Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6010b20f-cf41-38db-9cbf-e96d77df2f07.roa
File: 6010b20f-cf41-38db-9cbf-e96d77df2f07.roa (raw, json)
Hash identifier: 3Vcvt8OZc+/2Jx8xGAVoHVYMmWhwdM3tp2fgTSEzO6g=
Subject key identifier: 11:40:4E:05:BE:73:42:1E:C5:C6:E2:AC:E6:C0:4D:76:A6:07:36:A4
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584921842767835B6CF29AC82380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6010b20f-cf41-38db-9cbf-e96d77df2f07.roa
Signing time: Sun 09 Mar 2025 13:00:52 +0000
ROA not before: Sun 09 Mar 2025 13:00:52 +0000
ROA not after: Sat 07 Jun 2025 13:00:52 +0000
asID: 22394
IP address blocks: 199.74.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:21:84:27:67:83:5b:6c:f2:9a:c8:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 9 13:00:52 2025 GMT
Not After : Jun 7 13:00:52 2025 GMT
Subject: CN=7d404562-924d-449e-ba9c-38a6cf4bf5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:00:80:fb:6d:58:1b:8a:b4:65:aa:28:ec:9d:
89:da:6e:53:9c:16:a1:20:8b:d3:f1:05:20:a8:2b:
1d:21:3e:80:af:75:3c:57:9f:6b:c4:70:7b:e3:c6:
e3:2d:a6:91:8d:2e:6c:86:25:84:e8:7c:5f:00:01:
56:d9:46:e8:49:2c:40:bf:c8:e6:a1:ba:cc:32:93:
e1:e2:6e:5a:11:5c:c6:03:fc:5d:24:dc:14:60:49:
a2:86:99:3f:2a:8d:6f:f1:d3:37:30:a3:74:ff:d4:
fd:8e:e6:64:3d:9c:e5:bb:5b:e2:e4:38:f7:96:af:
19:95:8a:e6:70:e5:d2:c1:46:af:22:61:7f:e6:bc:
e1:f0:c2:e1:04:13:aa:1e:ce:54:41:63:ad:3e:63:
37:73:5e:9b:64:ee:da:24:b6:ee:42:49:eb:79:a8:
b1:d6:d3:07:22:aa:17:d6:cf:22:f3:15:46:55:f8:
c8:f2:15:43:43:90:81:18:24:cc:44:a9:0b:e9:b0:
70:d5:01:b2:69:1c:05:4d:8e:b2:6d:00:20:9f:74:
0a:72:de:31:78:cf:74:6d:07:b1:ef:32:c9:43:bc:
5d:26:fb:84:5c:12:15:74:66:ff:da:12:09:6b:01:
69:d5:ff:1d:4e:55:c2:eb:da:b4:54:e5:ad:64:40:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:40:4E:05:BE:73:42:1E:C5:C6:E2:AC:E6:C0:4D:76:A6:07:36:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6010b20f-cf41-38db-9cbf-e96d77df2f07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
199.74.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:5d:33:4e:cb:35:61:97:89:51:03:4f:72:d4:e6:60:54:a9:
6b:57:35:20:8a:31:5c:97:8f:c0:33:08:17:82:76:ab:95:b3:
c0:7d:0d:6a:32:2e:6e:a2:ec:ed:43:e7:ee:8d:a1:2b:e5:0e:
85:d1:4b:63:50:e4:59:d5:91:47:67:67:40:8b:98:aa:13:8b:
0f:27:8c:fe:a8:be:21:ec:63:2d:15:45:45:d5:a7:e8:57:9b:
04:3f:b7:51:39:44:5c:b5:4b:f0:19:22:34:2d:67:c4:59:9d:
c9:fe:dc:a5:14:61:50:61:16:83:87:87:da:e3:a3:1d:df:7c:
03:b1:87:69:9b:95:b4:7b:47:33:b7:63:91:ce:47:a5:00:1a:
03:24:17:0b:f5:a8:f1:d7:ee:93:29:9b:aa:78:0c:e7:c2:6a:
48:e2:82:15:21:80:c8:d7:00:7a:68:61:5c:ef:f3:9a:2a:58:
91:65:f0:48:a3:ef:32:c5:b6:08:bb:43:dc:a0:5f:c8:29:00:
67:18:f8:4a:7e:c5:2c:88:ea:e2:ba:89:cb:f4:10:8d:65:5a:
b3:0e:2e:26:1d:c4:9c:23:d4:39:dd:94:90:9b:40:eb:d6:b1:
c0:c0:86:06:7e:0b:09:f9:9a:da:1d:62:6a:87:8d:56:8c:30:
c4:94:e1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:47:29 2025 by rpki-client