Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa
File: c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa (raw, json)
Hash identifier: KvOVqCaMhGCPLsLPSm6B7S0K/Xytwynp16iSXyTFAa8=
Subject key identifier: 16:9A:5F:B2:A9:84:28:F8:4F:E2:15:3E:E3:18:DD:5A:C7:F0:A4:52
Certificate issuer: /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial: 010D0C9F43285849194173FADB478F52132A8C20
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 54535
IP address blocks: 156.37.204.0/24 maxlen: 24
156.37.205.0/24 maxlen: 24
156.37.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:73:fa:db:47:8f:52:13:2a:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=19ae1c99-aeed-4300-933a-645e42f228c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:2b:2a:6e:f6:7b:fb:ae:ee:25:56:44:1e:
84:9d:69:17:10:84:9d:c0:66:b5:82:a2:14:5a:53:
a2:b8:87:41:b1:cc:ca:1c:07:72:a7:01:27:dd:9a:
23:62:97:df:32:31:f0:4f:2d:cb:ba:89:6e:ca:5d:
7e:53:7c:ab:e4:78:1d:35:c5:7e:e5:23:35:1a:03:
aa:a0:b4:86:bd:04:71:83:5f:f8:ff:d6:01:1e:20:
8b:82:08:52:0b:91:9d:bc:51:1d:57:6d:f0:1c:be:
79:77:ae:19:63:69:b5:ea:7c:58:8c:f1:51:60:8c:
48:9f:be:72:39:1d:38:f2:3c:b1:19:d4:e8:70:ec:
fe:e2:20:9f:45:fa:a7:c6:8c:de:e7:2c:1b:39:ec:
a9:3b:3c:ae:20:91:97:3d:c9:e5:60:30:83:b3:e6:
5d:23:f0:3c:35:ba:ec:13:b9:d0:cf:27:12:11:03:
8e:ee:7e:c8:56:98:3d:72:ba:cb:18:69:ab:cb:cd:
0d:16:0d:ef:20:c4:b8:be:59:cf:10:f4:7c:f4:97:
0f:db:a0:af:1b:d4:e9:92:5d:69:bd:6d:ff:dd:3b:
0a:f9:05:3d:e0:46:f1:a8:fc:90:34:3d:97:1c:16:
5d:7e:80:df:04:fd:f1:9e:0d:a5:77:40:37:99:35:
ca:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9A:5F:B2:A9:84:28:F8:4F:E2:15:3E:E3:18:DD:5A:C7:F0:A4:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c7a78ba0-1048-385f-a3a9-d82e7b7753f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
X509v3 Authority Key Identifier:
keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
sbgp-ipAddrBlock: critical
IPv4:
156.37.204.0/23
156.37.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:5d:de:e0:2e:62:98:b2:5f:2c:a4:cb:ca:09:0d:b4:02:25:
2b:2b:44:a9:c6:fd:0e:93:eb:73:96:7d:6d:71:f0:61:62:1f:
0f:86:71:e2:f1:0f:63:aa:9f:0a:ab:b2:87:b1:74:32:2b:ba:
6d:0b:24:bf:1f:76:85:d4:04:5b:f3:d9:d7:61:85:2d:99:02:
af:ff:36:c8:7e:79:df:ad:15:26:78:f9:51:ed:d2:c0:25:22:
fe:c1:40:e4:37:f5:01:53:80:b2:a0:83:ce:9e:df:d5:58:ce:
97:3b:09:21:6b:4e:d9:60:89:93:4a:10:e9:00:4b:d2:d1:4f:
03:73:2e:75:3b:bf:de:68:fd:ea:5c:fc:f9:4b:65:7b:b0:90:
d5:b2:8b:5c:76:91:ca:fa:d5:04:e0:4b:44:13:e4:fb:11:d4:
5a:cb:86:2b:b3:ed:f6:ad:c1:98:c2:e7:52:7f:8a:2a:d7:e4:
e7:be:42:2f:f4:49:67:48:94:fa:e3:1c:08:f7:ff:19:e5:9a:
ac:19:5a:c4:ad:01:8c:43:39:eb:69:0e:16:d1:11:4f:c6:2e:
70:9b:e0:47:16:5e:42:5c:fe:e1:0c:a8:d5:f1:8a:92:e1:fe:
4c:03:ad:88:1c:c1:b9:42:02:52:5f:b4:aa:e8:ab:65:32:9b:
07:a2:62:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:20 2025 by rpki-client