Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa
File: 257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa (raw, json)
Hash identifier: XVGxshgtPnCtL6UM4jW9TuUTlnGQdO+sR/leNWz5pRQ=
Subject key identifier: 18:A5:DE:F8:26:59:43:DF:2E:E2:05:31:A9:65:3C:DE:A3:75:92:DF
Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial: 010D0C9F4328584909E6A354168EE0E6002E3100
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa
Signing time: Sat 01 Mar 2025 02:00:39 +0000
ROA not before: Sat 01 Mar 2025 02:00:39 +0000
ROA not after: Fri 30 May 2025 01:00:39 +0000
asID: 136473
IP address blocks: 168.245.216.0/21 maxlen: 24
208.56.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:09:e6:a3:54:16:8e:e0:e6:00:2e:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
Validity
Not Before: Mar 1 02:00:39 2025 GMT
Not After : May 30 01:00:39 2025 GMT
Subject: CN=12f33318-9eb9-466a-8676-7c838bd983f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:87:2b:47:c2:99:59:8b:9b:e1:09:80:75:
a6:90:a3:c1:d7:0b:ab:53:b0:24:34:d2:6b:5c:81:
73:63:c7:f2:16:93:f5:03:c4:37:5d:e5:45:c3:e2:
93:cc:6a:95:c8:45:8b:8c:7b:76:49:97:ec:cf:42:
72:69:e8:8a:1d:28:4d:a4:04:9c:f5:89:f0:8d:ab:
4e:77:9f:4a:f6:fa:da:78:19:b4:aa:e2:1c:13:55:
87:01:2c:be:d1:87:48:06:d8:dd:f6:f7:50:af:61:
37:d1:1a:a0:28:75:62:26:f8:d2:81:9d:40:08:47:
1a:6b:ff:08:85:88:a0:62:52:62:4d:30:78:63:fc:
3e:62:ac:d4:66:99:ed:55:48:90:a6:07:8b:2c:48:
60:40:fc:17:58:7d:79:76:2d:8b:56:76:9a:aa:ff:
3b:e1:3e:84:25:63:c4:80:01:c4:62:92:a2:6d:cc:
e6:a4:76:a0:b0:f0:8a:73:bb:84:92:df:98:1a:0f:
1d:4f:ac:47:4d:c8:f8:92:e8:98:91:da:31:3a:f4:
d9:92:26:9a:3b:e0:fb:d4:4d:ed:b5:cf:5d:fc:dc:
42:86:af:6a:52:b5:bb:55:b7:0a:5b:3b:b1:46:8f:
4d:73:ad:f3:38:e1:e4:33:bd:9c:d7:1a:d5:55:d5:
ae:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A5:DE:F8:26:59:43:DF:2E:E2:05:31:A9:65:3C:DE:A3:75:92:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/257e9a42-4ec0-3a85-89a9-a205b8f9e3f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
X509v3 Authority Key Identifier:
keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
sbgp-ipAddrBlock: critical
IPv4:
168.245.216.0/21
208.56.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:c5:5f:5a:a9:49:31:37:01:38:e5:a1:3f:ec:18:63:54:f5:
1d:41:35:35:13:c8:45:99:e2:0a:b6:0b:55:2e:20:b7:50:01:
89:8b:32:19:5b:e6:6a:a8:d9:66:31:01:4a:59:56:56:c8:93:
e2:a1:f0:a4:3c:48:b9:b4:72:c5:f8:18:d4:cf:6a:96:91:43:
93:47:12:b6:cf:72:ba:7c:f2:94:ec:a8:b2:b7:95:0f:fe:5b:
45:17:e1:33:78:51:8b:e4:c7:e2:9a:42:a7:39:db:2f:9d:39:
cc:a3:6c:bb:55:95:19:75:a0:0a:a5:cb:f2:ca:ef:2e:12:18:
f7:ef:0e:cd:30:59:a6:35:4a:43:3d:89:ca:96:a2:d8:bc:4a:
81:f4:d7:e5:27:73:89:dd:60:4f:57:f0:ed:52:f6:f7:90:a8:
47:36:ca:f7:5e:1f:eb:cf:42:29:17:d8:c8:8b:99:7d:af:da:
18:19:61:46:29:3b:80:f1:3c:e4:00:db:48:19:62:5f:67:ab:
dc:19:2a:41:69:c8:01:6b:8c:5a:8c:a4:b5:83:67:02:6e:7c:
e8:e3:49:2d:ab:0a:bf:34:3c:61:52:ea:35:fe:4a:b2:8c:36:
10:fd:4f:cf:f4:02:11:6b:8d:ce:5c:31:14:97:70:d2:7d:09:
c3:d8:0e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:11:07 2025 by rpki-client