Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/d94134d0-5663-317e-8778-97627723b481.roa
File: d94134d0-5663-317e-8778-97627723b481.roa (raw, json)
Hash identifier: gHInZ/2ZHNfvT0dd60YdmAa/nwJ85ADJ9Kj3JMv2mmA=
Subject key identifier: 4D:F5:07:BD:5B:EE:81:AB:5F:00:9C:CE:7D:5F:96:60:1E:E4:FD:C2
Certificate issuer: /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial: 010D0C9F43285848DEA11D87A0DC04BBE43C26C0
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/d94134d0-5663-317e-8778-97627723b481.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 14977
IP address blocks: 137.86.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:1d:87:a0:dc:04:bb:e4:3c:26:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=52e64b51-92c3-4a95-b613-bab97927610f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ac:cd:dd:bb:a7:a7:d8:fa:de:7c:89:b7:63:
83:ed:34:28:58:bc:26:2c:4f:e4:c8:66:af:19:8e:
eb:f9:26:dc:ec:0c:42:cd:60:d7:df:61:7e:49:7d:
cd:1f:12:2d:df:b7:63:97:d6:56:22:e7:7a:b0:8c:
8b:77:e6:1f:de:6e:47:72:d2:11:1e:1f:47:40:2e:
e3:98:3d:85:d4:a7:a2:9b:41:6e:a7:d9:8b:08:3f:
5c:d3:1e:ea:7c:c7:87:4f:37:54:bc:de:95:09:ef:
37:09:9e:5d:43:ab:cb:6a:2c:37:e2:05:db:18:6c:
af:0a:bf:cb:a9:03:5d:a3:eb:45:3c:0f:a0:8d:8d:
9a:52:7c:61:09:95:f7:bb:b3:06:d9:8a:80:f9:f6:
64:6b:20:14:40:3f:8d:41:52:66:3f:cb:2a:fd:c4:
fe:64:17:28:cc:a2:a7:41:55:71:6a:06:7c:5d:59:
75:77:bf:d1:c5:8e:91:a8:e5:2f:f7:51:32:62:4e:
41:bc:26:a5:5c:72:80:1d:ec:cd:36:d7:6b:b6:83:
cd:aa:43:c4:81:06:03:82:73:6f:46:e8:d9:03:51:
3a:49:b2:6e:9a:e5:12:ee:a1:61:61:60:05:2a:40:
bb:c5:8b:e1:94:22:d5:b6:f1:86:ae:62:1b:3a:7e:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F5:07:BD:5B:EE:81:AB:5F:00:9C:CE:7D:5F:96:60:1E:E4:FD:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/d94134d0-5663-317e-8778-97627723b481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
X509v3 Authority Key Identifier:
keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
sbgp-ipAddrBlock: critical
IPv4:
137.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:5c:86:eb:f1:2e:b2:31:0c:2a:79:bd:61:f9:60:18:90:25:
28:87:8b:38:80:98:bf:81:6d:15:4c:5e:fb:dd:ab:e6:00:c0:
e3:83:d4:b4:c4:2e:22:f5:4e:82:e7:f7:1d:07:0e:30:27:27:
3e:f3:dc:bb:4d:c0:ab:e0:05:5e:45:49:75:ef:f8:3b:dc:1c:
ce:35:1a:d9:66:d1:ad:d9:d0:16:16:9b:1b:8f:f2:c6:2c:1c:
89:28:e4:e2:9c:c8:fc:67:e1:d5:9e:7a:97:a2:6d:db:92:88:
0f:a2:20:aa:71:b2:59:b0:06:74:1c:8c:34:17:9b:34:d6:ed:
75:ec:80:b8:e4:b3:9e:54:6b:a0:62:b1:b9:90:d4:2c:d0:cb:
48:7b:5f:92:7d:f9:ed:c3:00:92:f0:d6:e7:59:2b:0b:bb:85:
b8:7e:04:cd:59:48:6a:0b:c5:46:7e:6b:b2:02:0e:7e:cd:63:
97:8d:23:1e:67:59:91:71:6f:92:a2:d2:7d:b0:33:0f:aa:7d:
68:da:ab:f9:6c:3a:58:15:36:af:6d:78:ef:d8:73:5e:20:7d:
68:7f:f1:f3:01:33:79:11:53:09:36:c8:4f:89:ee:5b:99:b3:
aa:f4:be:26:3b:8a:fc:98:28:56:bf:d5:0c:01:5c:cb:4d:b0:
f9:f3:29:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:26:09 2025 by rpki-client