Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa
File: cf326abc-d15b-3239-975e-23598674000e.roa (raw, json)
Hash identifier: g/xGm1TKWJGrYMlG2QpKq8iQReMYT4hFSskWl+jNhJE=
Subject key identifier: 36:B9:9B:0A:EB:3F:E0:F6:0E:05:87:63:E5:42:AF:74:03:CB:10:3D
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584957F419419B548FABF67E3000
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.52.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:19:41:9b:54:8f:ab:f6:7e:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=6025f26d-02e5-4b19-b664-6ff1132046fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9e:4d:74:ce:77:0c:f8:e6:c5:52:22:cd:8a:
38:4c:12:c5:be:b5:40:20:af:b4:af:99:66:4c:bc:
63:f4:46:fd:ea:e5:c9:ab:83:4b:f9:73:7d:c6:7c:
d4:55:82:36:c8:d8:44:f9:6e:1f:84:07:bc:2a:ac:
f7:34:8c:3b:81:86:15:8a:02:39:2e:0a:d0:3c:1a:
b4:41:93:24:bd:5a:81:fa:85:cd:bc:0c:ef:8e:75:
de:37:e9:be:fc:38:73:55:c4:7a:69:5a:3e:13:ab:
a9:cd:f9:09:41:13:3f:77:5e:80:a4:c9:d3:87:2b:
88:32:89:36:6d:db:89:40:86:68:89:44:34:9e:44:
23:fc:ce:a1:83:00:55:83:87:05:d2:68:04:b6:61:
21:ab:0a:63:fe:7a:33:f3:6f:cd:16:81:9a:5e:66:
f4:9d:04:c2:28:48:15:a0:94:79:3b:fb:25:45:91:
1e:95:e9:06:6e:6a:59:53:fe:38:c1:12:00:3d:b7:
7c:d7:82:32:a6:bb:34:71:0e:08:90:c0:ad:5a:1b:
b7:c6:46:a3:56:6f:62:6a:f9:0f:9b:10:40:a5:4e:
4b:8b:6a:bb:c6:c8:1d:1a:fc:cd:e9:05:6b:ac:fc:
3e:f7:d2:34:c4:7c:6a:47:06:a7:a6:ea:b0:04:f3:
57:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B9:9B:0A:EB:3F:E0:F6:0E:05:87:63:E5:42:AF:74:03:CB:10:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf326abc-d15b-3239-975e-23598674000e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.52.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:10:dc:88:e8:65:87:f8:10:02:a1:c6:e5:d0:0c:d7:55:35:
1f:dc:ff:60:e8:6e:17:49:43:c3:f6:a4:c2:7c:5e:27:ca:ee:
77:e4:82:d3:fb:a5:4d:e2:e6:0c:fe:a4:b8:a4:b7:9a:12:fb:
77:ed:f7:51:37:68:af:3b:f8:87:c7:a0:4d:51:b5:af:75:46:
74:cc:84:57:79:96:f2:72:86:1d:57:e6:ab:8c:e4:f9:bb:7b:
a5:54:a2:eb:68:59:f1:0a:46:a3:b4:04:a5:51:72:5e:8e:32:
92:35:74:03:04:78:49:22:7c:04:fb:d9:1e:d0:ef:0c:36:30:
21:1d:1b:ef:0c:27:6c:14:db:28:e7:96:be:54:7f:1b:50:e0:
47:ec:49:97:34:d3:d3:d4:a2:bc:f5:95:71:9d:5e:a3:65:d4:
7a:0e:4b:78:26:73:a1:87:a5:da:ad:d4:28:b3:95:9d:45:54:
f9:02:57:c9:86:e4:05:61:fe:28:0d:d0:18:12:59:a8:69:d9:
0b:8b:32:59:4f:41:2a:1f:94:1f:8f:1f:93:ee:45:fc:13:ca:
c6:f2:28:3c:5e:35:7c:b2:53:91:46:a2:bb:d8:bf:5d:0d:85:
7e:1e:1f:f9:3f:da:c0:a4:e9:d1:06:b1:6f:b9:35:78:dc:2b:
e2:34:67:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:29 2025 by rpki-client