Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0df61094-b3d1-3800-8547-92865e27dec2.roa
File: 0df61094-b3d1-3800-8547-92865e27dec2.roa (raw, json)
Hash identifier: gtaPfSFQ8RdreGCk1rqbTe9Lp8DkUwht5zGODze6eH0=
Subject key identifier: A9:B5:9D:16:6C:99:E7:1D:EA:BB:19:54:F3:AC:A3:08:1F:6B:AB:13
Certificate issuer: /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial: 010D0C9F43285848AA1CEA3392052FF4692297C8
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0df61094-b3d1-3800-8547-92865e27dec2.roa
Signing time: Sat 25 Jan 2025 18:32:34 +0000
ROA not before: Sat 25 Jan 2025 18:32:34 +0000
ROA not after: Fri 25 Apr 2025 17:32:34 +0000
asID: 21700
IP address blocks: 216.126.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:aa:1c:ea:33:92:05:2f:f4:69:22:97:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Validity
Not Before: Jan 25 18:32:34 2025 GMT
Not After : Apr 25 17:32:34 2025 GMT
Subject: CN=8741683e-7217-4f4f-b84e-ce9f12faf126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:15:5b:ae:75:65:6a:74:c7:50:37:2a:81:
f6:aa:95:ad:ad:a1:21:16:4b:2f:6b:8b:bd:2d:f6:
d6:17:ab:00:d2:2b:a8:e7:48:9b:fa:da:49:ac:6e:
a8:09:53:70:84:07:2a:92:2b:4c:a4:b9:2e:c8:07:
e5:cb:5e:45:7c:87:91:d2:aa:a8:1f:5e:00:11:76:
3f:c7:9e:d1:57:f1:ad:82:4c:70:5d:c5:68:a6:18:
ce:be:3a:23:35:d2:49:90:f7:87:f7:0c:46:7f:5e:
7d:f1:9a:57:30:87:06:6d:f0:e2:94:10:63:50:22:
ad:de:01:36:ee:21:26:43:73:29:db:13:7d:ef:e2:
58:48:cc:87:02:db:21:47:37:5e:d0:b0:09:c8:de:
ae:49:e9:1e:95:3f:f0:19:43:a7:9b:81:df:27:c6:
cf:03:df:2b:cd:5f:66:a8:2d:c5:21:8c:42:58:c4:
8f:1a:82:23:63:96:9c:95:ec:35:c2:d3:1d:3e:9f:
77:4c:94:3a:22:69:df:75:a8:64:af:37:09:2e:b5:
d0:59:2d:28:27:3f:5d:ea:ce:01:ce:34:34:6b:f4:
b9:00:61:d0:35:6e:f2:7c:12:64:a0:62:aa:4a:72:
c0:bb:80:0f:5d:5e:1f:36:1e:4b:d4:25:aa:a5:fc:
6c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B5:9D:16:6C:99:E7:1D:EA:BB:19:54:F3:AC:A3:08:1F:6B:AB:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0df61094-b3d1-3800-8547-92865e27dec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
X509v3 Authority Key Identifier:
keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
sbgp-ipAddrBlock: critical
IPv4:
216.126.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:6b:cb:9a:32:84:87:24:76:55:66:0b:7d:68:a4:2e:3c:17:
a3:60:48:4a:a2:1f:93:9d:c4:0f:ba:bb:95:10:b5:c5:c6:c8:
d6:b7:1d:16:d6:84:ad:d5:c9:18:7d:66:f0:ca:78:4b:9d:4c:
a3:09:18:14:7e:c8:cb:46:88:15:e8:e6:37:61:d2:76:79:6d:
86:2a:57:18:5b:3d:6a:c9:91:02:4d:98:f3:35:a7:34:8f:74:
7c:ac:e6:02:93:5d:76:7e:2f:7b:45:36:23:bc:91:fa:47:22:
fc:c0:9d:d2:85:5c:5b:04:bf:a0:4b:2a:49:b7:fa:1b:9f:5d:
95:dd:c9:ef:a3:94:39:9d:a4:77:69:b4:69:8b:a5:95:aa:de:
56:c6:15:c6:eb:cf:c8:0b:28:54:e7:f7:6d:8f:4a:e9:c4:41:
1b:7c:f4:aa:56:c2:5c:ce:90:67:b0:0c:ee:df:94:8e:75:b3:
4e:70:0a:a9:54:8f:ae:c7:eb:b1:9d:60:0d:d8:97:1d:47:fe:
01:ad:60:ac:9a:65:3f:3e:57:9e:4e:b2:23:1b:75:4f:9b:4d:
a0:2a:b8:56:89:e9:2e:f2:0f:15:b4:1c:f5:dd:1d:95:04:6b:
28:6a:c9:89:b9:ed:48:26:13:64:98:dd:2f:49:c1:f5:3c:88:
bb:35:d8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:37:09 2025 by rpki-client