Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/6c07a066-d417-32fd-ba35-53269b17f457.roa
File: 6c07a066-d417-32fd-ba35-53269b17f457.roa (raw, json)
Hash identifier: 1c1yaD0YgZg3XJ6zlAWEtHtGoBJ2aiCUYc6W9J9Z2tA=
Subject key identifier: DD:51:31:29:12:5D:0F:17:1C:88:3E:7C:8A:E2:CA:2D:9A:4E:DF:71
Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Certificate serial: 010D0C9F432858495ABEDE5961FBD1536DA63FC0
Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/6c07a066-d417-32fd-ba35-53269b17f457.roa
Signing time: Sun 30 Mar 2025 01:00:47 +0000
ROA not before: Sun 30 Mar 2025 01:00:47 +0000
ROA not after: Sat 28 Jun 2025 01:00:47 +0000
asID: 40788
IP address blocks: 24.53.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:5a:be:de:59:61:fb:d1:53:6d:a6:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059
Validity
Not Before: Mar 30 01:00:47 2025 GMT
Not After : Jun 28 01:00:47 2025 GMT
Subject: CN=6a018313-c710-4ef8-b2ed-e0e34616f07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e4:8d:8a:0f:97:4b:9f:a1:4c:94:bb:37:58:
52:7d:11:4d:3b:6c:49:d7:56:ca:06:84:53:ec:37:
4a:98:0f:fc:e3:2f:2e:d0:e0:03:fe:97:da:4d:12:
2e:94:4a:1a:89:10:4e:e8:eb:32:ca:93:64:9d:8f:
a7:03:59:ea:f9:7a:03:f0:9e:e7:50:a6:41:5f:18:
a1:3e:30:e0:16:2b:82:2c:e6:a1:2a:48:45:02:64:
3e:2e:c5:f7:9c:51:0f:a3:6f:c1:09:bb:35:13:95:
dd:98:89:e6:76:c8:e7:65:b5:1f:20:74:b2:63:6c:
c3:22:39:21:54:87:44:12:5d:67:fc:66:ab:fe:1a:
e4:32:f1:82:a2:2a:7e:41:c2:6b:05:ac:ed:2d:94:
f8:f3:fc:3f:ca:ad:f5:1c:3e:5c:04:aa:0f:84:69:
47:2a:a5:d5:2c:b9:bd:c4:15:4e:e0:ab:59:ba:12:
3d:b0:4d:63:af:e1:ac:b1:74:b0:b9:f7:59:4e:47:
b0:b5:ba:b4:45:52:a1:a1:d9:6d:25:0f:b8:e1:13:
a8:ff:99:a9:c2:1b:1c:ed:45:47:b4:0c:99:85:16:
91:b3:5a:40:32:be:6c:21:0d:98:e4:98:c0:0d:e1:
fe:e8:9a:79:5f:78:4a:e7:b7:ea:7d:6c:11:f2:61:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:51:31:29:12:5D:0F:17:1C:88:3E:7C:8A:E2:CA:2D:9A:4E:DF:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/6c07a066-d417-32fd-ba35-53269b17f457.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl
X509v3 Authority Key Identifier:
keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer
sbgp-ipAddrBlock: critical
IPv4:
24.53.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:14:72:40:e0:69:cc:05:eb:c7:fa:93:c9:a2:30:10:cc:e7:
09:2b:7d:53:f9:e5:97:9b:d1:fb:c8:2c:07:41:d8:54:be:1f:
65:1b:f8:72:89:25:7f:39:0f:e1:d2:4d:25:e6:75:29:f6:32:
91:66:01:36:1f:fd:f5:c0:1b:56:06:5b:ed:3f:53:68:0d:65:
40:50:19:6a:1b:3e:d9:76:92:c0:d7:87:eb:a2:ab:b0:ec:b2:
af:c1:44:26:a3:fa:e4:f3:84:51:e0:1a:e4:b5:94:4d:0c:30:
bc:ef:5d:b2:7b:42:6d:3c:cd:7d:6d:c8:8d:d6:b5:05:53:fc:
d4:5e:bd:ad:ae:07:65:0a:2b:eb:0a:cd:fe:04:f5:e4:d7:50:
5d:75:19:35:db:d6:c9:96:e8:6c:f9:a1:29:e2:49:45:f9:8d:
30:78:05:d0:a1:56:12:bc:88:87:21:fb:b7:05:f6:be:5a:d4:
cb:b5:c3:98:47:cc:20:23:66:ba:2b:b7:74:5d:0e:5c:b0:e9:
7b:27:1c:4d:fd:c8:7c:12:9a:2a:95:91:4c:4b:8f:3f:79:e9:
af:fd:cc:87:9a:f3:a8:39:32:07:8a:10:6e:2b:c7:5b:71:da:
bc:1b:1b:e1:c5:0c:80:88:af:dc:fb:29:b9:b7:bf:df:14:d5:
1f:c3:87:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:59 2025 by rpki-client on console.sobornost.net