Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/7e9acc8c-3143-3d7e-b774-06c2ee064458.roa
File: 7e9acc8c-3143-3d7e-b774-06c2ee064458.roa (raw, json)
Hash identifier: QtLA4XCqrp3kxQFNj062ILdYOB0q5T3B+nmDDrakcnA=
Subject key identifier: F4:48:E7:6C:FA:40:99:0C:81:45:BF:CA:F9:0A:F9:2E:4C:3C:25:4A
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6CFBB4886FC942A3630B00
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/7e9acc8c-3143-3d7e-b774-06c2ee064458.roa
Signing time: Thu 05 Dec 2024 15:53:18 +0000
ROA not before: Thu 05 Dec 2024 15:53:18 +0000
ROA not after: Wed 05 Mar 2025 15:53:18 +0000
asID: 376
IP address blocks: 132.213.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:6c:fb:b4:88:6f:c9:42:a3:63:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:53:18 2024 GMT
Not After : Mar 5 15:53:18 2025 GMT
Subject: CN=21fe95f5-17c7-4cf9-9e9d-15750560d809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:bb:49:57:6c:d2:a8:36:6d:a0:1c:17:44:
bb:1d:ec:23:7b:f1:0f:15:9b:03:08:8d:5d:0d:0f:
eb:d0:e2:4e:01:d6:37:a4:9c:31:6b:0a:c5:18:03:
67:a9:cb:0e:59:21:e2:35:79:0c:8e:5d:9e:53:88:
6d:d9:b5:55:85:1d:13:85:6c:ce:c1:39:8c:f1:a0:
62:95:2f:58:e7:1d:d9:a0:5b:31:47:8d:c1:7e:a6:
35:0f:51:0b:bb:7f:4f:02:03:7e:06:bd:a9:3e:5f:
71:83:c7:9c:b3:36:b1:75:c5:b2:53:1c:27:60:31:
44:a9:85:36:8a:69:bd:0c:2a:dc:85:0a:41:a8:6e:
cf:21:56:a7:7a:50:71:9e:0b:d1:43:7b:6b:d2:be:
98:59:e1:a7:05:5e:c3:ff:cd:93:f6:b6:ea:e4:ae:
52:5c:4f:88:cc:64:86:b5:46:1f:d5:b5:cb:8d:2e:
36:00:98:4c:97:08:ce:80:92:6c:1d:43:d9:f7:ee:
90:b3:ab:e9:6f:e8:20:73:8f:5c:5a:14:5e:f1:8d:
9f:2d:a7:3b:36:c7:26:7a:22:20:91:21:97:0d:e8:
f3:9f:25:50:0c:63:2a:b8:87:07:78:3b:15:cc:45:
55:d6:8d:6b:d9:cc:25:e3:9c:7b:25:71:92:db:34:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:48:E7:6C:FA:40:99:0C:81:45:BF:CA:F9:0A:F9:2E:4C:3C:25:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/7e9acc8c-3143-3d7e-b774-06c2ee064458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:ac:4a:84:14:66:ce:73:9b:bf:52:7d:75:c0:bb:4a:82:80:
b9:61:7e:2e:77:b6:66:6a:ff:2c:6f:b9:4a:d9:d6:7a:da:90:
a7:27:c5:4f:dc:87:f6:ad:38:e4:91:45:71:58:fc:cc:9d:83:
18:db:49:0f:ad:d1:f0:b2:6b:e6:58:ad:ed:1e:68:b6:d0:fc:
c0:41:ca:4a:ec:ed:5e:51:7f:ab:01:8d:5f:41:b2:94:44:a8:
1f:ee:6b:61:c7:e6:bb:ef:56:e2:37:01:5b:e5:3a:e6:6d:27:
53:3b:46:05:75:d1:8f:79:99:ce:c1:56:31:a0:de:f5:01:59:
a4:bf:dc:8a:a7:f9:af:f1:2b:51:58:c2:5f:35:6c:9c:9f:8a:
e0:80:0e:c1:ce:33:c6:91:d2:65:ab:84:10:bf:f9:46:b2:05:
15:a6:fe:ee:73:3e:c1:9a:93:e0:ba:67:60:6e:89:1a:2d:7c:
bf:64:6b:15:11:91:f0:69:16:3b:1f:82:d3:15:ec:20:0f:3b:
fb:dc:84:fd:a9:f9:3d:2b:24:38:c5:49:01:1e:6d:68:9f:71:
67:62:89:e9:ea:52:8c:6c:55:74:8f:6e:49:32:94:3e:b1:a7:
6b:dd:b1:74:5d:8c:06:e3:3f:28:7c:6a:fb:cf:8c:a0:2f:74:
66:04:a2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:13 2025 by rpki-client