Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/e1a9ff98-118b-3699-8349-1030069f9822.roa
File: e1a9ff98-118b-3699-8349-1030069f9822.roa (raw, json)
Hash identifier: MsQE4+C9gIGrfpIylnhMNFJEarqad2JV9isoZ01VMB0=
Subject key identifier: C1:82:27:49:DA:C6:A0:21:F1:67:23:78:90:52:F1:51:5E:FE:36:1C
Certificate issuer: /CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
Certificate serial: 010D0C9F43285848C84B9D2D4ADC5D55B8154A40
Authority key identifier: 1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/e1a9ff98-118b-3699-8349-1030069f9822.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 398290
IP address blocks: 167.32.0.0/16 maxlen: 24
2605:d840::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:9d:2d:4a:dc:5d:55:b8:15:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=2325e353-dd12-4599-b099-10c5d6a86da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:9e:3b:8c:ce:7b:56:c3:14:64:7a:0d:c3:
1b:6a:0d:55:10:36:3c:71:e7:0c:9b:4c:c7:0f:ff:
12:de:d3:eb:26:28:d8:54:b1:d2:6e:9d:59:fb:37:
6a:06:7a:d6:4e:26:e9:23:ad:d3:99:7b:eb:34:c3:
55:53:4f:89:08:64:ff:9b:f8:9e:ce:a0:b1:90:bc:
b5:71:ab:45:cd:15:b4:21:7d:39:39:ea:42:fa:ec:
67:0a:d3:38:93:64:af:71:64:d7:fd:1a:0c:9a:c8:
2a:ab:f3:ad:af:53:14:a3:2a:dd:76:44:aa:43:12:
90:29:74:e8:68:e7:38:f7:4e:ac:dd:58:86:94:9f:
47:c6:fb:2d:d2:48:c3:1c:d9:7b:73:43:0c:e5:df:
ca:40:5d:27:a4:49:38:6a:ea:f3:e3:ec:3a:ba:1c:
45:a3:f4:89:bf:b4:5e:3e:fc:c9:85:2c:60:99:e4:
a8:dd:84:10:a4:e6:5b:d9:85:6f:9f:c1:3a:aa:a3:
1c:8e:fa:00:44:d8:3a:73:bb:a2:ab:b1:bc:b7:8f:
d2:71:13:6d:cf:b3:b1:49:8c:a7:cb:3c:0a:d7:bf:
34:00:bb:17:7b:23:58:44:20:c6:be:75:25:73:50:
0c:2f:dc:87:c1:69:5e:90:29:b4:b3:26:ac:fc:6b:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:82:27:49:DA:C6:A0:21:F1:67:23:78:90:52:F1:51:5E:FE:36:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/e1a9ff98-118b-3699-8349-1030069f9822.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl
X509v3 Authority Key Identifier:
keyid:1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
sbgp-ipAddrBlock: critical
IPv4:
167.32.0.0/16
IPv6:
2605:d840::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:a4:f3:7b:3b:6e:f3:5e:b8:30:4e:91:02:b8:7a:72:0e:f7:
a4:c7:3b:f1:e1:d2:af:3f:91:78:a4:ee:28:05:0b:b3:5f:63:
b5:48:37:65:52:5b:07:a2:3b:ec:bd:15:36:76:86:12:92:f7:
4c:e1:2f:4b:87:14:20:0b:65:f4:5e:54:ad:3e:67:7f:9b:67:
77:ce:0c:bb:08:79:e4:68:c9:aa:cd:69:33:76:d2:00:f2:f3:
15:42:b2:4c:2b:c8:ec:57:85:a1:22:94:e4:7a:6a:3e:c3:83:
c3:ff:08:c5:73:b6:17:c2:74:9e:80:9f:bf:b0:2a:a6:bf:e2:
06:c8:04:80:2a:55:8a:21:0c:df:55:f3:08:22:d1:25:63:7a:
45:47:30:12:b8:fd:d2:79:4d:d9:05:4b:3a:f1:01:84:6d:c0:
d2:66:21:93:72:77:7e:7a:33:32:80:32:63:a2:c1:72:24:52:
8c:05:41:14:92:93:6b:46:a1:35:7e:99:f6:e4:16:c0:cd:0c:
06:c6:6c:d5:20:9b:08:48:8f:c0:ba:7e:55:a8:fa:f7:ed:b4:
99:fb:99:ab:cd:d4:79:9f:ca:ee:3d:38:b0:db:57:7f:84:6e:
e0:6f:e0:ca:82:d5:a6:80:bc:c7:f5:1a:8d:96:ce:06:f2:4f:
ae:95:85:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:19:29 2025 by rpki-client