Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa
File: 9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa (raw, json)
Hash identifier: O+tjoWf/HPTUiPEObIm+50i04ezIAHRe12ldrSHJ8Ho=
Subject key identifier: 50:4C:73:60:4B:51:65:71:F9:6C:05:DD:00:56:17:5D:9B:5B:11:B0
Certificate issuer: /CN=af86fe52-5b77-46b6-9502-51ccccf3a755
Certificate serial: 010D0C9F43285848960B57A9F1A0547B2B2E9900
Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 131.226.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:57:a9:f1:a0:54:7b:2b:2e:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=86174605-f2ad-422c-9899-af2e4905d613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:81:d3:a0:42:fa:b2:5f:45:06:be:0b:7a:
b3:10:0b:15:4e:42:ef:43:bc:07:a0:96:da:fb:17:
23:3e:bc:59:95:b6:e9:55:dd:29:5e:a4:81:66:39:
95:9b:87:80:f6:5d:48:5a:32:3f:d4:2f:c4:7f:e5:
c9:e5:64:bc:7a:77:54:01:a0:19:de:0c:cd:f7:4a:
7a:e1:51:40:b2:34:27:99:48:54:a7:23:8d:07:32:
12:ab:61:c0:a9:bf:2e:cd:17:46:f8:2f:a1:fa:13:
90:49:12:8b:b2:c9:70:65:f2:b1:17:ad:90:48:2c:
6d:c1:17:c6:02:28:0b:63:63:e1:a0:24:39:a4:31:
0f:f9:c0:e5:0c:cd:95:03:b8:29:4e:07:7c:99:ac:
d0:34:b2:f1:9e:3e:f4:6b:23:7c:98:b2:42:c5:bd:
be:ac:6b:b7:92:cd:14:9e:d4:e4:a4:23:23:66:22:
e2:51:72:46:6b:87:72:1f:09:93:d1:dc:fe:08:7e:
67:0c:fa:87:54:7d:17:86:9c:b0:29:eb:53:b2:2b:
8c:61:f0:26:04:07:f5:25:87:16:a1:3a:44:a1:8d:
33:fb:cd:21:76:cc:3e:fc:24:77:f0:3c:e7:a7:b9:
a4:0c:1b:cb:b6:d4:ab:78:fd:f3:11:ae:40:7b:0e:
3b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4C:73:60:4B:51:65:71:F9:6C:05:DD:00:56:17:5D:9B:5B:11:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl
X509v3 Authority Key Identifier:
keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
sbgp-ipAddrBlock: critical
IPv4:
131.226.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:3e:a6:49:48:bb:c7:b5:ec:b6:a5:1a:00:a6:d2:13:71:ca:
1a:7a:54:d4:f5:43:0a:99:d5:59:5f:9d:f9:ec:da:a3:60:bd:
c6:3d:38:3d:ad:fa:23:53:f9:87:dd:5c:96:61:c7:20:f7:04:
14:84:b5:98:a1:0a:b7:72:4b:8e:e4:b4:8b:78:d0:e7:59:25:
58:f0:7e:f6:87:2d:3a:30:20:a2:10:5e:b1:36:90:a7:bd:e8:
fb:98:60:8d:7d:68:3d:a0:d4:b2:2a:16:e9:d8:5f:46:37:88:
ac:25:8f:26:b8:6e:34:df:98:c2:b3:57:0d:a7:d4:f1:c9:1b:
fa:1f:04:36:10:f2:fd:db:f7:0c:11:22:c6:ad:5b:3c:10:f1:
4e:48:8b:93:02:2a:36:f1:f0:0a:b2:1b:b1:6a:88:18:17:22:
39:fa:ae:92:37:ce:8c:d4:9c:72:4e:8e:18:aa:1d:94:4e:9c:
03:c8:06:f3:fb:a4:5c:97:20:b8:45:60:14:2f:7c:66:c2:08:
a8:fb:aa:95:15:36:dc:99:e2:cf:e9:01:fc:34:d9:99:f8:7e:
20:79:eb:36:aa:32:96:6c:5b:3e:09:5b:b3:14:90:47:06:61:
1e:77:a5:06:c9:82:ad:18:5d:c7:7d:7e:bd:2e:92:26:99:29:
55:80:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:57 2025 by rpki-client