Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/35299397-9412-3901-bf6b-dd76cae9cadb.roa
File: 35299397-9412-3901-bf6b-dd76cae9cadb.roa (raw, json)
Hash identifier: lKMGep6yzpaxez3oJ2QZnNCOXPz3u1UWdK72DRE9ntg=
Subject key identifier: 02:8F:F2:68:D5:2C:80:F0:1F:2E:58:59:64:C9:BD:6A:C4:BC:72:66
Certificate issuer: /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial: 010D0C9F432858492CB20A94AC64403B15800A80
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/35299397-9412-3901-bf6b-dd76cae9cadb.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 11260
IP address blocks: 173.252.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:0a:94:ac:64:40:3b:15:80:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=c65cac13-78e4-48c2-a4b4-f3be73e3affb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:20:7d:20:39:56:ac:f2:11:a3:ba:8c:1f:25:
5b:af:83:f9:60:0a:12:b5:ca:51:a6:33:b3:f0:d8:
23:eb:a1:17:15:99:36:19:82:60:f2:ee:71:d0:df:
64:d0:37:a6:b8:f7:dc:b8:6a:99:94:99:1a:6c:c7:
90:31:34:c4:c5:51:eb:e3:56:40:fd:c0:a5:16:b9:
f2:ca:2d:08:d4:59:51:b6:33:41:bc:25:90:fc:bf:
bc:72:74:6e:4b:5a:52:8b:1f:64:60:0b:04:a1:4e:
54:b5:0a:d6:50:25:b0:27:a4:ae:74:df:c2:aa:e2:
49:71:b9:95:83:cc:09:9d:48:fa:a9:3c:f3:1c:7b:
61:6c:8c:cc:26:e5:55:16:2d:20:bb:13:32:80:51:
1f:4f:ef:fe:92:25:ee:21:23:98:72:cb:1a:a7:2c:
95:88:c6:4c:24:25:3f:9c:f8:9a:7c:d4:da:9e:c7:
b6:26:87:8a:41:1c:d9:1e:c3:5a:96:09:5c:5a:0c:
9e:48:bb:fb:56:07:47:5c:c2:ae:fe:00:c7:85:9e:
2f:fa:0c:7c:df:88:98:b8:32:80:a4:0c:95:fa:c0:
6b:da:25:b7:66:20:f1:1d:92:e2:0a:d1:c7:29:07:
e4:f3:9a:5d:c9:fe:64:02:46:e2:5d:a8:58:ee:aa:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8F:F2:68:D5:2C:80:F0:1F:2E:58:59:64:C9:BD:6A:C4:BC:72:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/35299397-9412-3901-bf6b-dd76cae9cadb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
X509v3 Authority Key Identifier:
keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
sbgp-ipAddrBlock: critical
IPv4:
173.252.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:5b:e1:98:79:b0:41:32:42:16:c9:ba:76:07:58:1e:cb:f6:
eb:cc:fe:9c:8a:b1:ab:6f:0d:3a:31:c8:89:39:28:e4:a2:87:
75:04:89:ec:87:c5:e8:e9:a2:92:1f:00:ec:3b:40:85:fd:14:
3c:46:fd:a3:09:c9:1f:ee:48:a9:49:0a:df:94:9a:1f:eb:2c:
a7:30:61:43:4a:e7:e1:27:59:1e:bd:8d:51:30:c6:cc:f5:7c:
92:3f:67:50:1d:0a:bf:36:2c:8d:bb:58:d4:b5:93:63:3f:a7:
fb:f3:0b:05:1d:8c:fb:60:15:1c:83:28:93:72:e6:64:39:c9:
82:f2:30:2a:46:df:64:3e:29:a2:fa:f3:bb:bf:80:df:1d:d0:
72:82:2b:e8:46:80:0a:ab:35:9f:98:10:52:6e:0c:2c:a4:1d:
05:01:33:05:0b:91:ef:43:81:ea:f8:b2:77:dc:01:75:13:0c:
92:af:c0:14:ec:76:47:ba:b2:b4:c8:02:12:4b:27:d2:80:ee:
81:96:b9:f2:f8:b3:9e:1f:e7:6c:b9:81:00:5c:e5:8b:59:e5:
70:ae:d6:49:07:7e:9e:13:2a:77:ec:36:e9:97:58:b3:02:80:
ba:72:25:50:5f:7d:ea:42:8d:39:cb:6d:7d:8e:6c:e1:ea:f1:
a9:dc:af:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:31 2025 by rpki-client