Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/5814bd8f-1745-39bc-bd83-5ecb8484effe.roa
File: 5814bd8f-1745-39bc-bd83-5ecb8484effe.roa (raw, json)
Hash identifier: EA9XhvvkcjjBs4NAxuYHD6jqRHd0iu0QwGgMWuU0VGE=
Subject key identifier: A3:E7:C2:F7:7D:98:8B:D0:F6:4F:8F:4A:11:7F:8C:92:5F:53:63:C8
Certificate issuer: /CN=ea5c3d82-c7e0-4511-b102-8995ed813a8a
Certificate serial: 010D0C9F43285848EC96A584A09E76F9056A5640
Authority key identifier: 2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/5814bd8f-1745-39bc-bd83-5ecb8484effe.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 13376
IP address blocks: 37.26.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:a5:84:a0:9e:76:f9:05:6a:56:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea5c3d82-c7e0-4511-b102-8995ed813a8a
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=9a54d652-4e63-4d6c-80e0-02e3b8ea2f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:0e:38:f9:26:1b:d8:71:70:49:05:3e:58:
30:07:df:08:00:f8:7c:b6:1e:c3:04:00:d0:08:75:
ea:7b:29:4f:9a:22:09:58:70:2f:e8:6b:a6:7c:de:
4f:bd:e1:3b:10:fa:e7:0c:e3:e1:e7:91:4a:79:7b:
13:d5:c9:1a:b4:cd:ed:f6:63:86:ce:0d:48:c9:cc:
fd:52:b8:91:90:cb:03:ca:1a:20:64:e3:e5:fd:26:
b3:1e:12:95:fa:4b:26:a9:4e:ff:f5:f2:d5:f3:60:
93:49:75:83:d2:3d:69:93:e6:86:bc:2e:01:93:bf:
ec:a6:3f:4f:db:36:64:26:98:12:f9:05:4c:8e:45:
f9:80:d0:51:52:06:1a:46:6a:45:b8:73:47:eb:83:
0d:d9:f8:1b:81:27:5b:d5:ef:a7:1a:b0:2b:ae:6a:
26:75:18:5f:4f:4c:28:16:4f:b4:67:fd:85:be:51:
cc:48:ec:21:a7:1d:58:02:e3:b9:0b:45:1b:eb:1d:
9a:8f:b5:62:9e:f2:91:04:de:b6:02:be:33:13:65:
87:7a:55:52:62:ac:49:ae:f5:da:e2:47:5c:45:6c:
cd:f0:18:1e:d0:c6:07:40:e5:ed:02:2f:24:63:29:
92:78:34:c9:df:02:9a:ba:33:58:63:69:d4:88:af:
00:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E7:C2:F7:7D:98:8B:D0:F6:4F:8F:4A:11:7F:8C:92:5F:53:63:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/5814bd8f-1745-39bc-bd83-5ecb8484effe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a/ea5c3d82-c7e0-4511-b102-8995ed813a8a.crl
X509v3 Authority Key Identifier:
keyid:2D:E2:65:A8:91:5D:E3:78:C0:2D:4F:B3:2A:4B:C6:9D:69:C5:13:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea5c3d82-c7e0-4511-b102-8995ed813a8a.cer
sbgp-ipAddrBlock: critical
IPv4:
37.26.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:c7:d0:b0:aa:c3:33:9e:36:33:a8:53:1a:e2:07:f2:e2:02:
a1:d6:99:09:5e:63:cc:c1:e9:48:fb:ca:2a:8d:6f:d9:84:da:
31:f6:37:c2:b7:3e:19:86:87:ce:ff:40:d7:b1:99:ef:f8:f0:
a8:77:35:d5:60:e1:db:72:7e:7e:54:96:b1:64:59:5f:a8:08:
05:76:ae:de:34:9e:3f:ed:e0:91:97:81:96:17:df:1a:8b:9c:
cd:fb:56:19:55:29:55:98:75:6d:f0:09:8b:9c:c4:48:83:6d:
ef:ef:e8:53:40:89:79:ea:e3:e7:af:32:e6:b6:41:65:08:ac:
58:76:e5:51:bb:8a:64:11:48:83:71:1e:c1:c4:50:c3:e0:5b:
e8:40:41:bd:34:1d:31:e1:91:32:6a:49:23:8e:c0:2c:11:a8:
78:36:72:c8:72:63:9e:22:75:bd:e5:87:06:26:71:6a:f4:72:
4b:0a:a7:92:61:dd:8d:9f:0e:eb:5a:a9:60:04:71:7d:81:66:
6d:a7:51:c4:73:ee:94:92:20:c7:2f:54:35:b7:25:36:7c:29:
d4:96:69:eb:ad:6a:fc:c4:c4:c8:0f:fa:4f:1c:9a:3e:bc:a3:
85:6d:eb:43:58:9a:80:1a:c5:9a:9d:65:36:b2:f0:71:ff:36:
46:f5:8c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:27:59 2025 by rpki-client