Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/85b358d7-a4bb-3bbb-9fc5-568b0bdd88a4.roa
File: 85b358d7-a4bb-3bbb-9fc5-568b0bdd88a4.roa (raw, json)
Hash identifier: +k8nr9C2FI9oRFPwrYjl4Bobbkr03JsfVRZfzwoZ4zU=
Subject key identifier: 33:9E:AE:FA:82:CA:4D:6D:8B:67:9E:A9:2C:CC:4F:48:12:6E:9A:F5
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F4328584831323788E6C07D229E8870A0
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/85b358d7-a4bb-3bbb-9fc5-568b0bdd88a4.roa
Signing time: Fri 13 Dec 2024 11:02:41 +0000
ROA not before: Fri 13 Dec 2024 11:02:41 +0000
ROA not after: Thu 13 Mar 2025 10:02:41 +0000
asID: 54535
IP address blocks: 156.37.200.0/24 maxlen: 24
156.37.201.0/24 maxlen: 24
156.37.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:31:32:37:88:e6:c0:7d:22:9e:88:70:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Dec 13 11:02:41 2024 GMT
Not After : Mar 13 10:02:41 2025 GMT
Subject: CN=6d54f942-5025-49a4-9508-89e0e63b0a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:c3:84:46:e4:b9:08:f2:c7:0f:6b:01:93:
d2:0a:a1:a8:65:f2:2d:6e:a1:9d:4b:f8:25:6e:7a:
17:c2:5f:b4:ca:50:3f:cf:df:e8:9c:d0:ee:31:ea:
c1:ba:fa:a9:50:27:d2:41:b9:35:2a:b8:9c:01:cf:
d7:5d:8b:2b:01:ac:f7:6d:cd:92:ee:b0:c9:f8:bc:
5f:ed:35:4a:27:70:0d:e8:bc:c5:b8:e1:ee:91:8e:
40:59:d6:78:ce:3b:ce:db:f3:ba:53:1b:b9:f5:66:
14:1a:6b:1b:59:1e:1b:62:b0:bb:cd:b5:34:07:f5:
8d:4e:19:92:dd:eb:96:c1:95:ed:7e:5e:50:cc:fb:
ed:5d:7a:0f:90:64:46:5b:1c:61:61:42:bc:e1:a7:
72:df:e2:5f:62:a4:81:49:68:78:58:d3:36:14:fa:
4e:c5:f4:4d:c7:fd:fd:13:91:8e:8c:0b:29:d6:d3:
09:e8:be:68:34:7a:71:bf:42:99:9f:00:cb:e5:39:
02:60:19:f3:28:76:1d:83:c5:9b:73:53:7a:09:c1:
58:f2:1a:19:c2:8e:4c:a0:e5:05:4b:2c:bc:5c:f4:
5f:ea:fc:5f:5c:34:d9:73:97:76:46:96:20:39:c6:
ae:3a:18:a0:9b:cc:46:6d:9f:1b:2a:94:89:92:a9:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:AE:FA:82:CA:4D:6D:8B:67:9E:A9:2C:CC:4F:48:12:6E:9A:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/85b358d7-a4bb-3bbb-9fc5-568b0bdd88a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.37.200.0/23
156.37.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:2e:40:0e:f7:b5:24:b3:05:e2:e6:15:4d:d3:04:4a:af:f8:
ba:3f:c0:85:de:c7:7f:ad:e9:2c:70:a1:8a:e2:e0:e8:59:ca:
af:34:0a:05:21:5c:94:28:cb:07:e5:90:cf:63:35:7e:46:68:
50:b2:ad:96:cf:78:61:4e:4a:e0:51:f6:15:2a:67:ff:cb:ba:
50:fc:d8:9f:cd:15:43:07:93:a7:e0:15:0b:55:79:65:64:55:
0a:67:07:63:42:8f:41:e2:71:36:2c:b7:d8:e1:e5:de:98:d6:
1e:e5:3c:d4:29:66:d7:b2:d8:7e:00:d8:28:82:e6:08:a7:ae:
74:43:07:b9:47:78:f3:23:33:8d:5f:76:ef:c1:7b:82:f6:62:
38:43:90:48:dd:53:8c:dc:5a:18:c8:ff:22:55:0b:a3:09:fb:
e6:09:12:2c:22:15:df:df:42:64:cf:06:e2:3c:8d:42:41:c0:
8d:11:e0:1d:4c:82:2e:80:83:e3:9b:7c:33:64:67:e5:e2:07:
42:af:a1:3a:70:a8:0b:23:7f:2d:90:fe:4e:0d:a5:72:65:ab:
ca:20:01:08:9d:20:4d:45:88:3e:fa:3e:fa:a0:7d:d9:c6:ba:
cd:0c:37:9a:95:96:78:7b:6b:d7:79:13:56:10:fa:7e:0b:a0:
ab:8f:fb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:50 2025 by rpki-client