Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d030c1ee-6b70-3dad-a950-15c9e7a41af6.roa
File: d030c1ee-6b70-3dad-a950-15c9e7a41af6.roa (raw, json)
Hash identifier: vCornleTV5CJ/OgVFHVrLs57p3DTrrquXQE4mU/NqAY=
Subject key identifier: 80:FB:65:0E:2D:32:0B:FC:41:47:2C:FC:6E:7C:0D:72:F6:BB:64:F6
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F432858492E13C7DB07A01D8E9F002540
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d030c1ee-6b70-3dad-a950-15c9e7a41af6.roa
Signing time: Fri 14 Mar 2025 01:00:39 +0000
ROA not before: Fri 14 Mar 2025 01:00:39 +0000
ROA not after: Thu 12 Jun 2025 01:00:39 +0000
asID: 0
IP address blocks: 157.133.232.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2e:13:c7:db:07:a0:1d:8e:9f:00:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Mar 14 01:00:39 2025 GMT
Not After : Jun 12 01:00:39 2025 GMT
Subject: CN=b5118e81-0153-4503-875b-85fe0b5f97b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:b7:b3:e4:e4:3b:36:dc:83:b6:af:73:c8:
5c:98:dc:47:7e:88:c3:a5:6f:85:92:a2:a5:92:c0:
b4:e0:91:17:ab:19:31:6d:90:d8:6e:a0:61:9d:cc:
50:ed:c7:54:4d:c5:b1:7c:f1:5c:9e:69:f4:15:5e:
16:8a:30:d0:43:78:04:b5:f9:64:50:f7:23:1d:cb:
18:83:31:79:86:66:0f:20:32:d3:c8:df:3a:29:15:
8b:28:24:2e:40:b1:be:df:c2:9b:cc:f1:7e:7d:e9:
da:98:0d:5c:2c:22:0f:d1:79:bd:78:f6:f0:27:60:
02:36:b7:52:81:21:e1:1d:05:04:6f:82:80:0d:33:
2a:2c:78:8f:43:1c:15:56:91:15:56:f7:19:f2:9f:
da:a8:07:82:10:e2:92:cc:db:0c:0f:d8:22:18:5a:
bc:6d:fd:84:ea:32:7f:3f:bf:57:ad:b6:c1:95:71:
c4:37:48:ac:df:fc:60:ff:68:ad:a4:84:0a:b5:1b:
f9:8c:e9:12:ea:bf:2e:2a:c0:5a:a7:99:8d:9b:15:
1e:35:19:4b:0e:1c:c9:df:89:9d:b2:a2:d6:01:4e:
bc:e7:a4:62:09:c1:50:5e:3d:92:5b:cf:a1:30:8d:
dd:bd:0c:ca:73:e7:05:8a:cb:f5:eb:f7:42:41:7d:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FB:65:0E:2D:32:0B:FC:41:47:2C:FC:6E:7C:0D:72:F6:BB:64:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/d030c1ee-6b70-3dad-a950-15c9e7a41af6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b5:bf:12:c9:bf:48:84:7e:c5:d5:eb:0a:60:cc:45:d3:1a:
a4:31:18:4a:22:f1:78:37:b2:ec:db:fe:49:ab:ce:6c:66:af:
9e:3b:9b:b0:e5:c9:ad:ab:60:65:62:9b:32:72:e0:dc:3d:9a:
aa:de:d2:ba:9c:68:46:1d:4f:fc:86:97:80:8b:f4:0a:ff:4a:
5f:e3:a8:2b:01:2b:a2:ec:cc:28:91:c9:fd:d6:36:e2:5b:ba:
bf:43:86:19:35:e9:cb:34:6b:2b:e6:5f:62:33:ed:b8:52:5d:
8a:7e:b3:4e:23:d7:e3:86:8d:af:9f:43:74:0a:ef:dd:8c:5e:
fd:31:7b:dc:10:97:ae:67:8d:e1:21:21:bd:7b:77:31:7f:c1:
33:a8:62:6c:67:1f:f7:50:a2:fa:81:93:63:30:94:e0:eb:f2:
ac:9c:53:a2:a1:a1:02:d0:f5:82:21:af:55:4a:b0:15:3e:59:
73:e4:67:81:9b:57:e5:8d:6a:4d:76:cd:1b:d4:38:ac:1d:62:
00:f7:3d:ab:1d:4e:34:d3:54:84:cd:89:56:e4:ed:10:dc:5c:
3b:68:02:22:da:60:fc:11:0e:b7:b5:a4:74:af:a0:38:1c:01:
ce:69:bc:53:c3:e3:ca:06:dc:1c:36:64:14:31:16:d5:5f:73:
de:a0:39:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:40 2025 by rpki-client