Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa
File: f7a0a132-7709-3c14-9b98-1b035b042808.roa (raw, json)
Hash identifier: +qXP0FU6eeWAw56jZObFSbwHSip2FlbtgZ5mH87CYLE=
Subject key identifier: A7:AD:C7:4F:E7:BD:48:E3:14:57:82:D8:DD:8D:70:6A:D2:FB:AC:0B
Certificate issuer: /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial: 010D0C9F432858484EDAC330E07E90C01977DC80
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa
Signing time: Tue 24 Dec 2024 02:00:38 +0000
ROA not before: Tue 24 Dec 2024 02:00:38 +0000
ROA not after: Mon 24 Mar 2025 01:00:38 +0000
asID: 16679
IP address blocks: 152.157.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4e:da:c3:30:e0:7e:90:c0:19:77:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Validity
Not Before: Dec 24 02:00:38 2024 GMT
Not After : Mar 24 01:00:38 2025 GMT
Subject: CN=4fcbc266-7e6b-498b-a357-a2b829c0482b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c8:e8:f7:bb:26:1f:c1:e9:54:2d:08:67:91:
ec:14:7a:43:9c:21:7f:f8:3f:be:81:c5:25:06:e0:
5e:c3:00:33:5a:0e:aa:af:2a:0d:92:a4:10:4d:c8:
14:b1:04:2f:87:36:fb:10:a6:5d:a7:85:21:23:03:
30:f9:48:ff:19:7f:a7:50:8f:73:30:fd:3e:d0:8d:
f6:c4:21:46:c4:dd:62:07:0a:e4:07:9e:5a:d4:26:
7c:92:d4:d5:e0:bf:13:38:4f:fe:11:91:b5:d5:83:
90:3e:f1:81:56:2c:95:3f:1b:2d:d4:60:2c:7d:af:
1c:17:e7:15:f0:0d:c7:df:c3:34:ea:99:e3:5f:4b:
60:ba:89:34:78:ca:6c:78:b9:f9:1b:51:86:85:90:
5b:89:2c:d2:76:11:08:5a:e4:14:85:e5:1c:3f:92:
80:52:25:45:25:af:a2:db:d2:9c:c6:c5:10:72:1c:
1e:b6:b1:62:d1:3a:1c:98:9c:5b:58:08:dc:c9:92:
32:9a:cc:c6:5d:6c:53:53:12:1f:f3:b9:66:aa:15:
8a:36:c1:44:22:4c:4a:9c:14:be:82:0c:32:f9:ad:
6c:54:bb:9b:5b:77:b3:74:d9:ef:8e:fd:12:58:1f:
d5:51:bd:b7:6e:a5:be:98:8b:0d:f2:e2:f7:aa:be:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AD:C7:4F:E7:BD:48:E3:14:57:82:D8:DD:8D:70:6A:D2:FB:AC:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/f7a0a132-7709-3c14-9b98-1b035b042808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
X509v3 Authority Key Identifier:
keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
sbgp-ipAddrBlock: critical
IPv4:
152.157.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:7e:f1:7f:04:43:ee:ea:27:fd:05:83:84:22:a4:fc:6e:14:
3a:22:08:d7:22:cd:41:63:b8:6d:2f:19:da:0d:12:d4:9f:e3:
f0:eb:f8:86:d4:4f:8c:22:8b:a7:4a:06:93:5e:06:28:af:23:
18:11:c0:92:3b:17:ca:71:5e:5a:c4:4b:c1:af:2a:a9:53:3b:
a2:ae:e6:b0:11:98:31:4d:9c:d3:6f:24:fc:e9:bf:0a:dd:e4:
af:18:f0:11:ea:58:e6:3f:20:e4:28:f0:8b:99:39:f0:f1:30:
69:75:5c:5e:e6:ff:cf:bc:49:b0:91:bb:d5:48:a8:6c:35:55:
68:a8:a5:29:11:c1:ec:24:af:3a:f0:02:56:b5:b0:5b:32:37:
e2:d5:4f:50:6e:da:45:28:38:31:96:b4:12:ec:43:99:54:c2:
83:ec:be:c2:c3:c2:f6:de:1f:e0:3c:a2:78:63:84:d8:fa:51:
02:32:d7:79:a0:cf:91:8c:c1:37:0d:bb:94:e2:d9:23:03:75:
4f:f3:c3:6f:f4:70:2b:ba:b4:be:c8:fd:47:4e:89:36:ea:07:
d3:17:77:40:76:4f:33:83:55:24:9b:8b:21:8c:8e:ff:dd:70:
11:80:1b:74:ba:71:0c:4c:5e:2e:cb:d7:42:dd:82:12:aa:77:
cf:21:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:23 2025 by rpki-client