Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa
File: 0250530e-60f1-3b41-aba9-e6d0f26b8737.roa (raw, json)
Hash identifier: JA9VvIkZXmot1UYE34oEXECSdiIAMYxYnsWZXR+ZhN4=
Subject key identifier: 6B:23:E0:8C:A1:69:7A:E9:D4:D9:15:B9:9B:48:F6:98:8B:E0:6B:C5
Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90
Certificate serial: 010D0C9F43285848EF61391D5E85A06EBE39B180
Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa
Signing time: Wed 19 Feb 2025 14:00:52 +0000
ROA not before: Wed 19 Feb 2025 14:00:52 +0000
ROA not after: Tue 20 May 2025 13:00:52 +0000
asID: 36136
IP address blocks: 131.201.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ef:61:39:1d:5e:85:a0:6e:be:39:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90
Validity
Not Before: Feb 19 14:00:52 2025 GMT
Not After : May 20 13:00:52 2025 GMT
Subject: CN=ac4a1fce-7fef-4b8f-8c5d-821409508c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:dc:c9:1b:dd:e2:4a:04:2b:06:0d:73:d1:
bf:6c:06:32:fe:f6:9c:ed:72:2c:3c:3a:fc:61:09:
71:e4:23:a5:2f:ee:a4:6a:8d:42:51:1a:f9:3f:8e:
2e:74:29:de:bb:1e:0b:0d:82:33:5e:ad:c1:66:1f:
ab:26:9e:21:7d:f3:f5:bf:b9:3a:9d:a0:51:f3:7b:
cc:a6:89:ed:ea:1a:b7:6d:47:27:78:ad:48:a2:e9:
9d:39:3e:94:c1:74:32:00:5e:01:ee:e0:5b:a3:cf:
42:23:80:26:90:14:32:65:a7:98:1a:fd:aa:bc:71:
59:f3:17:b7:15:6c:69:82:18:ac:e0:32:6a:7f:c4:
3e:63:21:4c:a6:3b:63:ca:a6:20:20:66:66:94:2f:
65:3d:96:06:65:84:c2:60:c9:97:f0:8c:09:b4:ec:
4d:85:a6:b1:d2:5a:6d:16:8d:21:51:6a:9f:0b:ae:
03:55:d7:53:a8:f4:c2:10:bf:64:8c:0c:88:e3:08:
ac:13:e5:70:9f:47:7b:be:de:e3:00:5d:bf:0b:99:
a2:80:f8:65:7c:3e:fe:22:44:97:02:32:33:fd:be:
77:76:02:82:10:9b:b1:74:c7:fb:6b:de:49:62:45:
3d:eb:21:02:66:f3:fd:03:ad:db:9f:e8:58:dc:8b:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:23:E0:8C:A1:69:7A:E9:D4:D9:15:B9:9B:48:F6:98:8B:E0:6B:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl
X509v3 Authority Key Identifier:
keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
sbgp-ipAddrBlock: critical
IPv4:
131.201.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:1e:df:75:7a:d5:79:85:66:c5:33:ba:42:67:d4:b8:8b:83:
c2:87:be:3c:cb:29:bb:a5:1d:72:c0:90:9a:4d:63:d6:ba:06:
5f:ad:92:64:27:d7:6d:b9:24:ea:52:e3:0a:d9:9f:26:a3:9a:
f5:6b:6a:83:00:e1:b2:51:a0:6d:f2:82:71:d6:55:d9:ca:07:
5a:c1:6a:dc:8c:08:e3:35:ba:7a:2c:36:f5:d6:19:d5:fd:fd:
ed:49:c1:07:a3:b6:3f:2d:43:f8:2d:e0:13:02:43:fa:ed:81:
65:3b:75:48:3f:21:7d:6a:bb:e9:df:e9:98:9a:d9:b1:68:12:
51:e7:a3:94:69:64:f0:f9:14:28:8c:9a:ac:64:ed:69:c6:1b:
91:b9:de:31:78:48:47:e0:b9:a3:0b:13:1f:2a:68:1c:07:c8:
62:7c:7e:8b:b0:b0:40:0d:87:47:ab:28:ae:88:ac:f2:8f:e2:
94:7f:ea:88:dd:72:47:cb:4c:61:09:b3:46:b3:1f:c2:3b:1e:
fe:3f:13:fc:0a:3c:3d:6b:5b:b8:8c:a1:42:77:dc:66:fe:a0:
28:d4:41:07:4f:ee:f6:7f:31:15:01:1b:48:6d:8f:45:b6:5d:
17:d2:bc:2f:3f:a4:ae:00:5d:26:0e:3a:79:cf:72:09:cd:16:
f4:ac:e9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:23 2025 by rpki-client