Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa
File: 3c61c44a-b3fc-304f-b232-cf0f14a43933.roa (raw, json)
Hash identifier: DcBRuaM/w3pL7q1GMSFn5dt4Hz3QW05yYArWlmaOVjM=
Subject key identifier: 37:3A:75:4D:31:9E:5D:62:B9:9D:7B:22:A2:75:CF:49:D7:35:D6:80
Certificate issuer: /CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295
Certificate serial: 010D0C9F432858492CB221358AD8E6D4278A8FC0
Authority key identifier: 24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 53281
IP address blocks: 192.122.149.0/24 maxlen: 24
209.209.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:21:35:8a:d8:e6:d4:27:8a:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b1aa57-bdb0-48a3-aa18-332e6bd9f295
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=25c4a28d-d184-442a-adc6-b0aa3b864d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:ff:83:37:67:e8:88:8a:b8:67:33:0c:63:
1a:2e:94:f6:1c:3d:ec:48:25:69:62:bc:f8:67:e5:
fb:e7:70:c6:37:92:35:82:2c:56:a3:4c:a7:2f:aa:
02:c2:20:92:6b:50:05:8c:03:e9:1d:cc:e8:e7:26:
a0:84:3e:5f:80:9a:ef:e9:66:5f:cc:43:1f:77:30:
e4:6c:ea:0c:91:1e:01:03:1b:ca:05:94:a0:1d:9f:
c9:fd:a4:32:b2:08:80:13:0a:eb:2d:eb:ec:fd:1b:
73:54:2b:c6:5a:b2:a6:28:3f:1c:87:c0:4c:ed:ae:
99:d6:12:62:da:56:bd:ca:dd:50:df:ef:e9:68:83:
f4:19:29:9c:72:d9:71:15:db:67:23:ae:1b:5c:6b:
fb:2a:9b:e9:f9:17:68:92:f3:c5:9f:0a:96:d2:79:
bb:1f:f5:22:af:38:2f:d9:63:02:01:46:de:ef:d5:
96:c7:03:25:eb:c8:d7:d1:70:d6:7d:e4:2e:39:5e:
e6:d3:ec:07:47:2f:40:73:e5:2d:49:da:29:ee:3a:
68:d3:46:24:e6:ee:95:1e:ef:6f:d5:d2:0c:71:13:
af:ae:97:15:7a:30:7a:fb:38:54:64:c5:79:9d:e7:
9a:4f:36:66:96:f4:3a:5f:89:8c:84:72:27:9a:87:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3A:75:4D:31:9E:5D:62:B9:9D:7B:22:A2:75:CF:49:D7:35:D6:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/3c61c44a-b3fc-304f-b232-cf0f14a43933.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.crl
X509v3 Authority Key Identifier:
keyid:24:0B:25:77:25:9C:06:3A:46:02:3C:B6:45:87:EF:86:CD:7E:04:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40b1aa57-bdb0-48a3-aa18-332e6bd9f295.cer
sbgp-ipAddrBlock: critical
IPv4:
192.122.149.0/24
209.209.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:74:22:e5:73:9f:6d:5a:a7:9d:5c:bc:9e:69:8b:c5:bd:46:
29:61:24:ce:da:09:55:e8:17:bd:c5:d5:32:2d:15:9b:f2:22:
f7:2f:a5:12:b6:b4:64:47:38:ef:15:91:45:c9:35:a7:bd:fe:
b1:9b:a7:a9:df:5c:88:93:6e:56:45:9b:2e:4a:10:51:97:c9:
68:fe:8d:c9:73:00:18:42:94:d2:a0:c4:53:ab:08:dc:06:33:
0e:1c:2a:18:fc:66:17:6a:76:f8:75:8b:7c:97:e9:92:3f:27:
fc:96:93:6c:61:67:e2:ca:40:da:01:18:da:c5:4f:53:a3:b7:
7c:4a:9d:13:af:0a:ff:e9:f5:74:8c:e7:32:0c:04:3e:18:15:
21:eb:36:9e:59:36:21:64:e5:7d:cb:18:31:cd:51:54:0f:9a:
6d:e5:d0:9b:b5:32:b0:eb:99:16:90:64:72:99:97:1c:2c:00:
5c:ca:07:de:0f:84:72:a5:37:6d:fe:0d:37:53:20:4f:cb:5e:
a7:06:80:61:a0:2c:cb:38:3b:84:1d:85:a6:e2:86:d1:60:1e:
d8:ce:a3:63:82:f3:80:29:3d:48:78:21:ef:14:0b:04:96:09:
80:89:6e:df:f6:34:62:a2:e6:11:43:8b:95:dc:2a:9d:5b:dc:
18:70:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:09 2025 by rpki-client