Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/d34b8187-b278-3f2c-8301-e2278f3b89ad.roa
File: d34b8187-b278-3f2c-8301-e2278f3b89ad.roa (raw, json)
Hash identifier: GIA8nIDZM1AazQdSFbqKRDtgPtVUIIn6kmqF9fnwZwA=
Subject key identifier: FB:C2:F3:02:7C:93:BF:74:4A:85:E3:32:93:2E:E9:E5:22:4F:3E:61
Certificate issuer: /CN=7adf94af-0a81-4f9a-b7ec-1b257b0f0963
Certificate serial: 010D0C9F43285849244E85611A32A878096793E0
Authority key identifier: 6B:65:82:B5:03:8E:8A:EB:CB:E8:21:37:F9:3D:DA:C1:53:B9:11:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/d34b8187-b278-3f2c-8301-e2278f3b89ad.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 33294
IP address blocks: 140.82.224.0/21 maxlen: 21
147.136.192.0/19 maxlen: 19
216.180.0.0/19 maxlen: 19
2606:7440::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:85:61:1a:32:a8:78:09:67:93:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7adf94af-0a81-4f9a-b7ec-1b257b0f0963
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=13df758a-128f-44e4-a80e-1f2823498271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:c0:bb:ea:c0:ec:5b:02:7f:70:8a:c3:bc:
70:da:10:71:03:11:29:4b:09:b6:c2:29:25:05:42:
0c:55:9e:f2:b9:3a:2d:e2:01:be:da:79:d1:b1:13:
23:70:93:f9:fd:8f:f8:b3:c6:5f:80:2a:ed:0f:ff:
b1:96:00:04:1f:91:72:a7:91:70:cf:4d:5b:8f:0c:
66:d4:a4:99:d7:73:7d:72:35:f4:90:62:b3:0f:e9:
ef:b3:b9:35:8f:81:ec:8e:10:24:7a:6f:c9:21:57:
aa:07:7e:4e:5d:ee:43:94:06:cf:f9:b8:41:a8:27:
a1:26:9a:e7:69:1a:82:ca:42:bf:2f:1c:00:83:2b:
15:9a:a4:e7:85:37:0e:e0:66:d0:17:cd:71:51:07:
b4:4c:93:26:a3:b4:4f:9f:41:bb:c0:4e:9c:9e:0d:
14:32:9c:81:8d:9d:56:77:71:12:a0:ca:13:6b:ba:
c4:25:3c:49:1f:d9:93:e0:cf:d9:7a:45:29:0a:d2:
b7:36:8c:e0:c5:82:b7:21:48:bc:46:79:dc:c2:2e:
95:e3:8e:98:03:d4:44:77:4a:5d:91:a0:48:a4:9d:
12:83:b5:f7:5a:3b:6f:55:a2:c3:8d:70:38:9a:32:
60:59:b3:3b:9c:41:b1:46:4d:82:77:aa:ad:67:f9:
b6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C2:F3:02:7C:93:BF:74:4A:85:E3:32:93:2E:E9:E5:22:4F:3E:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/d34b8187-b278-3f2c-8301-e2278f3b89ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.crl
X509v3 Authority Key Identifier:
keyid:6B:65:82:B5:03:8E:8A:EB:CB:E8:21:37:F9:3D:DA:C1:53:B9:11:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7adf94af-0a81-4f9a-b7ec-1b257b0f0963.cer
sbgp-ipAddrBlock: critical
IPv4:
140.82.224.0/21
147.136.192.0/19
216.180.0.0/19
IPv6:
2606:7440::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:e4:3e:0f:2b:a9:5c:29:53:a4:3a:9a:80:03:a6:7f:4d:60:
64:ee:a1:6f:c4:50:b0:37:ec:88:a5:e9:92:5a:61:80:86:a2:
83:60:f9:9a:9d:ce:1e:a0:95:ba:e4:84:e4:e5:4a:17:72:57:
bf:c5:40:08:bc:fe:37:4f:dc:d2:9e:29:a1:55:76:50:89:e3:
ee:a3:9b:14:ab:8e:70:33:e2:d3:7f:84:25:af:d3:c8:78:6c:
02:df:20:71:39:2f:b2:1b:92:31:c0:45:4e:25:4a:70:a2:ac:
b7:a7:91:c4:60:05:57:af:1e:07:6f:b7:17:13:fc:b1:4a:35:
f4:16:56:5e:e1:23:40:79:71:61:65:94:d8:75:f5:e9:9b:ef:
5f:3c:77:27:b7:f8:59:72:d9:16:27:8f:0a:2d:51:dd:29:18:
87:0d:24:e7:a2:be:ed:01:f8:0a:3f:ee:e2:89:41:46:37:a6:
48:a3:7a:52:df:4a:6c:4b:ad:74:2f:31:90:8d:66:e2:09:1b:
55:ae:0c:ba:d2:1f:d4:48:77:a6:78:cf:64:9e:0e:ee:23:22:
ac:31:d3:d3:d7:87:6b:21:f7:2a:8f:30:0d:b0:67:ce:6e:03:
6a:61:cb:3c:ff:0a:ed:73:68:f6:26:f3:65:f1:4d:c4:32:ad:
5d:2f:da:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:43:52 2025 by rpki-client