Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7ef699c1-e302-3259-96e8-3b63af9c8a70.roa
File: 7ef699c1-e302-3259-96e8-3b63af9c8a70.roa (raw, json)
Hash identifier: gTmDSca3vFZ4rdl+kINMEmKN5MckfhuG4EDQX8dDmLI=
Subject key identifier: A6:0D:2A:29:86:FE:67:C0:86:24:12:CA:CA:9F:C6:09:E2:1F:E7:47
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584957F3FC9F4E3CC6D38F22A680
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7ef699c1-e302-3259-96e8-3b63af9c8a70.roa
Signing time: Sat 29 Mar 2025 01:00:39 +0000
ROA not before: Sat 29 Mar 2025 01:00:39 +0000
ROA not after: Fri 27 Jun 2025 01:00:39 +0000
asID: 62651
IP address blocks: 216.131.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:57:f3:fc:9f:4e:3c:c6:d3:8f:22:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Mar 29 01:00:39 2025 GMT
Not After : Jun 27 01:00:39 2025 GMT
Subject: CN=0d7f225f-3320-416d-8fa2-6ce175d8da45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:03:77:ff:f8:52:54:44:e2:dd:4d:c6:6c:
20:6f:36:96:44:c4:ff:1c:81:5c:ae:cb:85:d6:37:
0c:7e:65:e6:25:ce:5b:5d:8e:c1:67:29:50:60:31:
8e:3f:47:34:72:84:0c:a5:a0:65:a6:3c:c9:a8:d9:
d4:5f:c2:e4:f3:42:6e:24:3c:b3:91:1c:13:18:c4:
a6:a5:69:74:38:b3:87:bf:82:59:d0:83:ee:f0:07:
af:8a:14:46:b2:2e:82:85:0b:2e:3f:75:93:c9:46:
26:f8:f8:1b:91:a7:ab:9b:fb:c9:fc:25:73:f8:d2:
b9:13:a3:25:d9:0f:df:c7:d9:18:b6:6e:9b:97:27:
6d:79:67:ba:69:1f:de:b9:8d:09:27:4a:9f:ab:83:
f9:cd:fb:d3:12:10:42:e5:05:41:7b:1d:be:78:ea:
bf:32:3f:45:9f:74:ba:94:1d:0d:71:27:ea:a5:35:
a7:a6:00:0b:c7:fb:52:ce:0f:b1:ca:d6:76:5f:10:
e6:c5:59:f6:bc:ee:77:03:9a:a7:3d:b7:48:16:41:
95:50:b7:06:02:a3:cc:5e:f2:c7:ca:a4:21:69:e9:
66:0b:33:18:a0:5d:eb:d5:a3:21:00:4f:83:29:5d:
65:ab:77:2a:73:00:5f:d9:21:55:5f:1b:10:1e:d0:
79:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0D:2A:29:86:FE:67:C0:86:24:12:CA:CA:9F:C6:09:E2:1F:E7:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7ef699c1-e302-3259-96e8-3b63af9c8a70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.131.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:ce:17:92:79:26:b6:66:8e:60:f5:7e:aa:db:87:e1:f4:18:
ac:67:07:0f:0c:34:99:db:aa:8e:7e:0c:42:fe:6f:39:cb:87:
8b:13:ae:f7:28:64:40:46:43:d0:6d:ee:4a:5d:51:ce:3b:23:
57:bf:8b:0d:8f:67:9a:39:35:a1:60:89:c8:17:e3:b9:42:1b:
fb:a5:3d:4c:5a:67:d6:f9:a0:b4:5a:1e:e9:48:ca:07:a6:86:
25:14:fa:7a:7e:0c:f6:5a:56:0d:6b:d9:05:e9:f8:72:b6:f2:
6c:9b:b8:eb:7e:1d:1e:b2:2a:52:27:40:15:67:60:df:23:02:
ba:64:91:a8:5b:9d:10:f6:22:b8:5a:02:a8:18:4c:df:c1:a3:
e7:8d:69:d1:40:d3:c8:68:80:f9:c5:81:bb:19:b1:e9:d3:f8:
61:16:5c:56:f2:24:23:e2:ee:81:76:5b:b5:9a:d9:4a:ad:fa:
a2:9b:49:98:a1:ae:01:92:9c:aa:e3:71:3b:00:a7:9f:a7:a3:
75:c3:0c:ba:57:ce:6c:a9:7f:d6:dc:34:41:10:ea:de:bd:b4:
8d:af:00:f4:70:63:f4:da:6a:d6:8b:8a:74:e0:52:6b:c2:a5:
1b:cd:51:68:7d:7b:26:25:9f:3b:dc:00:77:26:8c:f1:7b:5c:
3b:9d:18:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:47:06 2025 by rpki-client