Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa
File: f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa (raw, json)
Hash identifier: PMY6x7EjbyM3FO/3DQCAUtzGoaWSv4HjnSjXaDA+ezo=
Subject key identifier: D3:C5:CC:E2:9A:29:AB:06:75:B2:FD:1E:BA:E6:2A:D8:8F:17:E4:BC
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F432858494CC950F579E8D44AC7B86400
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa
Signing time: Tue 25 Mar 2025 01:00:40 +0000
ROA not before: Tue 25 Mar 2025 01:00:40 +0000
ROA not after: Mon 23 Jun 2025 01:00:40 +0000
asID: 11232
IP address blocks: 24.220.229.160/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:4c:c9:50:f5:79:e8:d4:4a:c7:b8:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Mar 25 01:00:40 2025 GMT
Not After : Jun 23 01:00:40 2025 GMT
Subject: CN=b0a19965-9c08-4f59-b004-90a1a1d45859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:06:3f:38:bb:0d:38:c3:05:42:b3:42:ee:
fc:63:7f:e3:d7:bc:7b:d0:14:ea:d5:84:9c:fa:d2:
38:93:d2:54:c0:51:b0:14:dc:14:20:9e:d6:b6:6c:
f3:cc:3a:fc:d0:6f:17:7e:fe:e5:8a:7f:c9:2c:36:
4b:15:65:28:eb:2f:e9:27:da:e8:39:56:f5:f2:0e:
6d:ae:11:80:9f:24:63:c9:1c:e8:a2:5c:60:a1:77:
ca:79:6a:9c:8d:c8:b9:35:e9:76:4e:68:0a:da:c2:
1f:31:49:87:b7:1a:5a:5e:34:ca:5d:5e:32:a9:09:
e0:7a:11:a4:01:66:0e:7f:b6:ea:47:54:84:54:1d:
70:4d:45:1d:b4:f1:ac:96:ef:f4:f8:a4:40:85:5e:
98:e9:36:83:4c:24:f1:4b:e3:17:0f:c8:7a:b9:35:
12:af:03:3e:ce:d8:1f:60:fa:39:a1:e8:9a:59:83:
73:bb:7f:21:a5:6b:81:ec:81:9b:db:2a:a8:d2:ec:
04:37:ea:82:8f:52:94:4c:e7:28:aa:7b:66:5d:ee:
47:9e:57:c5:cd:8e:87:a9:00:8d:52:d7:2f:24:4e:
a7:a6:c5:aa:db:46:c3:64:7a:92:ce:19:0e:c7:59:
76:92:32:ed:87:ab:df:7c:c9:b2:83:73:e8:d5:19:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C5:CC:E2:9A:29:AB:06:75:B2:FD:1E:BA:E6:2A:D8:8F:17:E4:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/f3b133a0-cc77-3b6b-96e4-9e186d02af2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.220.229.160/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:de:f1:e7:ce:c6:97:00:9a:17:52:54:46:1d:af:e2:5b:58:
bb:02:65:92:d0:50:12:7d:a2:50:c4:08:ff:62:61:83:56:4c:
21:be:ff:b4:89:f6:08:43:81:e8:6d:02:90:e5:8e:ec:e2:2d:
36:8d:c8:e5:0f:f3:04:ab:25:97:81:2e:96:18:a0:68:29:75:
6e:00:fc:e1:e4:39:bc:09:bf:5e:b3:0b:73:5f:f5:e2:85:fc:
89:a7:b1:e4:18:c4:62:a0:72:97:c0:e9:99:80:54:24:cc:e5:
98:24:3c:36:f8:e0:30:d0:41:e8:59:05:da:6a:b8:c8:fd:07:
26:42:74:cf:e8:5b:26:86:13:90:11:84:9b:1a:88:53:37:3e:
21:93:b0:19:20:5a:97:09:92:fc:05:4d:04:41:ae:67:9e:83:
8a:e5:cd:0c:4f:29:0e:9b:41:a9:39:1e:4c:ab:32:4f:b5:a2:
c0:ab:c3:8a:84:61:7e:1c:a9:2f:58:05:13:da:49:03:3f:f3:
b7:e7:03:d9:59:e4:82:f3:cb:bb:e2:c6:51:14:22:3e:7d:56:
10:b9:1b:09:dd:31:28:c4:ac:37:c1:4c:8f:0d:bc:19:43:b9:
d8:e1:31:49:15:f1:f9:74:6b:4c:a4:5f:de:dc:18:f2:dd:2a:
0d:a8:b1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:05 2025 by rpki-client