Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/c4f8b7d7-1596-33d2-880a-4eb74d1e959b.roa
File: c4f8b7d7-1596-33d2-880a-4eb74d1e959b.roa (raw, json)
Hash identifier: Kl6Lmm56jtBxvmtQefYr1EXhynpl/3Pj07LzYY2ZgoI=
Subject key identifier: 0A:05:C8:8E:40:37:D2:D0:D2:1D:B5:3E:37:BA:65:39:AA:DE:03:9C
Certificate issuer: /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial: 010D0C9F432858481B717029BCC15B267F14D100
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/c4f8b7d7-1596-33d2-880a-4eb74d1e959b.roa
Signing time: Thu 05 Dec 2024 16:02:17 +0000
ROA not before: Thu 05 Dec 2024 16:02:17 +0000
ROA not after: Wed 05 Mar 2025 16:02:17 +0000
asID: 376
IP address blocks: 132.213.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1b:71:70:29:bc:c1:5b:26:7f:14:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Validity
Not Before: Dec 5 16:02:17 2024 GMT
Not After : Mar 5 16:02:17 2025 GMT
Subject: CN=15f0c55a-02d5-4c24-a77a-37444abbffb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:52:cd:2d:c2:c8:da:e2:6d:fa:c6:47:f0:
40:66:bc:b7:e5:7f:bc:b6:b2:bf:97:53:a7:51:a8:
00:e8:b9:f9:12:70:dc:11:10:d5:d3:4d:9f:a0:40:
b5:62:bb:ee:3b:02:bf:f6:c2:c3:e1:88:a6:23:ba:
b1:82:d9:9d:4c:63:04:53:30:4a:e2:78:ad:87:d3:
89:68:fd:bb:bc:68:3d:f6:95:c4:b7:35:e0:66:5b:
b0:28:b2:81:53:1d:1a:8c:9f:12:25:16:46:40:57:
3e:49:fa:f5:3d:91:b9:cb:27:4a:34:a7:2d:14:32:
96:54:62:74:88:ed:f5:c6:e6:f4:97:bd:a7:4b:b1:
ca:bd:e4:ca:88:20:cd:f2:e1:a5:17:24:bf:f6:02:
a2:1e:bb:b2:b6:1f:d0:38:ef:bf:bc:95:bf:96:c0:
7a:10:e0:e7:fd:11:39:7b:53:61:7b:38:6d:b9:51:
0a:2d:ff:9b:29:e6:b9:8c:c9:ba:60:36:ef:d0:18:
71:f1:64:dd:e6:17:86:98:de:71:47:28:3f:01:f1:
60:b5:03:fe:e6:f4:e3:1a:44:7c:5a:25:66:e2:c7:
79:0f:89:87:33:a6:a9:8d:08:ba:69:87:70:7f:d9:
89:69:f9:0c:46:47:3a:e5:66:06:c3:2b:eb:0d:20:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:05:C8:8E:40:37:D2:D0:D2:1D:B5:3E:37:BA:65:39:AA:DE:03:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/c4f8b7d7-1596-33d2-880a-4eb74d1e959b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl
X509v3 Authority Key Identifier:
keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
sbgp-ipAddrBlock: critical
IPv4:
132.213.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:47:f4:55:73:e1:c4:ce:e7:f8:85:ea:ff:62:7e:82:28:7e:
08:da:38:f5:d6:2b:1d:f2:bd:af:96:3b:b6:7f:d1:da:e4:33:
25:ac:87:77:54:8f:c6:ba:ff:0a:0b:83:c4:63:62:5b:46:fb:
66:d6:02:69:03:51:94:eb:2b:f3:a0:3d:5c:98:65:75:10:5a:
f7:97:ef:f8:1e:4e:a9:92:82:27:cc:1b:17:78:48:d3:71:d4:
bb:2c:02:6c:2b:c4:c1:97:b1:9b:9e:38:e9:38:e0:d4:9c:94:
fd:ad:c8:0d:53:fa:0d:46:a8:26:ff:ce:82:e3:00:56:70:2b:
9c:01:e6:9e:ec:5e:99:48:1b:91:55:3b:ea:d0:67:3e:35:6c:
cc:a9:bc:ff:af:78:58:81:a8:b0:9b:77:ac:d3:86:95:c8:04:
03:d3:29:78:0d:a7:a5:a5:e3:41:77:05:5e:20:1a:15:3a:05:
5d:a1:b3:6a:0e:7a:66:c7:e7:8e:a5:13:5a:a5:e2:f5:0d:c2:
f6:c1:61:d9:6d:50:69:8b:2b:33:7a:a8:b8:b1:0e:2c:0d:c2:
5c:9d:17:28:cf:40:9b:8c:96:1f:f4:25:c4:ef:72:74:dd:1e:
58:25:3b:73:c0:4a:ac:f6:ce:12:61:01:a7:4b:2f:4b:50:9d:
ef:29:d4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:32 2025 by rpki-client