Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa
File: 75c9ae00-3895-385c-8913-67c442d2f4e6.roa (raw, json)
Hash identifier: 35nzonn1u9ktGubfTUND+x8p2HRvt1/RzmWren2M8hk=
Subject key identifier: 3D:F5:50:B4:EE:E5:35:F0:10:DF:62:E8:F6:27:03:4F:44:48:B0:E6
Certificate issuer: /CN=3a975a5d-2307-4688-a186-4a355ff45581
Certificate serial: 010D0C9F4328584886B0740FE0DDC7330E2B12A0
Authority key identifier: 0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 32473
IP address blocks: 64.52.21.0/24 maxlen: 24
67.158.61.0/24 maxlen: 24
69.72.30.0/24 maxlen: 24
137.83.90.0/24 maxlen: 24
141.193.149.0/24 maxlen: 24
172.86.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:74:0f:e0:dd:c7:33:0e:2b:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a975a5d-2307-4688-a186-4a355ff45581
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=2966d869-e5f5-43a4-87de-9f63eff71b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:55:43:13:8a:2d:58:ae:01:83:59:bb:a6:
ec:4a:f4:2f:2f:81:6e:43:87:4f:d2:7a:64:a3:67:
72:95:26:8b:97:d1:38:07:aa:95:a4:e8:c2:23:09:
4a:25:81:3c:a2:9b:7c:80:28:98:b0:c7:19:c7:2b:
cb:7d:8c:5d:3b:98:df:a2:e7:cf:14:f3:84:28:02:
31:f3:cf:94:e8:95:28:30:80:5a:25:df:1e:d2:c6:
be:cc:27:92:31:41:d9:a9:9e:56:32:06:57:a8:bf:
17:55:86:28:14:21:cc:54:dc:d3:bf:75:8b:90:1a:
cd:25:ae:49:bd:ac:6f:f3:e1:50:d8:10:93:be:75:
56:fe:ce:06:f3:58:99:9e:2d:a8:ee:93:13:6c:03:
f9:df:05:32:0c:f3:92:91:8c:99:08:07:bc:c6:ef:
a7:e5:ef:01:b2:bb:09:c0:91:c2:0e:5f:69:bb:ae:
cc:8c:61:ee:d6:06:ea:6d:8f:f4:66:83:06:8e:58:
49:8c:61:03:4d:66:cf:ba:1d:20:18:e0:32:74:dc:
8d:5b:96:5b:8d:19:ec:c2:f6:93:09:00:1a:56:ac:
38:a0:75:7a:ff:7c:10:52:46:e9:e8:fd:aa:4c:35:
f9:ed:37:f7:1f:46:20:60:ec:f4:9a:89:45:11:e5:
c7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F5:50:B4:EE:E5:35:F0:10:DF:62:E8:F6:27:03:4F:44:48:B0:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/75c9ae00-3895-385c-8913-67c442d2f4e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581/3a975a5d-2307-4688-a186-4a355ff45581.crl
X509v3 Authority Key Identifier:
keyid:0C:2D:81:CC:F7:46:F4:16:73:1E:6C:69:B6:5D:95:2B:82:6C:51:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3a975a5d-2307-4688-a186-4a355ff45581.cer
sbgp-ipAddrBlock: critical
IPv4:
64.52.21.0/24
67.158.61.0/24
69.72.30.0/24
137.83.90.0/24
141.193.149.0/24
172.86.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:54:44:79:a6:e4:89:02:d5:57:bd:44:48:1a:d7:7f:9d:49:
72:12:60:75:42:36:53:e6:b3:05:0d:78:1d:e8:72:22:1a:95:
86:b0:12:c9:d7:e3:42:e8:cc:08:71:68:6a:ba:a8:de:c5:0c:
e2:dc:03:ed:36:fe:03:06:25:4f:25:8a:cc:7d:b9:f2:07:06:
19:ed:2e:b4:3e:13:27:d8:84:ba:f3:58:48:4d:64:4b:12:93:
6c:51:22:05:de:6f:13:39:99:89:1c:12:0f:ae:ea:56:d4:ac:
be:4d:ec:8e:57:b8:21:e3:15:7f:97:56:cb:9b:fd:88:30:4e:
8b:2c:4e:fb:ba:b4:99:c7:01:df:0b:c5:45:18:b4:f4:6f:8a:
6a:75:fc:58:16:89:2f:a8:64:4b:04:6a:75:e7:d1:c6:2e:c8:
d2:89:ba:f2:ef:31:82:58:c9:45:c5:1a:ab:6f:2e:02:45:3f:
4c:47:f5:f5:3f:02:5a:97:71:c4:b1:2e:77:b5:19:23:d8:c4:
19:a0:9f:b8:c2:d0:58:08:15:76:de:08:fd:8b:93:df:d5:0a:
18:19:09:64:a0:10:7a:19:02:66:0e:99:aa:b5:3c:3b:e3:c8:
28:9d:e7:23:bd:31:43:fa:67:f0:5f:ff:6c:01:5e:c8:4d:16:
58:94:dc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:43 2025 by rpki-client