Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/c0837f94-358f-3ce4-8af3-6a1265a5b2f3.roa
File: c0837f94-358f-3ce4-8af3-6a1265a5b2f3.roa (raw, json)
Hash identifier: J4qTTqDxtHbEJpWd3dGiKjp9eb4f9XigvrZSLDCjBAE=
Subject key identifier: C0:11:97:A5:FA:8C:1D:37:41:5F:1E:8E:A8:42:1E:FE:4C:08:C9:3A
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B6CD3A73D217E3CC66FB680
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/c0837f94-358f-3ce4-8af3-6a1265a5b2f3.roa
Signing time: Thu 05 Dec 2024 15:52:59 +0000
ROA not before: Thu 05 Dec 2024 15:52:59 +0000
ROA not after: Wed 05 Mar 2025 15:52:59 +0000
asID: 376
IP address blocks: 132.213.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:6c:d3:a7:3d:21:7e:3c:c6:6f:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 15:52:59 2024 GMT
Not After : Mar 5 15:52:59 2025 GMT
Subject: CN=b45b7c66-9577-43d0-a067-ed7e511adcaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:0d:72:e2:e2:8c:a0:a6:d0:a7:61:2f:05:
15:a9:82:f0:67:8f:0b:9b:e8:c4:15:29:54:bc:d4:
bb:52:c9:31:bb:b6:42:91:05:5d:4c:2d:a5:25:1f:
83:a6:8c:18:f0:ad:cf:c4:8e:80:1f:56:61:9e:ce:
c6:12:86:0a:d4:ec:7a:e3:e7:94:83:cd:ab:77:0e:
87:25:88:1c:fb:69:01:29:86:b2:44:1a:3b:9c:32:
df:f2:25:c2:0e:6f:fc:87:06:2a:fe:9c:59:de:91:
8a:5b:b2:29:48:67:23:15:26:4d:99:60:61:c8:80:
26:78:3c:37:bf:fd:f0:df:fd:be:d3:b9:24:79:84:
c4:fa:59:54:ba:d6:f8:47:00:83:0f:48:66:a1:66:
ab:57:1d:36:6b:08:2f:a3:71:7b:43:8f:c6:74:50:
77:a3:18:ef:28:b0:46:61:59:bf:38:e1:9c:9a:65:
4e:08:f7:d5:6c:6f:ce:30:2f:35:64:0c:19:6b:0b:
b0:59:2f:ee:6d:ca:00:56:8f:a9:11:b1:e3:a7:dd:
07:39:29:10:ed:db:40:ca:e2:e2:18:ae:7d:46:c5:
c3:e3:ca:24:81:ea:68:e9:06:d1:c7:a2:90:b7:c3:
23:de:25:bf:19:2a:44:a9:ab:b8:69:9f:02:eb:19:
19:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:11:97:A5:FA:8C:1D:37:41:5F:1E:8E:A8:42:1E:FE:4C:08:C9:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/c0837f94-358f-3ce4-8af3-6a1265a5b2f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:50:00:6e:45:bf:7e:a3:5e:1c:04:09:26:60:ff:d4:5e:e9:
ec:53:d7:a1:8f:79:ee:cc:5c:ae:54:09:09:84:94:32:ca:1b:
e2:b3:e2:e9:8d:99:c4:ff:14:94:de:5e:07:17:6e:f4:ac:30:
d0:fd:96:7e:41:14:38:58:6e:e2:23:8e:bc:84:37:ab:4d:7a:
32:d1:59:8a:93:37:73:e6:52:cf:57:4e:64:2f:e2:f3:91:8f:
f2:34:6c:d7:fe:0c:a3:99:cc:76:8b:83:20:e4:bc:f9:49:f9:
b1:da:cd:ba:e1:43:8e:33:d6:cf:7a:fd:79:79:54:3a:b3:29:
85:73:a9:3a:8d:72:5a:e1:f6:ca:d7:7a:dc:67:d4:a5:e8:a8:
96:f8:32:d5:76:d7:00:22:a4:94:9b:d0:92:08:4a:46:cf:fa:
25:e5:02:bc:24:cb:90:96:de:f4:5e:8f:b4:15:44:d8:d4:a5:
5d:c6:09:70:9c:42:4f:3e:d1:e3:d4:1d:95:6d:78:4e:69:d3:
ae:a2:69:f1:dd:f4:3e:b5:29:cb:a0:d3:88:a3:32:cf:a2:37:
16:f2:f5:d8:cb:aa:ec:31:1f:fd:58:ab:49:33:b6:42:e7:8b:
5f:54:bd:37:90:c7:dd:cb:a1:55:7b:2a:80:23:3c:66:c7:a5:
d0:a0:65:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:40 2025 by rpki-client