Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/579d1c98-5742-34d3-b46a-f6ce08b05c22.roa
File: 579d1c98-5742-34d3-b46a-f6ce08b05c22.roa (raw, json)
Hash identifier: 6gNVLoQGoKWlbLltpeSPELUeIRLpsyh3U7b5P1uPVUo=
Subject key identifier: C6:E0:59:07:40:92:5D:82:53:DF:BF:E5:A2:2D:0A:D7:1C:1F:AB:74
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584878BB093F6E85747CE9519E00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/579d1c98-5742-34d3-b46a-f6ce08b05c22.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 11232
IP address blocks: 24.52.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:09:3f:6e:85:74:7c:e9:51:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=19fde547-9919-452b-afc5-07e15edb9558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:67:9b:5b:ee:9a:b2:6a:be:18:59:a5:58:4d:
ac:38:10:ac:2c:da:de:d6:e4:18:c4:45:aa:c5:67:
56:9d:ed:b1:d2:2f:13:40:42:a6:99:3c:77:85:00:
ff:27:09:63:f3:cd:ec:c2:f4:94:35:a7:3d:c8:99:
bb:16:1b:25:7b:a3:65:bb:7c:50:c8:15:87:2f:9a:
21:c7:d3:6a:7a:87:2d:d2:95:db:c8:3f:f8:66:05:
15:51:b5:87:0b:98:d3:bf:18:fa:cd:87:d4:2d:7b:
e7:27:54:9b:c2:d7:d7:86:ca:2b:b5:cb:76:dd:c1:
44:8a:85:25:92:52:82:ef:b7:0a:6d:7c:f3:fd:c8:
2f:97:9a:21:fb:b6:26:15:3e:ff:22:4f:b3:81:62:
2b:ee:6c:6d:cf:80:56:69:e7:21:49:4b:93:0a:84:
84:19:66:9e:a6:2a:bd:9f:b1:b5:56:df:ce:61:6f:
19:f6:a2:03:02:08:d5:1d:c1:bf:f1:60:86:37:21:
4e:ef:d7:74:a3:68:a0:e3:87:37:f8:fc:ff:40:4d:
4e:21:44:03:a4:b8:e4:f0:36:64:0d:34:db:9f:58:
5f:15:ef:ba:28:f3:8d:f1:5d:02:f3:8b:66:c4:8a:
34:69:22:3b:5e:3b:b2:ae:92:8b:5c:d6:0a:9f:0d:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E0:59:07:40:92:5D:82:53:DF:BF:E5:A2:2D:0A:D7:1C:1F:AB:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/579d1c98-5742-34d3-b46a-f6ce08b05c22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.52.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:e3:ea:b5:96:4e:a5:87:7a:32:42:c2:15:9a:41:81:f3:b4:
7a:82:41:5a:a8:d8:8f:b2:5b:b4:3e:1b:ed:c2:5e:22:c2:7e:
09:a7:97:80:01:9c:42:9a:77:bc:c5:d9:1a:11:77:fc:c3:e7:
da:44:f0:fc:65:93:d4:09:17:1c:b7:c6:fb:b0:97:03:43:40:
d4:8b:aa:e8:96:69:43:bf:9f:71:00:f3:b1:3b:f6:1e:6e:77:
11:79:ce:b6:1f:08:11:8c:0b:ee:85:7f:0b:ef:96:50:36:33:
23:ee:81:ed:56:39:da:f1:1f:ef:19:ab:ba:f2:94:33:b5:b7:
0f:4b:54:3a:1f:b5:0c:52:09:3a:e5:e9:9d:69:3e:eb:39:e1:
a5:49:e9:e0:a8:ad:aa:31:60:9b:db:b2:90:51:d1:62:5f:81:
83:05:5d:46:79:b6:2f:33:79:4c:c6:97:fa:07:6f:ab:46:49:
4e:c7:fe:91:bd:26:f1:8c:b8:45:cc:0b:7e:06:84:0b:8d:0c:
85:f4:90:ea:8b:3f:10:62:91:81:35:79:8e:53:21:da:05:ef:
2c:bf:d8:69:db:f2:d1:b4:db:db:0c:ad:fe:31:f4:cc:5b:20:
7d:86:9e:0d:e4:ed:f7:30:47:a3:4a:60:22:0b:cb:d0:30:b2:
42:6a:22:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:32:37 2025 by rpki-client