Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da41c4c1-d509-3a97-a535-b5df4eda825c.roa
File: da41c4c1-d509-3a97-a535-b5df4eda825c.roa (raw, json)
Hash identifier: JEHySbd7HD+VSxUTMxV9H8Fcdtwyz2P7k6CsLigxkKY=
Subject key identifier: 37:2A:60:64:83:9F:82:A9:DE:AC:6C:DE:8C:3D:1D:E0:1B:B8:74:9E
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584886B07E02B37983CBDC111700
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da41c4c1-d509-3a97-a535-b5df4eda825c.roa
Signing time: Mon 13 Jan 2025 02:00:40 +0000
ROA not before: Mon 13 Jan 2025 02:00:40 +0000
ROA not after: Sun 13 Apr 2025 01:00:40 +0000
asID: 20115
IP address blocks: 150.224.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:86:b0:7e:02:b3:79:83:cb:dc:11:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Jan 13 02:00:40 2025 GMT
Not After : Apr 13 01:00:40 2025 GMT
Subject: CN=c023bcb0-dc0f-4b6e-a54a-bfde36208a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:9d:f7:62:a7:9c:a9:b2:b7:1f:95:cd:7f:
45:73:b9:0c:e9:52:07:4f:c5:8c:95:6e:1d:73:ba:
f4:ca:29:92:fd:f6:64:54:f4:8e:e1:95:44:fc:a8:
0d:6a:c2:78:1b:fd:1d:28:c9:b3:ac:7f:4e:7b:e7:
76:fa:a6:76:9c:09:3e:c7:f9:a0:49:06:cb:5a:92:
24:5e:5b:a0:cd:50:00:87:cb:49:1c:bc:8c:29:b6:
54:09:e3:66:3b:75:64:82:ec:e7:6a:54:89:d4:e3:
33:e7:70:42:c8:c8:f3:90:0c:9d:c7:df:a3:fd:ad:
d1:5f:fb:3f:a8:14:f8:09:8d:8a:4c:6c:09:59:52:
6e:24:b0:27:7b:89:e6:b6:50:59:e7:d7:3d:1d:b2:
1c:4a:26:89:eb:df:2c:aa:21:81:53:59:d7:19:a2:
71:4c:ee:ca:9f:0c:a6:1e:81:b6:b0:f7:e2:8c:9d:
58:fd:d3:23:2f:fe:4b:cc:ec:07:3a:5d:c2:8c:a2:
02:20:a5:8e:5e:38:62:3c:52:69:02:92:47:a0:8d:
13:17:95:f0:3c:ad:0c:5f:85:a5:85:5e:d2:d0:24:
cd:5e:f8:3e:85:91:67:5e:d6:29:1b:8b:4e:55:93:
43:cc:85:65:0f:0a:b6:4f:c0:f9:e2:22:5a:02:9a:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:60:64:83:9F:82:A9:DE:AC:6C:DE:8C:3D:1D:E0:1B:B8:74:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/da41c4c1-d509-3a97-a535-b5df4eda825c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
150.224.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:06:61:30:37:40:9d:ca:63:26:e2:46:cc:57:42:95:84:a4:
e9:69:1b:b6:71:8a:42:c6:fd:48:45:ca:32:ff:25:44:78:2a:
8e:ed:41:f3:fb:70:07:b9:5d:26:30:09:49:00:ac:53:d9:d4:
75:5c:50:13:10:da:de:fc:66:d3:47:88:0b:39:db:b3:bd:61:
e7:b7:07:b1:43:1e:0c:9a:0e:06:c1:d4:57:2f:6e:a2:22:88:
15:64:04:00:c4:fa:a6:d7:fe:6e:33:d4:c3:75:25:91:46:8e:
58:e7:0a:2e:8a:18:4b:a0:92:8a:78:c6:fd:1f:c2:f1:35:c6:
f7:f0:fd:51:37:d6:e4:13:b2:bd:4d:a7:b5:b9:4f:f0:f6:e3:
d5:12:84:99:dc:33:43:24:04:8c:9b:eb:9e:55:d9:05:56:e0:
28:88:48:be:09:a1:f6:ac:87:14:49:80:5e:e9:87:a3:cb:ff:
32:e7:40:5f:1f:24:53:a4:93:08:b1:17:30:bc:0d:c0:5a:24:
2c:8e:c0:b1:1d:8f:7b:d6:94:97:61:f8:8e:48:05:2f:18:6f:
be:47:20:5a:e1:59:f8:0d:24:66:16:d5:c8:7a:8d:46:82:95:
b9:3e:3f:0d:e9:ef:f3:0f:65:c1:41:2f:df:49:31:a9:ba:f5:
82:4d:b8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:14 2025 by rpki-client