Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/5627b2c4-baa2-392a-b352-a305aef8d340.roa
File: 5627b2c4-baa2-392a-b352-a305aef8d340.roa (raw, json)
Hash identifier: ryGtc1m4v0jeJim+HaDbWOeBAsFogBLug9BUJxHxx2c=
Subject key identifier: B9:43:A6:49:2D:E1:14:34:6C:22:34:1B:D6:CA:B8:B1:C3:E2:A0:6D
Certificate issuer: /CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Certificate serial: 010D0C9F43285848A13618A40B4A5A0233B05B80
Authority key identifier: 78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/5627b2c4-baa2-392a-b352-a305aef8d340.roa
Signing time: Wed 22 Jan 2025 14:00:52 +0000
ROA not before: Wed 22 Jan 2025 14:00:52 +0000
ROA not after: Tue 22 Apr 2025 13:00:52 +0000
asID: 3320
IP address blocks: 81.199.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a1:36:18:a4:0b:4a:5a:02:33:b0:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88db2ec8-651c-4bdc-bf38-97fe38702609
Validity
Not Before: Jan 22 14:00:52 2025 GMT
Not After : Apr 22 13:00:52 2025 GMT
Subject: CN=67213ffc-674f-4f63-8075-cd64dbc79382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5d:51:9b:25:05:4a:8a:0b:c2:29:39:ff:2c:
8d:72:93:6e:a7:94:e4:6d:e2:50:eb:80:dc:1c:83:
2d:03:8b:66:39:ef:62:29:1e:3a:6a:f0:60:97:89:
89:f3:1d:9e:83:b6:9b:55:22:27:eb:f9:56:8a:7a:
0e:75:47:a6:35:90:07:88:62:bd:89:f9:ec:d0:13:
0e:5f:bc:57:57:10:9f:24:4a:12:ed:c0:cf:cd:17:
51:32:eb:6f:f6:40:d6:07:08:25:b6:eb:f5:2f:a8:
67:f7:5e:f9:c8:21:0a:08:8c:03:46:31:54:7e:d4:
06:5d:fc:25:54:61:1a:cc:b4:cb:6a:ab:51:43:31:
f2:55:e8:ea:3b:ff:ec:09:02:7c:26:dc:d0:a8:85:
16:09:ef:71:19:bd:12:f9:84:13:c7:09:11:c0:ba:
b6:65:49:94:4d:33:7d:06:4f:da:4b:a3:d6:86:24:
c6:00:d4:dc:46:75:c0:a5:a8:a2:f9:90:98:69:14:
07:9c:33:72:5f:8e:11:e5:3b:67:5f:bf:52:91:59:
f0:9f:5a:3c:b9:3f:6b:5d:4e:cf:55:7f:8e:50:14:
b2:88:5f:d8:6e:ea:31:94:c1:f6:ac:17:fa:50:f4:
43:af:72:e2:e9:70:5e:6c:c3:3f:ad:54:bf:9a:a9:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:43:A6:49:2D:E1:14:34:6C:22:34:1B:D6:CA:B8:B1:C3:E2:A0:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/5627b2c4-baa2-392a-b352-a305aef8d340.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609/88db2ec8-651c-4bdc-bf38-97fe38702609.crl
X509v3 Authority Key Identifier:
keyid:78:E5:8B:03:25:A9:5A:F6:BF:DD:70:79:BD:52:50:E6:03:FE:B0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/88db2ec8-651c-4bdc-bf38-97fe38702609.cer
sbgp-ipAddrBlock: critical
IPv4:
81.199.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:63:22:b3:3b:f3:20:eb:2e:fa:62:75:c6:79:e2:07:a5:76:
0e:3e:ee:87:8b:dd:f8:a2:57:8f:5c:11:ce:c5:3d:4a:f1:c6:
b7:83:0a:33:dd:d8:c3:08:f0:47:69:cc:0b:c7:fe:6e:d6:72:
0d:44:58:b6:f0:1b:e1:56:4b:6c:50:a5:2e:d4:e0:09:a8:d8:
d1:09:ca:8c:ce:db:2a:a5:42:26:65:04:45:ac:97:05:32:a5:
80:0f:d3:3e:9f:2d:b5:c1:8c:a7:2e:b7:51:96:fc:5c:b5:fb:
59:55:15:1f:f3:99:65:9f:8d:c2:8f:35:ab:81:cf:8b:db:24:
bd:30:36:16:5a:76:48:08:00:36:bb:bc:98:ff:47:3b:1e:31:
25:54:d3:3c:f4:44:4c:b4:7e:8c:db:49:88:be:75:b2:c7:a1:
e1:73:d9:ed:f6:d0:4c:ed:32:d0:0c:5c:b3:24:dd:ec:c6:a1:
28:b0:e4:9f:db:27:42:03:0c:4f:28:ec:50:a2:4c:2c:ac:ff:
b4:b2:f2:2b:4c:96:34:70:ad:9c:7e:f9:b2:32:94:c9:81:ad:
22:68:bb:1e:dc:74:e3:33:23:95:d1:7c:f4:e8:7a:0a:92:f8:
30:70:95:c4:b4:b2:61:da:10:9d:fe:ad:30:cb:eb:84:e8:eb:
a6:9e:9e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:22:45 2025 by rpki-client