Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1dc40fd8-91fd-3d0f-93f9-2c3b04f52eb1.roa
File: 1dc40fd8-91fd-3d0f-93f9-2c3b04f52eb1.roa (raw, json)
Hash identifier: AOBNsEJTM8yRaqfnMiLeVJxjGSI/3E2QxlovSUP5GCY=
Subject key identifier: 71:FE:6E:30:6E:0E:6D:70:38:14:53:BE:6D:C0:FB:D2:80:54:F0:E3
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858487755CEEA0B4B70338DC0EB80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1dc40fd8-91fd-3d0f-93f9-2c3b04f52eb1.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 62651
IP address blocks: 216.131.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:ce:ea:0b:4b:70:33:8d:c0:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=a0138ffa-1073-4ff5-8334-ffeaf1bcff54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:5e:a4:bb:2f:3b:b8:db:90:8b:91:5e:af:
36:d2:99:ba:ae:c6:ab:5f:77:37:26:38:69:c9:8f:
af:ad:c6:bc:d2:41:71:14:0d:62:31:60:34:40:91:
6c:4b:90:80:c6:ee:6b:71:00:68:63:b4:27:fd:e0:
76:1c:d0:7f:f6:af:15:be:e8:9e:13:36:6d:95:b3:
b3:9d:b2:3f:85:ae:c9:33:c7:c1:05:d2:62:f7:75:
30:24:24:39:61:ea:95:2a:45:bb:ae:a3:f9:3c:46:
ff:f6:75:01:a3:e8:be:ff:de:98:b8:0b:32:68:06:
da:a1:7b:0a:01:4c:5e:3b:d1:f6:8f:df:cc:b0:22:
ac:bc:b0:6b:20:a3:5a:7e:1a:bd:7c:a0:58:16:ff:
ea:d9:8a:fe:e4:4e:f3:7b:6c:f3:45:39:f0:e0:40:
82:46:66:09:78:8d:68:7c:29:54:34:90:7a:6a:b8:
11:28:c6:72:ad:32:c7:51:f5:eb:07:40:6d:94:bd:
10:b6:ed:31:6d:d1:62:45:2a:d1:83:69:32:ae:60:
92:9a:95:f0:db:05:de:a0:bf:8f:99:49:b1:e8:32:
53:68:df:2f:20:64:39:3c:aa:d5:bc:7e:91:e6:0a:
82:a9:9b:2d:3d:46:40:2d:b1:64:f8:f3:bc:45:f2:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FE:6E:30:6E:0E:6D:70:38:14:53:BE:6D:C0:FB:D2:80:54:F0:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1dc40fd8-91fd-3d0f-93f9-2c3b04f52eb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.131.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:2e:88:69:9e:3f:dc:a8:4f:c4:28:85:47:3e:02:32:bf:5f:
dc:8a:71:b7:62:86:88:fb:4e:3c:a5:66:f2:f4:f3:a6:ee:8d:
a0:f1:f4:0c:27:42:5a:fe:26:2e:03:52:fb:01:ed:68:57:ed:
84:77:68:6f:ce:1c:83:37:85:4f:ac:8a:67:8b:44:a9:de:67:
16:b9:f1:fc:4b:c5:12:50:e6:3d:bf:65:bf:f5:91:11:cd:ae:
42:32:09:b1:91:e3:9b:f1:c5:8f:1e:57:52:52:7a:fb:16:e3:
bb:51:66:08:ed:f4:80:be:ff:1d:1d:60:ad:63:4f:1f:a4:9c:
9d:97:d1:d7:c4:fa:66:44:b4:ec:58:53:fb:3b:f7:65:b1:ff:
4d:34:44:34:43:e6:2a:76:d6:c4:10:fc:a6:03:40:2b:17:0d:
b7:fd:cc:8c:94:47:53:91:60:da:7b:d5:1d:05:a0:92:7b:79:
6a:81:7c:80:e2:ea:3e:64:38:41:6e:c3:15:79:08:d9:dd:87:
23:dd:0d:7b:3f:9e:0e:3f:9a:e4:70:0a:d6:4b:33:85:e5:72:
e3:82:36:a8:17:78:e5:a1:8a:e6:e8:ed:f1:c2:16:e8:c4:7c:
fd:af:23:c0:bf:22:e6:d9:58:2b:8c:02:66:aa:2b:67:e1:12:
f7:f0:78:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:01:08 2025 by rpki-client