Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3f55e722-9371-3246-8ecf-83ad16b69b2e.roa
File: 3f55e722-9371-3246-8ecf-83ad16b69b2e.roa (raw, json)
Hash identifier: l+0feGPDFyLYqesnIFeytL+BXa/4M0VFef9ZGKWam70=
Subject key identifier: 60:0C:EF:99:00:DE:A4:DD:5D:9B:0B:1E:04:2B:D8:63:0E:61:29:37
Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial: 010D0C9F432858480214F632F442895629724C80
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3f55e722-9371-3246-8ecf-83ad16b69b2e.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 33442
IP address blocks: 157.235.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:f6:32:f4:42:89:56:29:72:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=7d2d23de-8fa7-4d87-ba92-a785589bc787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:67:09:24:a9:04:92:0a:5e:52:fc:b6:4f:
2a:e4:fd:0f:79:65:6e:90:fa:89:99:b3:14:d1:d6:
2f:9e:0a:78:46:a3:51:fb:d8:7f:8d:92:f1:ea:e0:
a6:2a:ea:37:07:68:dc:ac:a4:80:1e:26:73:51:55:
bb:dd:d0:0c:17:87:e5:0f:1a:78:b3:b8:f5:2e:cb:
76:b9:83:95:0b:16:6d:3d:b4:f5:47:a7:53:29:dd:
52:41:90:42:e9:3e:78:59:e3:ac:a1:36:75:b0:63:
c3:d3:2d:e2:0d:9a:0e:8b:61:ba:3d:fd:ab:6d:92:
13:4b:21:c4:9d:19:4e:b1:9c:9e:6c:61:92:2f:26:
0a:8c:aa:bf:16:ca:1c:aa:2a:c8:7d:87:16:f8:6a:
40:7b:a5:d3:0c:31:7c:6f:65:5f:93:a0:7c:bd:6b:
b0:07:49:4a:bf:8d:12:5a:64:81:01:37:15:d4:70:
e8:96:b8:d0:df:01:58:7c:dc:87:ea:a0:ca:b9:b3:
01:df:e0:69:43:66:aa:b7:8f:ff:91:33:6e:75:3a:
de:05:a2:f6:ca:6a:c5:96:a3:b3:47:81:90:be:5a:
3a:24:6f:4a:a3:85:f3:3d:28:18:55:b5:8e:c9:b0:
24:9d:5a:af:1d:1d:c2:10:6e:e9:43:fa:84:0e:96:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:EF:99:00:DE:A4:DD:5D:9B:0B:1E:04:2B:D8:63:0E:61:29:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/3f55e722-9371-3246-8ecf-83ad16b69b2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
X509v3 Authority Key Identifier:
keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
sbgp-ipAddrBlock: critical
IPv4:
157.235.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:a3:db:6f:63:78:53:31:1f:91:76:54:7f:f9:a7:38:9a:9c:
85:4f:30:f3:79:d0:df:8f:e7:bf:f0:1d:97:5b:e5:c2:7a:9a:
7f:1d:24:56:ce:7a:b8:21:40:72:27:b9:2b:a6:e6:8e:07:b5:
17:aa:2a:78:88:32:40:bc:6b:02:b5:91:b2:77:3a:b3:81:3c:
64:41:64:de:b5:18:e6:0c:fb:a2:89:33:80:6f:22:68:11:07:
ec:2e:d2:a8:cf:8c:95:24:9b:2d:e9:66:5e:ae:f1:bf:f5:7f:
eb:02:3d:bf:19:7a:e0:b3:55:02:df:1e:4f:4d:52:2b:6d:60:
65:c5:14:73:be:b3:a8:2a:66:e5:ad:25:26:94:2f:c0:31:51:
ae:42:8a:b3:b0:b6:6a:2b:a0:2e:60:51:63:83:d4:c6:8d:eb:
1a:ff:0a:c2:ca:b5:14:ee:39:b5:e0:32:df:29:70:b2:90:99:
35:c9:30:fb:e9:53:13:2f:35:a9:78:f6:82:07:6f:ae:64:c4:
a6:2b:d4:d1:9d:ee:e1:25:57:b5:36:95:42:eb:71:2f:da:b1:
38:6d:61:37:78:94:55:7b:8f:5c:fc:ba:2a:fc:25:8f:09:4a:
c8:56:08:7e:7f:96:98:dd:79:b3:0e:c8:44:03:90:7d:39:73:
ff:5c:03:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:25:29 2025 by rpki-client