Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7ef699c1-e302-3259-96e8-3b63af9c8a70.roa
File: 7ef699c1-e302-3259-96e8-3b63af9c8a70.roa (raw, json)
Hash identifier: eI3slWONggnEdJRH+wspmfbnqSWD3zYnMxGGHIuj5/k=
Subject key identifier: 7D:AD:62:A1:52:CD:63:3B:18:3D:01:36:A1:F7:7F:4F:4D:C7:9C:F6
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F432858487755D5DD3A9A564529312180
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7ef699c1-e302-3259-96e8-3b63af9c8a70.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 62651
IP address blocks: 216.131.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:d5:dd:3a:9a:56:45:29:31:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=e49357c9-2b12-401b-b7a8-d95452b6acdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d1:03:59:2a:8a:cc:c5:33:00:fd:1e:4e:bd:
6e:c1:21:b0:43:5a:20:c6:8b:c3:15:50:c5:c1:1e:
12:9c:87:f5:2c:2e:ab:e3:b7:e6:ad:7e:24:31:0f:
ed:84:7a:dd:db:63:ee:26:d5:1f:09:49:28:fe:24:
7d:aa:96:fc:ae:1c:55:e3:f0:e4:20:91:ac:38:f4:
d0:ea:a0:36:c7:de:0e:10:f7:61:53:8d:d0:52:86:
8d:46:70:c0:19:6b:f4:8a:cd:31:d4:03:2b:ef:f6:
7f:8b:7d:24:16:c8:28:b6:92:da:95:b9:28:01:2c:
9e:23:ba:ea:10:d7:7e:d3:86:cc:66:51:0a:0e:9d:
58:51:cc:c2:4b:18:4c:db:66:a2:8a:65:c8:e5:0c:
d9:78:6b:a3:47:27:57:7c:c6:07:3b:03:68:32:07:
03:96:f1:41:cd:42:90:7b:a4:f6:db:84:3b:88:48:
b0:f8:8e:27:96:90:19:68:d1:3f:b9:31:d6:5c:73:
4f:f6:d9:02:75:a3:b2:57:8a:86:c2:b7:4b:c0:6c:
57:41:80:4c:09:ee:37:82:55:5f:3e:a4:8a:1b:28:
45:18:d0:00:7a:a2:cc:02:00:82:63:5c:b2:aa:14:
47:a0:e2:d5:5f:5c:8f:bc:84:ae:da:d0:8c:95:cb:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AD:62:A1:52:CD:63:3B:18:3D:01:36:A1:F7:7F:4F:4D:C7:9C:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/7ef699c1-e302-3259-96e8-3b63af9c8a70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.131.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:2e:e9:8a:85:b2:45:47:61:25:41:40:fc:71:34:f5:34:25:
81:8e:10:aa:f1:1b:40:3f:31:f3:56:38:8d:fc:b8:03:df:67:
f0:f9:e0:3a:d8:d1:ed:ae:37:a0:67:18:90:c6:56:12:6e:5a:
56:a4:c1:3b:aa:5c:5d:dd:d7:27:d5:a2:80:a1:eb:1e:ed:ca:
34:b3:86:60:7f:19:c8:91:58:04:db:10:d8:34:37:99:46:da:
f1:7e:32:db:c0:bb:62:2a:15:98:71:bc:ce:44:51:15:f5:1f:
bc:30:d0:b0:e0:63:02:88:70:3d:62:14:91:40:34:85:42:c9:
a4:d3:71:c1:86:47:ee:15:c6:98:34:a4:ae:58:f6:c9:4b:db:
df:73:f1:22:55:32:e6:06:42:d9:67:fb:c2:d4:2d:3e:64:34:
8a:44:f0:f1:68:ab:99:8d:e9:a4:67:c8:81:05:f7:84:94:cf:
60:31:e0:ac:2f:59:dc:eb:71:bf:66:a2:08:79:e4:fd:71:db:
7d:57:66:fa:b4:5e:07:42:d1:3f:34:1b:7a:f7:20:05:b1:ad:
9f:3e:83:8c:d9:c5:6e:29:12:0f:19:b5:b0:ea:a2:b3:a8:81:
44:48:4d:73:cc:ec:ab:f5:f6:61:91:12:b3:cd:b7:c6:4e:30:
f0:d7:55:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:31:41 2025 by rpki-client