Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de983c2e-9dcb-3bb6-aff4-f0ed0d59a23e.roa
File: de983c2e-9dcb-3bb6-aff4-f0ed0d59a23e.roa (raw, json)
Hash identifier: Lb/mbag34CJnJqgwyI4mwHg7bMzj1a09KVw/Utm4pWw=
Subject key identifier: 07:45:9E:FE:A4:ED:2E:6C:58:AE:E9:63:09:EF:7A:C8:6D:36:D9:D3
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848E16BCD71DC19AF24E91A49C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de983c2e-9dcb-3bb6-aff4-f0ed0d59a23e.roa
Signing time: Fri 14 Feb 2025 14:00:52 +0000
ROA not before: Fri 14 Feb 2025 14:00:52 +0000
ROA not after: Thu 15 May 2025 13:00:52 +0000
asID: 36631
IP address blocks: 216.87.145.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e1:6b:cd:71:dc:19:af:24:e9:1a:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 14 14:00:52 2025 GMT
Not After : May 15 13:00:52 2025 GMT
Subject: CN=6296352a-498b-4327-9860-081d7e579e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:e8:97:26:df:bc:84:61:5e:20:fe:05:0b:
64:d4:f3:e4:a2:fe:13:27:3a:73:3f:c7:d0:48:b6:
59:c9:8a:4c:1f:31:d1:e3:a7:e5:56:b3:7a:28:1d:
86:b0:f3:62:fc:88:23:94:eb:78:fc:e7:3b:d2:a9:
51:02:03:a0:f3:32:16:76:0a:b7:84:56:ec:ad:19:
6c:b0:3a:19:1a:1a:d6:90:04:c5:62:90:67:d9:aa:
64:5c:56:f4:01:56:e8:2e:d4:d0:b4:f6:f1:a0:2d:
07:c7:ca:bb:45:bc:ee:e5:1e:18:eb:fc:e3:2d:29:
aa:3c:92:b0:aa:e3:f3:0d:2b:67:02:b5:d6:70:ba:
21:01:00:46:13:74:47:50:d7:15:1e:4d:f8:7c:9c:
5b:2f:73:22:72:0c:01:8a:47:16:ea:d1:d3:2a:5b:
a8:36:40:c4:6d:8a:69:77:98:dd:5c:31:8a:6d:69:
92:11:d1:7c:15:3a:ec:13:54:a8:7b:37:0b:ef:79:
5a:30:98:be:56:79:67:c7:c0:a8:d0:cd:81:28:8f:
75:be:42:3d:ce:07:1c:9a:6d:57:d4:47:0e:65:b2:
44:a0:48:8d:28:ab:31:ac:73:f2:af:f4:0e:ff:39:
30:17:bc:56:f5:34:19:20:db:53:64:69:1c:b4:4f:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:45:9E:FE:A4:ED:2E:6C:58:AE:E9:63:09:EF:7A:C8:6D:36:D9:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/de983c2e-9dcb-3bb6-aff4-f0ed0d59a23e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:22:cc:5a:b2:48:0d:96:b4:1b:77:1e:52:c5:8d:00:8b:9c:
75:80:b4:02:a1:ab:fb:88:1d:22:21:a0:21:31:3c:25:64:9e:
a2:26:a6:0d:4a:06:1b:e9:9a:9c:c6:6a:5d:9e:0b:a8:99:c9:
fb:94:07:ef:8e:72:57:72:6e:2e:18:95:2a:d3:b6:6d:72:b5:
6f:f6:9f:9b:ee:d4:1d:45:1b:0d:b1:97:63:cc:05:8a:b0:4e:
bc:16:23:f5:19:d5:61:c8:83:fa:ba:65:69:c7:ea:6a:1e:fa:
b7:5d:27:8a:a5:d8:a4:e8:ce:33:a8:c5:f9:b4:6b:e4:73:21:
55:95:87:c7:4d:cb:e8:cc:f9:d4:6e:2a:a5:7f:08:c3:4d:a2:
6f:c5:03:e0:16:8d:12:9a:d1:a4:2e:5d:1f:b0:c0:54:39:e3:
94:67:16:77:cb:22:c5:f8:54:95:6b:7e:b8:04:bc:22:f2:12:
94:4c:b1:44:7a:19:70:80:5e:c6:76:a8:19:fd:d2:45:86:50:
e6:b5:d7:ec:ad:41:78:6a:cb:e9:f4:67:25:b0:3c:b3:fe:ea:
f2:1d:a6:57:3d:a6:9d:e8:5a:dd:c9:74:f2:cc:8b:d3:b8:d3:
7b:bd:3a:03:a3:8d:a5:ce:82:6a:1b:fe:26:c1:82:d7:57:e3:
86:28:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:17 2025 by rpki-client