Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa
File: 0752d384-9147-3c2d-9b3e-23a76dab9594.roa (raw, json)
Hash identifier: fZ7Tw3KNvGSvr3IRXzuTQh7eSxVUADe5zI+CU0kMS7A=
Subject key identifier: 7D:7E:0E:EC:7D:7A:81:31:15:BB:A0:B6:91:55:32:CF:FC:5E:F8:87
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584909E6A7AC769E90B08F15D100
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 63293
IP address blocks: 157.240.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a7:ac:76:9e:90:b0:8f:15:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=6a305d3b-aaad-48ca-a308-f7523d55f64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:46:42:f0:b4:15:a1:b5:03:03:7e:77:fe:
95:3f:ec:6d:06:58:3b:45:b0:a8:8a:b0:5d:3c:c0:
16:b7:19:1d:8e:9b:23:ff:dd:93:b3:26:d0:48:ce:
48:6e:da:7d:70:42:69:cf:cf:0c:b7:69:6b:66:3a:
36:8a:bb:14:f7:96:9f:41:9e:2e:35:71:e4:b3:74:
11:ec:80:e1:7e:f9:c8:3b:e8:b8:bd:79:62:8d:b9:
7c:77:12:6b:3d:dc:2a:04:af:37:9c:55:e0:05:1b:
cc:5b:5e:aa:43:f3:be:26:da:23:43:da:cf:d8:09:
38:40:82:81:35:97:e6:2f:37:18:fa:4e:55:8f:b0:
5c:e4:59:d9:a0:d8:cb:f3:01:36:bc:4b:ae:b5:eb:
0f:af:dd:fc:79:6e:3e:36:d9:fe:78:24:1c:aa:78:
dc:22:51:56:0b:8b:60:78:19:7b:99:2a:ee:0b:98:
85:2f:4e:26:8e:4b:05:e6:7e:7e:ca:83:6e:32:ca:
49:61:90:0c:30:56:3b:62:3f:6c:85:60:19:c4:0b:
56:36:56:2f:a9:d3:f1:52:23:7f:e4:9d:ec:1c:69:
d4:71:f1:87:80:68:0f:02:79:c3:b2:37:b8:9d:4e:
5a:6d:02:7d:ba:25:1a:ff:07:15:ab:ee:9e:b5:78:
61:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7E:0E:EC:7D:7A:81:31:15:BB:A0:B6:91:55:32:CF:FC:5E:F8:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/0752d384-9147-3c2d-9b3e-23a76dab9594.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
157.240.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:9f:ac:4c:1d:28:67:a0:e3:56:a6:86:c3:f5:3b:42:a6:8d:
12:50:90:1c:a2:61:cd:fd:1a:6a:ed:b6:dd:1b:86:40:9d:38:
99:31:df:19:6e:f0:b9:15:ad:c6:f3:14:6a:40:3e:97:4a:05:
f6:0b:45:71:40:ac:f7:fc:86:3b:2c:8d:2f:c2:d3:e6:53:5f:
9d:91:5d:86:28:e8:8f:4d:7b:49:88:a9:9e:22:10:28:2f:aa:
54:54:7f:0b:65:1a:61:b6:c9:19:58:14:b2:0f:c4:2c:cd:93:
93:ce:d1:d4:ee:e2:45:7f:26:3f:62:3b:90:b6:19:d5:73:41:
0e:f1:0b:8d:5f:96:7f:c6:97:3f:16:97:43:c9:67:cf:0a:39:
11:e5:0d:59:6a:29:53:b8:da:76:3f:fe:96:e2:c9:f3:36:b1:
20:bd:5f:9e:fb:bc:cc:d7:ac:5b:b4:a7:88:c5:7e:4b:ec:54:
99:6f:ce:c6:b4:bf:56:0e:52:92:f6:ec:cf:16:78:bc:4e:e6:
90:6b:48:07:97:7d:99:b6:34:2d:5e:5d:e7:3e:93:7b:8a:17:
1a:e3:9b:b6:c1:3f:76:cb:14:0e:4c:2f:fd:4f:98:c0:5f:cb:
27:c4:54:a3:69:da:65:06:15:5a:d2:2c:7a:8f:ee:a6:25:e3:
3e:7b:23:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:10:00 2025 by rpki-client