Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa
File: 3aa15edc-b7c6-318d-9de6-46d235ff9320.roa (raw, json)
Hash identifier: sjGkM2N+BBpm2Rp1D1xbnXvIhnREqcTld94oWiQQepM=
Subject key identifier: EB:27:B0:09:49:43:49:02:76:20:25:E7:60:9E:62:B3:2D:AF:93:AD
Certificate issuer: /CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Certificate serial: 010D0C9F43285848EF613982BCAD0ACFC9C9CA80
Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 13325
IP address blocks: 136.181.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:39:82:bc:ad:0a:cf:c9:c9:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=4b88c48a-a2d5-467c-b04e-a301a6fa61d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:1c:b7:ae:15:ce:ed:50:26:f4:71:35:dd:
e4:80:52:43:31:2b:e0:6a:f5:85:42:0d:96:89:87:
ce:f8:25:1b:4b:27:a6:b6:5a:ac:0b:f5:9b:4f:32:
c1:d2:61:2e:d4:07:37:9a:b8:61:e6:8c:6d:e6:c8:
43:37:8e:07:1f:96:b8:4c:aa:ba:c6:f2:cb:ff:c5:
98:d8:1d:a8:ad:ec:a7:ed:b7:d9:23:63:eb:c0:28:
a4:47:62:a8:21:cf:a3:5f:fc:f8:9c:e4:3d:5d:67:
62:94:80:0d:a5:9a:e6:8e:c9:2a:ac:56:7b:81:f1:
fb:40:d8:ab:9c:3e:78:24:95:f4:c6:3b:57:90:95:
4b:f7:09:81:9e:e5:f3:f7:99:75:0e:6d:1e:fe:92:
7c:7f:f6:e7:1e:69:07:ea:83:c8:a3:1a:10:81:09:
73:ab:07:19:66:a1:f0:41:f1:9e:3c:a9:10:a2:fd:
bb:94:e5:9e:6f:d9:09:0f:fc:59:4d:bc:55:35:06:
99:06:09:e4:6e:a5:7c:e2:83:82:25:18:33:b0:c0:
33:a3:cc:81:ed:e3:c3:fc:33:b1:df:97:e4:be:67:
82:a0:c0:83:51:0a:f6:cc:d4:83:1a:34:0d:6f:0e:
7f:5c:cd:f4:78:1d:e7:d8:bc:f4:20:31:3f:c0:07:
3c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:27:B0:09:49:43:49:02:76:20:25:E7:60:9E:62:B3:2D:AF:93:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/3aa15edc-b7c6-318d-9de6-46d235ff9320.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl
X509v3 Authority Key Identifier:
keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
sbgp-ipAddrBlock: critical
IPv4:
136.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:a0:fe:63:4d:52:c0:d9:8d:5d:df:62:44:90:6b:3d:a1:da:
46:88:ec:98:c8:40:1a:54:22:61:38:e6:d1:20:a9:f7:ed:3b:
d7:63:bb:0c:0d:a4:83:85:23:74:7e:7b:c4:d6:00:f8:5e:24:
4a:2b:a2:66:4e:15:0c:d3:1e:c4:ff:d0:9c:87:46:d6:58:07:
0f:d9:d4:96:77:9d:e1:e1:7c:1c:09:00:56:10:e6:63:5a:1d:
87:20:bd:0c:4b:4a:3d:3c:6d:3e:ed:3f:98:27:b6:b5:6f:84:
47:1b:7b:b7:52:ed:93:4b:fb:78:7e:22:21:9f:ff:32:bb:c2:
a4:f9:21:6b:94:13:dc:e4:02:59:0e:f8:cc:d4:18:2c:13:a1:
c6:bc:de:f0:33:48:a1:17:52:b5:c0:a8:67:1f:6c:93:cd:8f:
6d:1a:b3:78:e8:67:94:f8:a9:bf:26:0c:8b:a6:c8:bd:9d:3b:
a6:30:ee:e2:11:0e:52:d3:a0:a2:13:bd:1a:29:1a:cb:df:b4:
d3:35:1b:7a:21:51:de:99:f2:57:3d:6b:c9:3c:2d:c5:25:80:
3e:f5:28:3d:29:34:c7:62:5b:43:87:0b:41:25:ad:57:64:0e:
84:b8:aa:4b:85:df:ed:d1:26:a3:3f:f8:60:9b:27:f3:c1:a4:
a9:3f:8b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:18 2025 by rpki-client