Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa
File: 87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa (raw, json)
Hash identifier: 7JswBxQJ2v/bCB5sKO7g9WwfgRjAHIwpcFDzX9GNZZs=
Subject key identifier: 0B:93:A6:B2:7A:C9:D7:9E:E5:B1:FC:3D:85:6D:31:DF:EA:2D:11:70
Certificate issuer: /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
Certificate serial: 010D0C9F4328584957F41042BDCD9AFC859B4160
Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 1299
IP address blocks: 72.251.128.0/19 maxlen: 24
158.62.224.0/19 maxlen: 24
209.25.224.0/21 maxlen: 24
2605:d2c0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f4:10:42:bd:cd:9a:fc:85:9b:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=c163a12d-2637-41fa-9806-b59cde384340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:0f:b5:cd:5e:cc:09:0f:3e:5b:11:79:05:
34:54:7b:0d:80:18:96:77:6f:0e:72:82:54:6c:23:
f5:d9:8b:dd:45:12:e4:b1:e1:d2:d4:ac:b7:3d:3c:
64:0c:8a:42:0b:d7:70:e9:53:30:36:10:3b:6e:4d:
52:01:1e:7d:85:5c:05:be:4e:97:4b:01:66:a0:39:
48:c1:81:a5:70:e0:da:c7:5c:27:ff:58:74:87:ea:
04:3d:18:7f:13:97:8e:42:09:28:d5:f6:98:6a:65:
98:ed:16:95:01:df:44:34:ef:6d:00:50:b8:39:2d:
34:b4:c6:34:2d:98:fb:57:0f:b7:5f:95:31:7b:91:
b7:6d:80:8f:49:8c:35:e5:dc:3c:73:0c:c7:de:e5:
4c:80:25:68:7e:a1:21:5f:9e:7b:9a:30:fe:32:48:
3c:92:cd:65:65:68:6d:f7:64:e0:5d:71:74:7b:6a:
43:0b:3e:99:b9:b4:b7:69:d8:ee:ca:0c:19:ea:b6:
f5:21:1e:4e:da:f3:2b:ef:ef:12:52:62:b7:d3:63:
57:f3:ab:33:a4:e6:a9:3c:42:b1:f3:b0:83:ad:ec:
85:a4:06:07:51:71:5d:46:7e:3d:db:4d:56:53:e0:
95:2d:a3:fe:e3:2f:f5:cb:30:e1:3c:ca:fd:3f:54:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:93:A6:B2:7A:C9:D7:9E:E5:B1:FC:3D:85:6D:31:DF:EA:2D:11:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl
X509v3 Authority Key Identifier:
keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
sbgp-ipAddrBlock: critical
IPv4:
72.251.128.0/19
158.62.224.0/19
209.25.224.0/21
IPv6:
2605:d2c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:b1:43:ba:ee:bf:4a:c6:b7:f1:4d:4b:c4:75:1a:bc:c4:4c:
13:6e:e4:58:07:33:c0:52:bb:ef:7e:3c:49:ba:51:18:2e:f3:
99:d2:87:34:fd:c9:f9:a8:97:71:16:35:c8:4a:28:fc:5d:4a:
8e:2d:a1:0b:e5:12:f5:e9:7d:dc:05:e1:35:1a:38:7f:a7:ea:
36:f1:cc:d0:40:52:86:cc:e5:57:f7:e6:30:68:6f:11:01:02:
18:a7:5f:e7:65:4b:07:fe:72:b2:5d:ed:8d:d8:53:77:d8:ca:
b7:bd:47:ac:a5:e4:02:a3:b9:aa:68:bf:32:72:10:0c:94:6c:
90:c4:cc:ad:4c:3b:7a:84:8d:a5:b5:66:b2:9f:53:00:a5:4d:
00:fc:bc:f7:98:3a:b7:95:eb:ec:1a:39:fc:1b:47:a5:1a:4c:
22:de:bd:a7:83:55:d6:6d:da:83:7d:3a:88:d1:7a:ae:5d:bd:
db:a0:50:12:b0:42:da:b6:41:72:77:37:62:a5:92:75:b0:06:
5a:1e:ae:62:3b:30:b3:10:42:4e:2d:6b:1e:3d:e7:d0:a6:a2:
2a:77:0f:cb:23:c1:77:6f:29:a3:6c:5d:6d:52:22:77:9b:b4:
06:d9:14:5e:6d:cb:34:54:42:39:04:12:2b:37:b2:33:cb:c4:
92:ae:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:40 2025 by rpki-client