Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/12d3f661-2e56-3c74-a257-15115b48da48.roa
File: 12d3f661-2e56-3c74-a257-15115b48da48.roa (raw, json)
Hash identifier: spdDe7TMqSmNu6Ob+JsxdFOC5g2Xa/4EIurj0sF4v4s=
Subject key identifier: 20:6C:19:97:CB:37:72:EA:9E:C1:17:32:DF:DB:AD:0B:FA:A1:31:46
Certificate issuer: /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial: 010D0C9F432858484C1030A259993A70576E9700
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/12d3f661-2e56-3c74-a257-15115b48da48.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33362
IP address blocks: 24.225.112.0/20 maxlen: 24
216.172.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:30:a2:59:99:3a:70:57:6e:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f395a6c6-6aca-4bdf-a7c2-8c575532dbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:87:d8:83:cf:50:1a:e6:91:25:90:ee:91:8c:
1f:68:66:6f:40:6f:72:b8:f5:85:d0:fb:39:52:2b:
9b:0f:42:89:89:40:25:a6:09:67:ba:26:b8:0b:0b:
fb:47:55:f3:ae:e1:8f:df:3a:50:53:6f:d7:cb:b1:
13:d3:17:e0:2c:80:b8:d6:08:e4:99:92:2e:35:86:
a7:f6:d3:0a:e5:ee:ee:7d:fb:1d:1d:0f:46:21:a4:
33:88:a0:a2:ba:db:28:82:a5:06:0d:f7:e1:88:5c:
23:c5:cd:be:0e:a6:14:dc:53:c3:cf:54:ad:6e:e0:
3c:a6:9e:00:ed:ec:97:0d:1c:4d:16:82:87:8b:06:
79:12:2a:d6:5c:9c:d8:63:fb:8b:47:88:db:4d:67:
c4:33:b8:0d:4d:8c:f0:cf:46:0c:bb:f3:5d:bf:0d:
70:6a:a8:9d:4d:09:7b:53:75:1e:be:6e:27:7a:76:
b2:bf:07:da:cf:2f:36:1f:dc:ed:8e:c0:0f:eb:bd:
81:fb:74:c6:00:a4:88:76:df:fb:d0:d7:f0:5d:02:
2f:ff:29:64:91:92:1a:dc:3f:2e:a9:a3:d0:56:ca:
30:ed:63:0b:e4:84:c1:0d:26:59:11:7c:0c:1b:9a:
d7:29:3c:4d:e2:19:1c:50:7e:5c:17:01:2e:5c:0b:
b7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6C:19:97:CB:37:72:EA:9E:C1:17:32:DF:DB:AD:0B:FA:A1:31:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/12d3f661-2e56-3c74-a257-15115b48da48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
X509v3 Authority Key Identifier:
keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
sbgp-ipAddrBlock: critical
IPv4:
24.225.112.0/20
216.172.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:32:43:62:97:1c:56:b7:89:16:21:11:21:1d:d1:ba:18:7b:
93:c5:02:86:44:13:84:c8:dc:0d:d9:6b:e8:72:28:37:7a:19:
02:6f:b8:5c:3d:9d:68:3c:4f:09:fe:e1:97:81:5b:bf:e7:fa:
85:19:2a:00:5f:0b:54:f1:83:ff:87:5c:0d:60:90:33:4a:8f:
90:29:25:20:63:b5:d7:73:db:a0:54:9a:a5:1f:7b:af:e9:76:
67:0d:75:48:d7:85:3b:dd:a4:3c:98:37:73:3f:5b:8d:50:cc:
5a:5a:b9:4c:36:a8:87:85:39:13:cd:a4:ba:36:c7:47:8b:d2:
3d:a3:d4:40:da:0b:88:ec:db:f0:71:22:38:e0:ad:b4:f2:23:
89:c2:42:70:d6:74:4e:ee:4a:79:01:a1:a9:27:25:78:05:db:
6f:a4:a6:6d:91:ac:b2:c1:5d:95:1c:5f:13:c7:53:ce:a9:17:
e7:a9:3f:ed:4d:22:8f:f2:3f:d2:55:9d:df:6d:80:f5:11:a2:
91:2f:da:3d:5c:02:9b:b9:f9:16:12:22:d8:ef:6d:42:14:c5:
d7:55:1e:99:a9:ee:ed:39:a7:82:d6:eb:a4:9c:83:98:a9:34:
49:4a:fe:09:b3:7a:30:6c:98:fd:19:ea:3b:22:91:47:1c:ba:
74:14:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:19:04 2025 by rpki-client