Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa
File: 057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa (raw, json)
Hash identifier: psC7LznA1UIql6LBqtBzkHhbYFVDFy3UBwFOMkaPV0Y=
Subject key identifier: DC:1D:80:49:7C:01:9F:CF:2E:33:94:2D:78:DF:EF:FB:B8:0E:B5:93
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F432858489169564CF20A6D7A404C3A80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa
Signing time: Thu 16 Jan 2025 22:11:20 +0000
ROA not before: Thu 16 Jan 2025 22:11:20 +0000
ROA not after: Wed 16 Apr 2025 21:11:20 +0000
asID: 5769
IP address blocks: 216.113.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:91:69:56:4c:f2:0a:6d:7a:40:4c:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 16 22:11:20 2025 GMT
Not After : Apr 16 21:11:20 2025 GMT
Subject: CN=e0b2a856-f049-406a-8b5d-9d49dc579aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:63:e3:f8:d6:b9:42:e8:15:71:bd:e0:f7:
cf:d4:78:b1:c0:53:7d:af:88:b6:cc:df:af:9f:46:
ec:63:25:34:76:a7:06:92:18:78:38:53:0b:08:1e:
a9:09:04:4d:35:ed:14:55:a1:4a:d6:06:17:e0:2b:
a2:97:af:6a:fe:20:21:24:79:20:c8:84:6a:4a:c1:
ed:f0:4b:55:bf:97:e0:6a:00:b5:4a:2b:dc:b8:56:
2c:8f:80:82:85:f0:14:c7:06:9a:b7:37:3d:1c:fc:
06:69:f0:f1:24:3d:f3:ad:69:b6:06:53:2a:2e:a8:
83:6e:f3:bb:ca:fd:ac:e0:59:52:ce:81:1c:22:85:
61:d3:69:81:b1:f6:6c:12:da:ce:59:d2:8b:f2:09:
40:20:28:d4:99:73:2f:89:c0:c4:82:06:58:6c:02:
c2:e3:ed:28:e5:b3:9c:3a:57:a4:c3:82:a5:85:d8:
4d:67:7b:63:f4:58:3a:23:05:8d:80:f4:ee:bb:25:
2c:81:49:7c:82:61:25:cc:36:e0:b7:6c:0c:a9:4c:
5e:65:ea:a4:b2:ff:a6:8c:89:f2:e3:13:4c:d1:49:
9e:9e:57:c8:5e:4b:9b:d1:ae:52:76:d1:12:56:06:
a3:94:eb:07:de:86:db:c9:77:70:4a:36:09:10:dd:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1D:80:49:7C:01:9F:CF:2E:33:94:2D:78:DF:EF:FB:B8:0E:B5:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/057ecdf7-55d6-3659-a4a3-5c1ca310cf6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
216.113.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:19:40:5b:70:c0:f2:dd:bf:2b:95:c3:8d:40:ae:ac:8d:1b:
b9:f9:fa:b4:4f:47:0b:27:58:e9:89:5d:58:4b:f8:7d:26:3e:
b3:9d:6f:62:6a:35:86:4a:e3:88:26:5a:4b:87:47:dc:00:21:
e1:ee:be:90:2f:a6:52:99:aa:fc:19:52:54:a9:4d:41:18:8e:
38:3c:ca:7f:e3:34:a5:83:6c:b0:13:7b:71:fa:5a:ec:74:7a:
da:76:54:40:67:a1:75:98:ef:fe:0e:41:6a:73:30:c4:ca:37:
ce:02:cc:2d:67:64:0d:96:c3:f4:a5:9f:61:92:15:4f:4b:0c:
a6:be:39:00:07:89:39:b8:85:b2:49:b9:e1:15:bc:d2:84:f3:
7e:88:c2:96:66:b1:93:83:0e:e1:f2:62:6c:5c:f2:de:1f:52:
05:0f:27:e4:cc:1e:87:eb:8b:0f:9a:05:ab:a1:2e:30:00:03:
82:4e:e5:f5:24:fd:72:00:56:14:5b:f0:bb:62:9e:71:6f:f4:
09:90:d1:52:7d:36:4c:3e:18:79:69:80:c6:ea:f6:5a:bd:23:
cc:77:f0:16:94:ec:76:ff:18:c8:32:bc:c1:d8:2f:23:ef:fd:
6d:a3:0d:94:a0:bc:53:3e:df:83:d8:5c:2a:d2:c7:a9:d2:7f:
57:0f:f8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:18 2025 by rpki-client