Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/3d3cb45a-61fe-3633-8f13-e51266e75732.roa
File: 3d3cb45a-61fe-3633-8f13-e51266e75732.roa (raw, json)
Hash identifier: jo88LUZ3p3ZVVQljWhOz+fdEeCiMum/UQFk1MN9ZQAQ=
Subject key identifier: 46:0F:DC:C2:94:30:57:75:67:04:49:16:83:05:DE:91:7F:A9:89:A1
Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial: 010D0C9F43285848C150D5860C6E4B1E42E4C180
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/3d3cb45a-61fe-3633-8f13-e51266e75732.roa
Signing time: Mon 03 Feb 2025 02:00:39 +0000
ROA not before: Mon 03 Feb 2025 02:00:39 +0000
ROA not after: Sun 04 May 2025 01:00:39 +0000
asID: 14618
IP address blocks: 159.172.195.0/24 maxlen: 24
159.172.200.0/24 maxlen: 24
159.172.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c1:50:d5:86:0c:6e:4b:1e:42:e4:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Validity
Not Before: Feb 3 02:00:39 2025 GMT
Not After : May 4 01:00:39 2025 GMT
Subject: CN=5f66ffb2-376a-42f7-8a5a-b7deec7c26af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a1:98:57:71:b1:88:ad:ee:17:74:63:5e:1f:
a6:d5:be:5c:fe:f4:3d:2c:90:ce:9b:0e:d3:ec:65:
c8:bf:e0:ef:5e:d3:61:e8:33:78:4c:3e:70:a2:c2:
39:ad:99:b5:25:56:bc:ea:32:1c:cb:79:f6:12:54:
24:c4:5c:a4:f6:13:1e:b6:4b:20:b1:74:14:65:46:
68:c2:e2:5e:55:af:28:6f:c5:1a:ca:47:16:e0:8f:
f2:a9:40:64:a1:e6:75:ec:8e:b1:17:7a:6a:a7:32:
a1:64:70:7e:00:60:f2:d0:c7:21:16:eb:35:0f:d2:
32:57:ab:7e:b3:df:1c:af:35:8a:ca:76:0a:a2:65:
ad:6d:ff:75:bf:13:ce:07:16:af:31:be:6f:fa:7c:
0b:a6:df:7a:21:b2:91:9a:cd:bd:dd:9c:84:d7:dc:
f5:10:7f:27:90:62:cb:25:e4:63:47:f3:af:45:1f:
11:c9:e9:e9:2e:5f:c1:69:15:b6:50:ee:f0:c2:de:
98:2d:c5:c9:5e:97:44:b2:c3:cc:dc:5c:00:7a:3b:
58:a4:88:e9:cf:67:74:dc:ce:42:71:0a:91:51:c1:
da:41:25:6a:7c:d7:29:3d:5c:65:23:ad:ee:00:05:
81:2c:c8:18:0b:19:da:75:92:53:10:d8:2e:1e:60:
13:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0F:DC:C2:94:30:57:75:67:04:49:16:83:05:DE:91:7F:A9:89:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/3d3cb45a-61fe-3633-8f13-e51266e75732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
X509v3 Authority Key Identifier:
keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
sbgp-ipAddrBlock: critical
IPv4:
159.172.195.0/24
159.172.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:f0:01:47:65:46:00:fb:9a:be:02:e5:47:6d:39:00:f7:1d:
76:6c:8f:e1:8a:3f:da:a6:e5:ec:51:3e:4f:6e:06:0b:e5:ea:
0a:5d:b6:fd:99:5d:1b:0b:9a:1e:2d:14:60:26:98:70:af:c3:
fd:77:73:04:97:d0:8b:dc:b1:0e:eb:3b:4e:61:62:ab:0c:b0:
f7:76:b6:0a:04:ca:f4:56:2c:cc:d5:6e:5f:38:18:b1:ef:42:
20:f6:37:2f:81:46:ac:d2:ef:54:8f:3d:92:0a:a4:01:87:ac:
62:b3:c9:e6:d9:19:f0:50:78:51:2f:eb:80:13:79:75:63:a3:
15:73:0a:b1:5d:e6:dc:a8:dc:ab:00:23:55:5a:60:13:85:dc:
a9:34:dc:ba:7b:11:f8:8e:15:12:3d:72:2a:19:40:40:84:36:
22:86:37:d4:53:dc:d5:3d:e0:e9:f7:86:84:49:59:5a:8b:b9:
d7:62:12:ff:b1:47:56:2e:4b:7b:12:78:ec:95:6c:d7:c7:c9:
a1:94:67:d2:7d:03:cd:46:b8:6d:2c:60:12:36:ed:03:33:c0:
01:a9:2c:68:b4:0f:40:5b:41:f3:84:51:8c:e4:41:4b:13:c3:
d0:77:b7:71:9c:3e:bd:9b:36:90:5d:98:7b:56:03:f4:95:64:
26:29:d0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:19:26 2025 by rpki-client