Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/45c9c64f-96f5-3c6b-844a-8463f49acdf2.roa
File: 45c9c64f-96f5-3c6b-844a-8463f49acdf2.roa (raw, json)
Hash identifier: zH6OiFwtyhsiVSl1LZBNL+T3Mni7vyaMZUebfrXo4q8=
Subject key identifier: 57:24:71:47:1E:A7:6E:7E:68:9E:5B:8E:0B:92:CF:A4:D7:A2:BD:9E
Certificate issuer: /CN=219f6136-3599-4e41-920e-eccbe6592210
Certificate serial: 010D0C9F43285848D9BD442F7D54F8AADF164F40
Authority key identifier: CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/45c9c64f-96f5-3c6b-844a-8463f49acdf2.roa
Signing time: Tue 11 Feb 2025 19:58:39 +0000
ROA not before: Tue 11 Feb 2025 19:58:39 +0000
ROA not after: Mon 12 May 2025 18:58:39 +0000
asID: 17001
IP address blocks: 130.179.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:d9:bd:44:2f:7d:54:f8:aa:df:16:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219f6136-3599-4e41-920e-eccbe6592210
Validity
Not Before: Feb 11 19:58:39 2025 GMT
Not After : May 12 18:58:39 2025 GMT
Subject: CN=398a1528-4207-41c9-908c-a26b67eca681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a2:69:19:e9:89:2c:d4:1a:6a:da:cd:51:8c:
a2:e0:2b:83:ab:50:0c:64:2d:c4:65:05:23:4c:65:
d8:02:93:aa:2e:7f:dc:8b:97:4d:b8:e7:e6:16:98:
85:04:07:04:c1:7d:a2:f3:b3:bd:e0:be:a6:ab:ef:
2e:b1:17:7f:7c:80:eb:28:dd:95:42:50:8e:ea:d5:
69:ef:d6:cd:92:e3:6a:de:da:7c:ec:3e:4e:67:cf:
4c:30:f0:70:cf:44:4e:c7:f9:92:ea:8e:0b:9f:83:
42:d5:78:90:c6:f9:b1:e9:72:a0:37:4e:bf:4c:a9:
97:45:a5:8e:91:70:e0:32:8b:2c:28:8f:5e:a6:49:
75:7b:8d:9a:05:5e:4f:11:dd:9a:9a:59:4d:f5:95:
94:93:fb:25:c4:86:38:c9:25:8a:e6:88:96:2b:13:
0d:fd:4a:8b:e9:03:17:b6:92:e1:08:09:de:dd:1f:
40:1f:6e:f9:6b:6d:53:a2:4d:03:94:2e:75:72:76:
07:3c:6c:c2:86:3c:78:85:48:7f:8e:7f:7e:73:bd:
76:a9:48:70:1f:ef:35:c2:0f:59:6f:55:e2:cf:fe:
d4:05:93:7f:82:81:71:f1:d9:6a:be:a9:78:61:17:
2c:92:c1:20:b1:48:61:5b:85:58:e0:23:fc:ee:c1:
92:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:24:71:47:1E:A7:6E:7E:68:9E:5B:8E:0B:92:CF:A4:D7:A2:BD:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/45c9c64f-96f5-3c6b-844a-8463f49acdf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl
X509v3 Authority Key Identifier:
keyid:CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer
sbgp-ipAddrBlock: critical
IPv4:
130.179.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:cf:ed:5c:98:73:ad:97:3a:d1:03:ad:46:45:49:c5:5f:37:
87:f5:33:39:58:a9:de:a3:f0:6d:a7:06:c7:ce:85:1e:d3:59:
c9:bf:2a:21:df:a3:e1:38:ea:64:68:1f:aa:ba:f0:75:11:5d:
ec:52:0a:5c:73:2c:3f:b8:17:cf:36:99:56:29:76:80:f2:5a:
d9:e8:20:57:1c:f4:98:65:fd:64:86:24:c8:9c:d1:00:d3:85:
88:c1:7e:e2:aa:4f:4f:87:5e:4e:a0:a5:27:a4:9a:2e:95:b1:
e8:45:c4:9b:c6:b3:09:b2:d9:12:71:3f:6e:0b:41:05:db:0f:
cf:12:fa:50:47:08:a9:f7:fa:c3:21:0e:25:25:2c:1d:3e:bf:
2d:20:99:6d:75:91:6b:5c:53:46:2e:ba:e1:1c:1c:de:e2:25:
4a:36:97:25:73:35:f2:fe:84:6c:a2:a5:a4:01:02:d3:5b:95:
ac:71:5f:08:19:99:63:3b:34:7e:44:9b:94:2d:61:50:c3:fd:
c1:c5:9d:7e:fe:86:e3:20:06:35:2a:64:9d:0b:93:69:3b:cb:
b7:b2:00:ec:8a:b6:b3:f1:bb:ab:0c:a3:a1:d9:be:b8:4a:32:
d7:58:aa:49:79:fa:b0:d4:4e:32:35:38:9b:0e:8c:69:9c:cd:
7a:32:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:59 2025 by rpki-client