Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a67544cd-9f5a-3bc1-8306-5f73263cd25a.roa
File: a67544cd-9f5a-3bc1-8306-5f73263cd25a.roa (raw, json)
Hash identifier: 25RQ72FUeDwddwoybCl7xKbp7EGJ/NRN0atXAi3hRME=
Subject key identifier: E9:64:CA:2C:F2:A8:7C:BD:FB:D9:A2:50:62:B6:B7:15:F4:11:9F:EE
Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial: 010D0C9F43285848A1360F28824C432DD0DD1380
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a67544cd-9f5a-3bc1-8306-5f73263cd25a.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 396982
IP address blocks: 130.41.242.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:0f:28:82:4c:43:2d:d0:dd:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=d53e61c4-4ef3-43f6-b320-1fafec5b74a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:b2:c2:d8:cb:90:ae:91:13:a4:de:54:01:
05:d1:36:51:80:88:e1:4e:31:c9:58:7e:cb:e9:cb:
77:60:63:94:35:3d:18:1d:36:67:c8:14:f8:40:44:
d5:64:2d:0b:47:88:a0:62:97:fe:fb:78:ab:8b:fb:
e5:7d:99:b8:4d:3a:62:76:95:c5:21:19:e1:89:ea:
be:1f:60:c3:70:eb:26:d4:b5:be:b1:c1:2c:3f:66:
75:ea:40:8e:18:99:9d:86:0f:d0:46:0e:fe:7e:36:
5d:bb:56:5f:0b:72:d3:f3:32:57:11:7b:51:83:bd:
4e:ca:72:7a:50:05:77:d3:a5:d7:44:18:94:00:6b:
63:e2:30:8a:ab:f4:1e:99:b2:48:71:fd:87:95:34:
cd:8e:90:b8:89:72:6a:22:1e:33:ca:1d:9a:d0:73:
74:fd:e1:49:07:3b:af:d6:da:16:1c:f9:47:0f:2b:
67:50:39:81:32:b7:ce:a8:6f:3b:e8:be:60:69:b9:
cc:3e:91:c4:c4:de:60:62:8c:b8:76:92:b6:e9:30:
e6:be:32:0b:8d:a1:96:76:dc:2c:44:d8:42:4e:9a:
29:aa:38:aa:4f:7d:a3:6c:63:fc:ff:1e:5b:07:96:
ec:61:b8:e9:09:01:4b:a4:24:cb:26:6c:fa:20:0b:
65:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:CA:2C:F2:A8:7C:BD:FB:D9:A2:50:62:B6:B7:15:F4:11:9F:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/a67544cd-9f5a-3bc1-8306-5f73263cd25a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
X509v3 Authority Key Identifier:
keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
sbgp-ipAddrBlock: critical
IPv4:
130.41.242.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:0e:c5:48:3c:1f:d7:f5:ee:c7:b5:08:ff:15:e1:d2:cf:35:
8e:90:13:1c:c7:fa:25:93:10:d6:b0:f0:90:c7:24:e0:b8:b2:
3f:0f:f4:bd:af:2a:7c:74:8d:a7:e2:cf:f0:c7:9e:f2:b0:68:
a2:69:55:27:0f:ff:20:0f:5d:29:b3:47:29:01:7e:e8:8a:f3:
34:9b:4d:12:94:c2:aa:16:90:33:21:a8:fb:74:b3:a0:b8:13:
47:0b:ca:8f:80:4f:1d:ed:ed:cc:55:38:7e:1e:82:17:6c:5b:
6e:08:4f:8f:30:46:b7:31:41:67:a7:ed:81:09:e2:ea:20:fe:
e3:b8:1c:2f:f9:30:7a:09:d1:4c:dd:a9:07:67:09:99:49:2d:
a3:7a:07:66:f5:34:06:97:2a:6b:69:8a:0a:2d:6c:2b:d7:4f:
80:34:7a:cd:23:56:f9:9e:e3:3e:8f:70:9f:ff:e7:00:f4:3f:
d7:4e:70:86:2e:d9:bc:ca:9f:07:3a:5d:64:e4:4b:76:f2:8b:
d3:76:9e:00:b1:33:c8:fb:8e:ab:6a:a7:5c:00:a1:41:d6:4f:
79:56:ba:bf:97:8e:a9:14:09:8f:df:98:7c:ab:01:c9:78:7f:
c4:b3:43:ad:8c:41:ae:04:a3:86:09:f1:c5:a0:a2:00:a6:1c:
1b:44:ba:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:31 2025 by rpki-client