Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/2b5cde7b-bd18-388b-8422-68aca968b427.roa
File: 2b5cde7b-bd18-388b-8422-68aca968b427.roa (raw, json)
Hash identifier: 3nqg1v2HgD5suDLGQnIt6+K7vrKg4EB3IW9gHp4+FhM=
Subject key identifier: 5C:A8:D9:B4:80:F3:74:F6:9B:CA:AF:52:A4:CA:52:21:65:F5:01:0F
Certificate issuer: /CN=a2fa2878-715e-4793-af2a-432583ea0699
Certificate serial: 010D0C9F43285848EF6163390DC61CF3FD27BE00
Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/2b5cde7b-bd18-388b-8422-68aca968b427.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 16509
IP address blocks: 134.195.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:63:39:0d:c6:1c:f3:fd:27:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=63af2036-c9ad-4eba-90d1-75afc001eec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a4:28:af:11:5f:dd:88:53:f4:b5:f5:b5:58:
55:6e:48:ad:d5:e4:a3:ab:f3:aa:dd:74:96:31:61:
3b:9b:a6:58:57:c6:e3:3a:cb:ef:f1:99:eb:80:a9:
4d:a9:3b:92:55:19:ae:85:56:47:82:0e:cf:c0:ac:
aa:33:a4:6e:d1:f9:12:94:9c:5f:40:08:0a:a8:f9:
69:66:84:f3:40:47:56:6c:78:df:df:38:2a:4b:7f:
8c:ce:8f:32:94:6f:c2:bf:c5:42:00:c8:21:36:80:
29:a0:34:54:90:4c:be:4e:73:18:87:ce:3d:0b:b9:
05:cb:12:3a:b7:b7:a8:34:a9:8c:73:d3:ef:97:32:
94:19:0b:f6:f4:24:c5:b1:81:83:5a:7f:c5:30:01:
02:68:09:6c:27:d6:42:22:0b:04:dd:9d:ba:cc:48:
5d:a4:5a:06:2c:c0:70:7d:e9:99:09:89:9c:f4:24:
fe:d1:d4:a4:51:fa:07:e0:eb:d3:df:38:09:e2:72:
36:b0:11:06:7e:67:55:68:9f:84:af:bf:cd:18:43:
9a:db:6c:2b:b3:a0:63:f7:66:1b:06:cc:0e:3c:09:
d8:8a:bf:71:bf:47:2b:66:7f:9d:a4:6b:23:79:c6:
f7:0f:54:05:b1:e4:a1:62:d4:cc:a6:c6:0c:cd:cd:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A8:D9:B4:80:F3:74:F6:9B:CA:AF:52:A4:CA:52:21:65:F5:01:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/2b5cde7b-bd18-388b-8422-68aca968b427.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl
X509v3 Authority Key Identifier:
keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
sbgp-ipAddrBlock: critical
IPv4:
134.195.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:67:a3:1e:3b:2e:7e:9e:c1:d8:be:fc:33:a9:d4:07:e6:dd:
7d:c6:d2:6f:f8:43:e4:a8:c0:77:f4:ee:d1:53:b9:6c:2c:a2:
a6:a5:9f:a5:a7:43:6d:11:f9:99:f2:9a:31:9a:a5:87:5b:f7:
4f:5e:83:87:9c:ea:df:ce:32:cd:63:ee:16:d3:65:1b:dc:db:
cf:f0:05:8e:fb:bb:20:72:00:0a:d4:d2:fa:e3:89:ca:97:ed:
89:d3:63:a3:45:8b:1f:14:65:1f:37:9a:84:d9:32:eb:00:57:
52:cf:0b:07:63:01:e0:03:79:8e:d1:cf:ce:a2:17:7b:ab:51:
ca:dc:b0:9d:6a:c9:7d:fa:99:d3:4d:6a:1b:2d:d3:eb:fc:64:
10:70:72:5b:8c:62:66:9d:03:b6:22:0a:5e:cd:e5:48:44:e3:
b4:28:42:82:58:9a:eb:f5:d5:36:5d:33:77:af:6c:a2:db:c6:
17:a9:a0:41:a1:43:b8:93:cd:04:7f:f4:7f:93:cb:07:68:3c:
6b:05:7c:c4:f4:78:44:84:62:54:b6:4b:2c:10:25:37:d6:d2:
09:34:22:87:67:99:58:7a:6e:e4:a2:3f:6d:31:e7:d2:18:20:
bd:54:75:e1:09:18:b6:1e:fa:a3:96:81:dc:f7:a4:85:5c:c7:
e2:69:7a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:22:33 2025 by rpki-client