Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/695456d7-53f1-38e9-9680-77880dfdaabc.roa
File: 695456d7-53f1-38e9-9680-77880dfdaabc.roa (raw, json)
Hash identifier: yIjXlo+bz6Wkdh85NRQksCI+2VzxyhBGSJS2+lSBzhc=
Subject key identifier: B1:61:10:F9:AB:84:45:4A:BB:06:8E:2D:1E:85:5C:53:75:FA:6B:42
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6ABF7802BA66433E588E60
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/695456d7-53f1-38e9-9680-77880dfdaabc.roa
Signing time: Thu 05 Dec 2024 15:48:48 +0000
ROA not before: Thu 05 Dec 2024 15:48:48 +0000
ROA not after: Wed 05 Mar 2025 15:48:48 +0000
asID: 376
IP address blocks: 132.213.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:6a:bf:78:02:ba:66:43:3e:58:8e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:48:48 2024 GMT
Not After : Mar 5 15:48:48 2025 GMT
Subject: CN=04eb3ba5-168f-43db-8778-35ab301dd32e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:55:42:61:c0:f3:f9:d8:8f:80:9e:d2:0f:
31:a8:63:85:62:ce:18:2e:58:87:9b:64:4e:6f:ff:
74:eb:23:fe:52:dc:75:14:93:55:0b:7f:53:ca:67:
04:5b:9e:3b:ae:8c:cb:c8:aa:79:1d:d1:f8:20:fe:
5a:64:12:e6:04:56:4e:ab:f7:db:01:b1:d2:5d:98:
3c:88:5a:44:f8:ef:41:ab:35:fe:ca:06:88:fa:39:
30:3b:c5:15:96:25:14:a8:1e:28:6c:7c:db:fe:a9:
4f:f4:f5:31:59:b5:3a:b8:97:d8:74:54:04:55:3b:
9e:52:d1:14:dc:e1:4e:47:c9:15:cb:86:b0:34:6f:
9f:c4:60:06:c5:54:ee:91:66:75:e3:18:25:a9:ab:
5d:19:b2:8f:d1:4a:8c:f9:4e:b5:62:9a:3a:e5:fd:
4f:4f:d6:4e:b3:93:b5:12:4b:89:0d:9a:9d:0c:fa:
e2:dc:0f:97:d2:c2:33:8c:23:18:a7:e7:64:8b:3b:
f5:bc:43:ef:f8:63:57:1c:7f:4a:72:87:81:c8:bc:
a7:67:23:e3:1a:41:c1:bd:c0:b1:7d:36:fa:2d:fc:
b4:38:08:59:97:0a:98:fe:61:33:e8:8a:35:ca:e0:
64:84:36:67:50:12:6d:eb:94:09:b5:7f:06:96:3d:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:61:10:F9:AB:84:45:4A:BB:06:8E:2D:1E:85:5C:53:75:FA:6B:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/695456d7-53f1-38e9-9680-77880dfdaabc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.188.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:f8:8a:8c:4e:ff:4f:ac:56:00:60:b1:42:9c:0a:4e:89:10:
ea:1a:59:88:72:b3:52:9f:6e:04:14:fb:c5:62:fa:99:9b:0e:
7c:e8:c2:61:26:8b:1d:9a:ce:a0:a1:e5:e2:6a:a0:1c:78:76:
8b:95:eb:7d:af:12:2f:55:06:3b:44:87:ef:45:74:9a:81:d4:
28:2c:41:c1:3b:62:d2:22:99:4d:de:d5:8c:10:4f:cc:d8:e6:
6c:57:48:6c:0a:17:21:65:bb:b7:82:2f:81:4c:cf:47:c6:ba:
40:22:53:40:45:c8:b4:2a:91:b5:4b:9c:c7:c8:44:43:b1:5c:
f0:52:af:96:95:3b:42:91:ce:94:7e:7f:1a:0a:f6:17:35:cd:
be:19:0b:be:b7:52:85:db:66:ee:17:b8:75:0d:bb:3d:b5:6f:
ec:97:aa:11:d0:82:90:c1:3a:77:24:3b:76:59:86:c4:26:af:
2c:17:87:2a:b0:02:32:ff:11:81:aa:a2:cc:31:80:2c:3e:0c:
35:34:39:87:e6:48:60:f3:35:01:7b:e4:08:9e:d1:74:45:d8:
4f:be:ba:5d:e7:ab:76:a8:4d:6a:d2:da:a7:1f:88:5b:be:83:
e8:da:b2:9d:9c:14:b7:9d:39:47:16:6b:3c:98:82:9c:a6:bd:
6b:32:e7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:28 2025 by rpki-client