Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57d5dcad-cb68-30c1-a6c4-277b005bb35c.roa
File: 57d5dcad-cb68-30c1-a6c4-277b005bb35c.roa (raw, json)
Hash identifier: zpW1rvGGrcNekPeRgYzqrbCBGelF8Mb7X9gQS6YmMnc=
Subject key identifier: 32:51:FC:44:AE:E7:9E:26:B1:7E:52:72:99:06:67:89:1A:1B:BA:DD
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858488BA8D409EFE3F40530D8B640
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57d5dcad-cb68-30c1-a6c4-277b005bb35c.roa
Signing time: Tue 14 Jan 2025 20:44:25 +0000
ROA not before: Tue 14 Jan 2025 20:44:25 +0000
ROA not after: Mon 14 Apr 2025 19:44:25 +0000
asID: 398033
IP address blocks: 152.180.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8b:a8:d4:09:ef:e3:f4:05:30:d8:b6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 14 20:44:25 2025 GMT
Not After : Apr 14 19:44:25 2025 GMT
Subject: CN=5d3ee4ab-5b05-4559-b83b-1ed3587d5684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:da:1f:43:bc:11:b3:4d:f5:ec:c1:f1:e2:
d1:0d:ab:fa:5a:c1:57:9a:13:f1:e0:88:fc:92:9e:
7f:2a:ce:47:5a:57:96:25:99:ec:10:b9:45:bb:d3:
a0:79:ad:40:89:4e:ac:24:9c:09:46:9d:17:84:0b:
55:d6:8a:cb:0f:d4:af:64:4f:3e:96:a2:5d:c5:3b:
b5:6d:7a:0d:7f:2d:dc:8c:cb:ef:1b:71:96:2c:54:
23:a8:2c:15:25:13:ca:4e:4d:3e:48:52:5a:c8:46:
b1:db:60:70:92:0f:4c:68:5b:b0:98:56:06:d9:0d:
c7:ed:a9:c7:80:e0:1a:f4:97:b2:69:ce:96:df:84:
e8:65:99:30:96:93:b7:54:ab:f3:89:30:bd:93:5b:
ed:e9:b4:82:64:c0:ec:93:b8:52:cd:df:7a:60:a3:
96:00:ee:ff:37:d4:ef:c6:0b:62:f3:b4:56:de:ef:
e5:13:10:0d:31:23:2a:fa:ad:4e:ff:97:5d:d2:e5:
5c:14:8a:80:ac:86:93:a8:a9:c6:c2:0e:01:ce:dd:
08:7c:13:a9:54:65:20:4a:18:13:33:2d:7e:e3:2e:
82:e3:7b:49:6b:30:71:bb:d4:c7:97:8c:62:7c:51:
45:02:57:76:8c:a3:1b:13:bf:54:d1:4e:f2:38:e5:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:51:FC:44:AE:E7:9E:26:B1:7E:52:72:99:06:67:89:1A:1B:BA:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/57d5dcad-cb68-30c1-a6c4-277b005bb35c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
152.180.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:43:b6:95:e5:06:12:17:a3:3c:9f:b0:b9:8d:79:a8:90:18:
ef:0a:de:91:62:88:be:38:9c:3d:1c:56:b6:ab:8f:86:09:aa:
7e:7c:17:a6:ef:ec:00:0b:a6:5f:bc:13:33:8a:22:93:0d:90:
d0:ac:8a:d9:79:9f:a6:8b:d5:9d:36:91:c7:98:4f:d5:cc:4d:
8f:4d:7b:b9:54:44:8b:7d:d9:3a:8c:6e:7d:ec:84:dc:2d:25:
2c:fb:24:16:0c:ab:aa:f8:bc:07:01:09:e7:e7:44:82:eb:b8:
a5:33:de:4c:0b:6f:49:59:7f:70:86:bd:aa:4d:a4:12:b4:e7:
49:cb:8f:61:cb:02:90:c7:63:3d:25:73:11:f4:88:36:c2:13:
73:70:4e:7a:c5:2d:3f:5c:22:47:80:90:61:6b:eb:40:25:7a:
d5:71:52:46:e3:16:bc:49:fe:07:b6:7b:b2:8e:e0:78:fd:3c:
b6:b5:79:0f:d2:d9:da:1e:47:c3:7e:7a:7a:ac:af:6b:98:88:
04:87:df:f7:df:e9:bc:c2:52:ae:24:c8:5c:0d:45:3c:4c:4c:
6a:a3:7e:a0:65:e9:fe:2b:93:7e:b4:49:ef:38:45:28:56:e7:
dc:d2:d6:30:7e:ff:75:16:62:95:16:f5:99:c5:e0:cf:ca:f3:
0b:f3:f3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:49:00 2025 by rpki-client