Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/03015ce5-534f-338f-a8b1-7093f928847b.roa
File: 03015ce5-534f-338f-a8b1-7093f928847b.roa (raw, json)
Hash identifier: +vx2qxLqdH67Wj02SjFBxuia1cV3fJ5XWp9ugVgQqig=
Subject key identifier: A2:0C:12:B4:D5:FC:EE:44:FC:73:F7:92:20:3C:6C:3D:D9:20:F8:EB
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F43285848037B5FE5BB2698CCAFF3DB00
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/03015ce5-534f-338f-a8b1-7093f928847b.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 33442
IP address blocks: 157.235.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:5f:e5:bb:26:98:cc:af:f3:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=2496338c-9c54-4802-acd1-893236a59ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:32:ca:8b:63:8d:60:fb:03:21:4f:dd:5e:0b:
92:1e:cb:4f:e0:f7:be:8e:78:e2:04:0f:89:10:9a:
29:ab:0d:6b:3e:84:2d:b2:76:b4:8f:2f:d8:f2:3b:
76:9e:01:8d:ac:54:32:32:9b:90:4d:fc:57:2b:f5:
0f:04:4e:86:00:d3:c3:47:c7:ed:85:17:2a:25:db:
d4:c9:04:19:86:e5:66:28:6e:f0:b3:10:4d:32:7a:
1a:7b:d2:b7:48:c8:47:55:fb:7d:d5:eb:3d:e2:34:
06:6c:09:86:0a:b4:c9:53:bd:ae:21:30:2f:11:94:
08:4f:05:be:17:ea:29:91:a6:f1:6f:60:19:bb:87:
c0:90:bd:9d:b6:5c:08:10:be:29:22:53:a0:e0:4b:
46:57:f1:fc:1a:85:67:ff:5e:f9:ea:bc:47:22:13:
96:28:29:a2:16:d9:b3:bf:2b:aa:f9:b7:dd:4a:e4:
8c:24:4a:d0:0f:eb:20:51:75:37:fa:e4:76:b0:09:
54:af:14:c1:0a:8a:f2:25:e7:fd:e9:22:cf:49:3a:
f4:b4:8e:90:3d:a4:84:55:b6:4b:79:bf:9a:b8:ce:
50:9f:0c:62:64:c3:c9:42:e6:ec:33:91:4b:a8:69:
cb:56:8c:a0:e3:ee:b8:97:0a:e2:44:84:21:a9:93:
32:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0C:12:B4:D5:FC:EE:44:FC:73:F7:92:20:3C:6C:3D:D9:20:F8:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/03015ce5-534f-338f-a8b1-7093f928847b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
157.235.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:57:99:03:cd:28:72:88:6e:a3:f8:0c:fe:2a:f6:20:2c:4b:
6e:e7:06:48:3e:22:4a:e6:c8:99:a1:f7:1d:92:ef:86:66:da:
8d:30:56:3e:d3:cb:68:0e:9f:fc:d6:89:b3:fb:31:68:3b:50:
b8:f5:50:8c:73:fa:30:8c:49:56:aa:43:b4:7d:7b:cb:28:30:
72:3d:ef:05:b4:ef:65:96:cb:cd:7b:72:b7:01:81:6e:43:44:
8b:9b:9b:12:f4:d5:63:2f:6f:35:ab:e3:22:b8:90:07:dd:0e:
e8:6f:04:3f:a0:04:d9:46:8d:fc:be:fa:7c:ab:02:98:f9:a9:
57:d6:41:1a:3f:d3:04:67:f0:49:6f:7f:bd:6e:e3:cb:e5:a3:
c5:ce:09:33:56:26:da:07:fe:30:5d:03:f0:7c:6a:2e:e9:74:
c3:96:5a:2f:97:09:c2:51:75:08:38:68:6d:9f:10:f1:76:13:
92:06:bd:4a:ea:7b:86:d2:82:3b:2a:4d:4e:65:90:c5:c3:9e:
f3:9e:60:d9:1c:db:8f:19:81:dd:50:7d:59:d2:f7:88:1f:32:
96:eb:56:97:c8:e8:20:c1:89:69:e3:b6:94:ab:c8:c9:24:d8:
c1:cd:84:5f:d1:2a:2c:be:1b:ea:3e:d3:2c:c9:dd:c9:94:a8:
f1:18:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:50:11 2025 by rpki-client