Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e4df47-4969-3a04-8e97-881b8f84f808.roa
File: 43e4df47-4969-3a04-8e97-881b8f84f808.roa (raw, json)
Hash identifier: vGVKiAKCpRjkyrQumYZ5z3eChqvUZSf7zRZaaAkJeyI=
Subject key identifier: D1:7D:F2:87:68:D3:A5:ED:70:04:D8:7B:F8:8C:BA:14:D2:DA:D9:30
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848CDE10A71665C50786C447700
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e4df47-4969-3a04-8e97-881b8f84f808.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 396562
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:0a:71:66:5c:50:78:6c:44:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=952c2bbc-9517-4b1e-a2d1-a05318fe76dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2b:a7:ef:f4:20:24:97:3b:56:45:c6:a5:c1:
b0:d4:aa:3d:ac:43:9c:62:f6:d6:0f:64:38:8a:d4:
40:85:6e:45:b0:04:98:5c:ba:09:d8:08:fa:4b:e9:
32:6f:f7:ee:20:f7:a8:aa:d1:1c:3e:d6:36:b2:44:
bd:02:ad:e6:d3:0b:cb:ad:4a:69:c0:63:13:7f:70:
b7:a0:c3:7c:6d:1c:19:06:44:a2:f9:69:63:8f:5c:
f9:41:8c:21:93:55:bb:05:4f:27:c0:a3:6e:b5:3b:
d3:a2:db:96:be:82:b9:d9:bb:13:fe:46:11:04:57:
73:f0:a1:8b:16:a5:f7:81:82:73:5c:a3:01:e8:76:
5d:d5:1c:8c:1d:59:e7:04:76:a2:70:44:a5:b9:53:
01:47:9c:74:f9:57:25:db:ca:fd:80:e3:b6:4f:46:
7e:36:4e:b6:97:3b:74:16:dc:b2:e7:64:ac:0c:09:
8f:1b:ba:48:74:96:4c:3c:6b:a1:93:8f:c5:58:b3:
d7:a5:ed:89:5a:c0:11:5b:02:bd:43:05:7c:af:68:
85:c5:06:73:a0:38:97:fc:9f:6d:92:cb:4b:f0:3d:
d4:54:4e:ab:50:20:5f:2a:95:48:37:01:45:ca:80:
a4:6a:a6:31:f3:cd:12:32:e1:b9:cd:76:2c:8d:28:
1b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7D:F2:87:68:D3:A5:ED:70:04:D8:7B:F8:8C:BA:14:D2:DA:D9:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/43e4df47-4969-3a04-8e97-881b8f84f808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:c3:7d:fe:73:40:d8:8f:72:60:42:28:7f:93:1c:6b:ce:80:
a3:d8:e6:2e:d8:00:de:f7:99:1a:69:52:68:55:67:d8:a7:00:
9c:e8:11:f4:80:1b:23:53:8e:6a:05:59:37:15:c3:81:c7:1c:
3d:ec:d6:6e:b1:71:ff:1b:49:d2:e2:28:fb:9b:32:b2:22:47:
83:71:0e:a3:8c:12:1f:e3:9f:46:b5:9e:ca:04:58:f0:39:f9:
b5:57:6d:3b:23:b2:18:6a:94:55:65:90:1a:13:5b:b4:a0:13:
e0:ae:cf:22:5c:3d:4c:60:92:e8:b3:a6:9f:2a:00:df:0a:72:
0f:75:09:ef:41:1d:42:1c:08:9d:d2:a5:bd:cc:43:97:7a:76:
fe:b9:f5:7a:c0:78:66:30:c9:a9:2d:6a:3f:ee:39:d1:63:d9:
21:c3:3a:4b:18:d6:18:9f:53:d1:75:cf:03:85:be:54:19:d5:
50:f9:01:03:77:2c:fb:f3:f5:50:29:6d:d6:6b:c0:51:5d:11:
9a:a5:b7:7a:b1:fa:be:d6:ba:83:9a:35:d9:f8:cc:cf:5b:76:
05:a9:3f:03:65:c9:54:a3:0c:99:f4:c0:d8:94:11:06:a6:16:
28:a0:e8:0d:ea:1f:ea:b0:da:15:5d:34:c4:7e:4f:57:22:ed:
26:3d:15:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:39 2025 by rpki-client