Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa
File: 680d15e7-a36c-3758-9cb4-c1ea5f325659.roa (raw, json)
Hash identifier: 1ShwuO0yoWLKYDC1y4ehyLqPN2V83ZgeJyNSnbwfwQg=
Subject key identifier: 18:5A:8A:B9:D0:2A:61:59:B5:83:22:A8:E1:CD:74:26:D2:51:19:17
Certificate issuer: /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901
Certificate serial: 010D0C9F43285848CDE113C2A85F9E548A564600
Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 63178
IP address blocks: 216.229.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:13:c2:a8:5f:9e:54:8a:56:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=dacf93f3-3bcf-460e-8da4-4451898eb268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:0f:00:41:f8:cd:1e:c0:9d:87:78:8f:db:
b7:ed:bf:07:d2:cd:ba:e8:3e:88:57:d8:af:34:8d:
39:40:15:e1:b2:b0:25:fa:32:71:b3:69:cf:1e:e6:
6e:9d:2d:cc:b4:08:f6:6c:1b:b5:27:b4:07:72:3c:
48:5e:38:ac:4b:c5:1a:9f:52:de:7b:d2:12:99:c8:
08:d2:37:9e:21:54:b2:4b:2a:c8:e5:ab:c4:80:73:
ec:23:c8:4b:ea:ef:c5:3e:4b:48:06:3e:68:32:09:
27:4a:fb:66:8c:6a:4f:ce:6d:ea:82:e7:cd:5d:f0:
cf:8e:f7:fa:ec:3a:ff:d9:1b:f6:d6:74:c4:6d:a0:
a1:db:9e:22:42:b3:fc:02:d5:2b:42:fd:c6:66:fd:
e6:7f:9c:0f:f1:c1:d5:ea:c2:bb:14:df:a9:d2:de:
0c:7e:5a:ef:97:84:3e:e6:42:db:07:a9:80:b7:68:
f0:a4:79:be:f1:cd:3d:d7:7d:88:57:e6:68:95:7f:
48:cc:00:34:7d:f7:0d:a9:ef:99:be:c1:f5:f7:1f:
df:b4:6c:11:ed:0e:43:10:57:bc:f3:46:2c:22:9e:
92:86:24:54:08:0b:a0:61:90:0c:ff:89:df:b6:b1:
53:cd:b7:40:b0:f1:6a:3a:8f:1f:36:62:68:13:f3:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5A:8A:B9:D0:2A:61:59:B5:83:22:A8:E1:CD:74:26:D2:51:19:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl
X509v3 Authority Key Identifier:
keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer
sbgp-ipAddrBlock: critical
IPv4:
216.229.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:e0:c5:ab:34:a5:2c:2d:ae:1f:c0:3c:b8:8a:82:21:50:84:
40:ab:a9:57:3b:f1:0c:8d:34:85:0a:b2:ff:1c:56:62:c0:f6:
20:fb:11:6b:71:e7:7e:68:7a:32:30:28:4b:73:91:88:91:a9:
81:a1:7d:ea:3f:ae:f4:6b:bf:b0:75:b0:f8:9d:a6:44:dd:f4:
ea:10:f9:f9:4a:21:f0:4c:4e:75:86:e5:87:54:fe:37:97:31:
20:bf:c9:7e:56:91:d7:96:cd:fd:27:30:18:b3:8c:65:46:f7:
80:67:bd:2e:f7:24:47:80:ea:be:b9:7e:d1:ec:bd:54:cc:cf:
49:2d:c0:96:3b:74:8d:2f:08:9a:f8:f4:e0:17:6b:62:c5:f1:
2c:52:d2:a6:d9:49:a8:9e:18:07:31:e1:f8:cc:a1:c9:26:48:
00:bc:b0:b6:b5:77:1f:3a:04:f6:a2:0b:61:e6:f3:7c:7d:9e:
dd:54:35:3c:7e:1b:61:05:c7:e7:97:6b:71:37:2d:f7:dd:fb:
69:f5:86:67:f8:66:d9:de:5a:15:1e:60:6d:70:5c:a3:2f:90:
ca:0b:c7:45:e2:de:e9:fc:8f:86:ac:c1:f3:00:a7:4a:50:bb:
1f:ca:a4:b9:8d:22:a5:55:a3:69:59:8a:ca:8a:51:40:0e:c4:
c0:72:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 19:40:58 2025 by rpki-client