Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/04ad5a45-0dc9-3b10-a229-6b9eefc213de.roa
File: 04ad5a45-0dc9-3b10-a229-6b9eefc213de.roa (raw, json)
Hash identifier: z/0R7sLWYMv6949787pjJinoNZ15dhSzatY680+yNII=
Subject key identifier: 8A:13:9F:DC:ED:71:15:46:FF:EF:DC:35:50:5E:91:46:08:9D:90:83
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F4328584908817972D7C0C5CC2C832B80
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/04ad5a45-0dc9-3b10-a229-6b9eefc213de.roa
Signing time: Fri 28 Feb 2025 14:00:52 +0000
ROA not before: Fri 28 Feb 2025 14:00:52 +0000
ROA not after: Thu 29 May 2025 13:00:52 +0000
asID: 11693
IP address blocks: 216.130.146.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:08:81:79:72:d7:c0:c5:cc:2c:83:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Feb 28 14:00:52 2025 GMT
Not After : May 29 13:00:52 2025 GMT
Subject: CN=9501f7d3-1aab-41c9-92ca-8c71fcef5ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:79:bf:bf:d3:ff:2c:8d:ed:b3:e1:68:40:e7:
07:68:43:a8:bf:3d:64:c6:aa:c4:82:77:6e:3c:79:
55:cf:cc:ec:10:a0:95:72:b0:5f:32:52:99:18:d1:
ff:b0:68:15:4e:af:74:82:85:71:52:9c:60:ef:19:
8c:19:91:3d:08:b0:c3:3e:73:bb:c9:ec:4e:ec:d1:
9a:70:6f:8a:7b:f2:fa:be:12:b2:0a:8c:7a:33:18:
8d:58:2b:ce:fd:0e:24:a9:cc:c2:76:dd:89:26:1d:
e3:11:4d:64:db:31:37:ad:4b:1f:8f:12:e9:e8:99:
ef:0b:91:e8:89:88:92:0e:2e:17:3f:29:83:d3:90:
b9:1f:de:5b:12:37:22:2c:6a:87:48:82:fc:bb:af:
7b:a1:68:c7:44:b6:f5:5f:1a:7a:c8:1b:f8:41:d1:
b6:19:5a:84:91:e3:57:68:f6:d3:a6:b6:72:3c:b0:
a1:fa:ef:fb:1a:24:bd:f3:39:d6:73:89:ab:3b:f5:
50:f4:26:8d:ad:7c:5f:de:9e:46:39:37:be:5c:f5:
6f:10:7f:18:77:19:41:5c:df:ec:21:7c:59:78:0d:
82:7a:ff:5c:32:8d:ae:37:11:bb:41:0a:d6:be:fa:
fa:68:05:d6:97:1b:75:64:c8:a8:37:32:4b:cd:bb:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:13:9F:DC:ED:71:15:46:FF:EF:DC:35:50:5E:91:46:08:9D:90:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/04ad5a45-0dc9-3b10-a229-6b9eefc213de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
216.130.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:5a:c9:b5:d5:d8:6b:5b:14:93:77:7c:bc:e1:ac:49:21:f2:
f2:39:c7:04:f4:77:1a:5e:63:52:b6:72:ab:4c:e1:c4:1c:f6:
30:89:81:d8:c3:31:86:82:3d:b1:58:63:93:59:6a:00:a8:03:
b6:bc:49:9d:ff:02:11:68:49:f2:3c:ae:75:64:0c:5b:0f:51:
47:13:cf:a9:85:bf:80:b8:40:92:b0:4e:84:16:50:13:88:0f:
a6:eb:73:92:ea:d7:f9:78:ed:b1:7a:0a:7c:c5:d7:ff:3e:7d:
2c:51:17:47:b6:7f:e3:24:80:99:25:67:19:dd:48:b8:0d:5a:
b8:c9:41:87:72:84:23:4a:e6:94:48:84:bd:e1:e3:a7:e9:71:
9e:d9:ac:cb:5b:cb:67:44:61:d5:27:8b:0b:5e:ee:73:0e:5a:
e2:e7:16:27:d8:d9:80:86:43:d3:cc:59:e4:10:1e:e0:6d:34:
31:d5:d1:51:53:93:49:f4:9d:86:ff:7e:72:29:75:0b:73:8a:
4d:f9:11:b1:3b:89:f2:de:48:ae:7c:0a:13:91:9f:82:12:80:
8f:9b:c2:c4:f9:43:ba:86:3c:33:5c:3b:d2:c5:ef:9d:67:eb:
0a:62:6b:b0:eb:ef:c7:d3:23:46:60:f9:d0:48:1e:33:e8:15:
01:23:92:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:14 2025 by rpki-client