Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/6cf9a2f1-01e7-3e4d-9f55-84ee56e5c954.roa
File: 6cf9a2f1-01e7-3e4d-9f55-84ee56e5c954.roa (raw, json)
Hash identifier: 9F7ZLFOGQ3oiBnbgYjFpOOfBycLRvN80yyvxJP5D22E=
Subject key identifier: 49:7C:45:D5:97:A9:6B:6E:CD:0D:C1:5D:3D:23:F5:CC:8A:60:01:83
Certificate issuer: /CN=4a74ffe6-3c09-4633-b8de-781dfa287da6
Certificate serial: 010D0C9F432858491246A7318ED997E51ED68B20
Authority key identifier: C9:6F:C4:11:30:E8:F2:88:A4:88:91:C8:03:A6:37:EA:A2:1C:A5:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/6cf9a2f1-01e7-3e4d-9f55-84ee56e5c954.roa
Signing time: Tue 04 Mar 2025 02:00:40 +0000
ROA not before: Tue 04 Mar 2025 02:00:40 +0000
ROA not after: Mon 02 Jun 2025 01:00:40 +0000
asID: 398266
IP address blocks: 130.51.202.0/23 maxlen: 24
216.230.18.0/24 maxlen: 24
2602:feae::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:12:46:a7:31:8e:d9:97:e5:1e:d6:8b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a74ffe6-3c09-4633-b8de-781dfa287da6
Validity
Not Before: Mar 4 02:00:40 2025 GMT
Not After : Jun 2 01:00:40 2025 GMT
Subject: CN=89bd9725-5da8-4c74-abeb-46e189645f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:85:a2:4a:80:c3:ae:1d:bc:65:ec:88:11:18:
1d:83:d4:03:9d:1c:41:da:6a:85:6f:02:1e:ad:2d:
8a:02:75:7c:60:6f:f3:45:1d:eb:db:9f:03:e1:0e:
55:a4:f2:a9:63:08:bf:40:92:09:48:02:a5:ef:40:
f7:2d:12:64:1a:54:be:1d:a5:04:f6:1f:ed:ab:4d:
aa:cc:b0:06:06:fa:d0:81:d1:a2:74:62:31:d7:94:
75:07:1c:0d:94:d6:d2:ec:af:cc:35:80:eb:c3:0b:
0a:ad:ab:6d:eb:b7:69:0d:ce:37:1a:c6:88:51:43:
80:74:de:88:f9:73:eb:84:f4:fb:a9:03:95:cf:d7:
c3:3b:f6:33:fb:f3:74:4e:eb:24:5a:76:1c:83:6a:
cb:b7:d9:ae:be:c0:d5:9a:a5:6f:8a:1c:c6:b4:4a:
cb:d0:31:81:f1:39:b9:f9:d0:c9:d7:16:0b:c8:c0:
76:9f:10:a6:a0:07:3b:f8:e0:83:16:46:6b:5a:98:
a7:d1:67:ab:97:10:6c:12:2f:c3:ec:95:39:95:0a:
65:ca:42:0c:97:9f:17:83:67:3f:4f:52:06:de:5f:
0a:d6:47:c7:e2:34:33:04:fc:ec:54:d6:b4:59:0a:
77:70:18:44:8b:2a:66:1d:01:83:84:03:e3:14:e7:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7C:45:D5:97:A9:6B:6E:CD:0D:C1:5D:3D:23:F5:CC:8A:60:01:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/6cf9a2f1-01e7-3e4d-9f55-84ee56e5c954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/4a74ffe6-3c09-4633-b8de-781dfa287da6.crl
X509v3 Authority Key Identifier:
keyid:C9:6F:C4:11:30:E8:F2:88:A4:88:91:C8:03:A6:37:EA:A2:1C:A5:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6.cer
sbgp-ipAddrBlock: critical
IPv4:
130.51.202.0/23
216.230.18.0/24
IPv6:
2602:feae::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:90:7f:19:71:83:97:f9:b4:e1:cf:eb:41:db:bb:e2:4f:27:
02:c3:50:11:01:0a:5c:ec:be:a3:c6:2f:d3:57:6e:c7:99:0e:
ca:55:74:c8:6c:c1:da:43:c6:05:31:36:cc:7a:f0:1f:15:82:
04:12:94:7f:c9:dc:15:93:a6:d5:34:16:d4:c2:34:d3:4a:0f:
f5:6f:ec:09:0a:be:19:f4:97:aa:28:b9:8a:9b:79:11:1e:2f:
8d:17:bd:9b:7e:02:55:5f:e7:ef:e5:e0:bc:1d:a3:d4:dd:e3:
34:b1:51:0b:8a:53:02:45:5e:ea:03:7f:72:2a:9a:cb:84:ac:
ae:88:6b:cb:f1:60:06:08:22:de:fd:ad:c2:47:f9:61:22:87:
11:1b:74:3a:d5:23:d5:ed:eb:13:3b:d6:f5:e3:ab:a8:17:11:
f2:3a:12:4b:bb:9d:eb:5b:14:8d:01:6d:de:a8:80:31:be:83:
4d:d3:0f:58:c0:3c:03:14:a0:bf:08:77:f1:11:93:62:a1:f9:
81:d6:fc:c3:2d:d1:99:44:47:3e:74:13:d3:e4:18:9e:bb:81:
74:c3:68:45:b2:57:b5:44:27:60:70:35:5c:ae:46:87:46:30:
1a:f2:0b:46:07:bc:97:3b:1f:66:28:55:24:03:b2:f5:29:07:
31:8b:c1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:36:41 2025 by rpki-client