:33:34:11:e2:7b:e1:78:
42:7e:62:31:0c:e2:a7:75:83:b7:6e:88:b2:84:80:cf:c3:5a:
f4:a8:c6:c1:66:33:3b:c7:d9:b4:d2:c3:66:d0:3d:b5:08:51:
1e:a8:c7:84:f5:24:17:18:38:87:c2:a3:c6:13:f3:b2:ad:10:
7e:ac:e6:13:48:2a:d2:ae:cb:8b:3f:bc:6d:9f:69:5e:db:fe:
2f:6b:7a:5a:b6:ab:97:42:d7:65:e5:8b:16:69:be:ad:ae:18:
3b:ed:aa:96:d9:c5:1d:a0:8c:5f:c8:64:cf:f0:c2:d0:3f:c5:
9d:2a:a6:ee:4b:05:1f:73:99:31:67:31:f6:3e:8d:23:e1:84:
56:85:a9:ff:76:0d:54:92:39:fb:20:2c:15:e4:f0:43:ab:95:
2e:b3:cb:e8:4c:41:63:b1:02:be:6f:be:1f:3c:38:22:43:90:
47:40:25:9d:02:16:37:e9:e6:6e:38:9d:e1:11:27:11:2e:a6:
70:b8:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:29 2025 by rpki-client