Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ae2132d-23cd-3b4b-be4c-1feb6aeb7e28.roa
File: 2ae2132d-23cd-3b4b-be4c-1feb6aeb7e28.roa (raw, json)
Hash identifier: pl8WeRPpw7pe1xXEXQ9zvnZ0J2Z3iU+3NYv8w3Dl25k=
Subject key identifier: 99:15:6C:1C:99:8C:60:26:AB:BA:F0:6D:A7:BE:72:43:F7:C8:A4:BE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858488BA8D438057DD1A65E290C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ae2132d-23cd-3b4b-be4c-1feb6aeb7e28.roa
Signing time: Tue 14 Jan 2025 20:44:25 +0000
ROA not before: Tue 14 Jan 2025 20:44:25 +0000
ROA not after: Mon 14 Apr 2025 19:44:25 +0000
asID: 398033
IP address blocks: 152.180.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:a8:d4:38:05:7d:d1:a6:5e:29:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 14 20:44:25 2025 GMT
Not After : Apr 14 19:44:25 2025 GMT
Subject: CN=91bb6c51-8f1e-40b9-944f-580e6253fa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:47:3c:a5:05:f7:52:1e:e7:8c:ac:41:3b:
9a:4a:c3:1f:e4:3a:d4:d8:9d:90:0c:7d:b4:12:99:
fb:57:c9:43:ab:6a:46:fe:e1:94:da:75:34:72:5a:
6b:70:f9:72:c5:47:1e:57:78:54:20:74:ab:10:f2:
1f:00:81:42:25:e9:c5:c7:c1:4e:10:b4:31:c0:60:
62:7c:1c:d7:b1:0c:ab:c3:89:4e:61:1e:06:c9:f3:
20:98:b4:44:de:a8:50:30:e1:9a:d7:1b:d8:b6:ca:
db:49:aa:c8:28:80:e0:bc:61:73:8f:f6:35:75:53:
5c:78:87:69:d2:30:6a:5b:fe:2b:92:d8:5f:c0:dc:
38:52:31:92:da:2a:f0:7a:e9:b0:16:60:57:15:ad:
b2:f7:79:3b:2e:f0:aa:85:ab:c6:3d:5f:36:7f:43:
01:88:a7:e2:48:40:89:60:5e:cd:ce:5d:43:50:4b:
b7:a0:cc:e7:c0:af:f1:b0:e0:e5:42:65:d3:b8:30:
d7:d9:6d:e8:72:78:d5:b4:f2:38:27:b5:b3:08:98:
7b:6f:3d:8f:70:f6:bc:e4:a3:be:62:5a:bd:d8:50:
33:9e:5a:6c:60:1e:c7:bb:db:d6:73:a0:07:c1:9b:
20:4e:2c:7a:2e:bb:77:e6:38:34:25:b4:e2:21:c5:
c8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:15:6C:1C:99:8C:60:26:AB:BA:F0:6D:A7:BE:72:43:F7:C8:A4:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2ae2132d-23cd-3b4b-be4c-1feb6aeb7e28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
152.180.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:c2:95:7f:f1:05:2f:09:f5:da:9d:cd:43:86:c0:1d:da:d4:
fd:e5:f8:97:2b:71:30:9a:4f:4f:00:a9:ba:6e:62:f2:a1:e3:
5f:97:d6:a9:84:6e:f1:c8:81:38:1b:8f:36:fa:c9:16:ca:0c:
a3:93:7b:84:27:56:42:36:6f:cf:bc:bd:66:64:ae:57:42:86:
3f:57:57:42:57:a2:ec:42:b6:9a:f4:f1:99:6f:54:04:85:70:
23:d1:e4:7a:6e:e2:ce:8a:ee:20:1a:3c:ec:c0:aa:e6:33:8b:
62:33:8b:ab:0f:fd:dd:4e:f3:5d:2e:7a:4d:6b:83:96:bd:ce:
09:2c:d9:45:15:17:f7:72:3f:d7:95:42:a1:22:ac:d4:90:90:
cf:df:e2:31:45:2f:11:45:7d:08:16:4c:af:ba:f9:d1:c2:42:
63:13:b1:49:b5:65:44:5f:3b:3c:85:ab:4f:a0:6c:5e:c4:ba:
e1:fd:70:c9:3b:f6:2b:fa:06:36:b1:a5:6f:c4:3c:b0:fc:22:
87:d7:ad:74:bd:fd:98:9d:97:a9:08:c6:b8:53:68:23:6a:fc:
9f:d5:2c:39:c0:6c:88:81:34:af:70:2d:29:e8:09:ed:1f:16:
ba:22:f8:f2:61:6b:73:2a:db:8b:a3:88:11:f2:54:42:9a:84:
8f:cb:e8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:22 2025 by rpki-client