Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa
File: b21482bf-859e-351b-b358-a1c00b657c28.roa (raw, json)
Hash identifier: TT3Z/sHcPw7ERIGHU3yfG6XJ4/8SK0BTvpdEurrD5rI=
Subject key identifier: 3B:5C:12:6D:8B:17:B2:5B:79:0C:C6:B8:F2:2C:EF:A9:2F:16:D6:81
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584854703AF999E3609E72A83480
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 22781
IP address blocks: 216.131.120.0/24 maxlen: 24
2606:b300:8200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:3a:f9:99:e3:60:9e:72:a8:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=d7d3e245-ae6d-4d1a-989d-8af3ffb84f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:b8:6b:cf:e1:8c:6d:38:e2:79:c4:5a:c8:
0e:af:1e:a8:24:d6:67:1e:4c:0c:b0:b4:57:6c:81:
d8:22:5b:25:3f:59:0a:c2:d5:e9:e1:38:03:bb:6a:
0e:38:11:10:d3:83:a2:54:17:79:16:80:d7:e5:94:
0d:29:24:92:d9:53:50:ce:fc:89:cf:bc:76:af:50:
8a:34:0f:13:50:81:6d:93:de:7a:1d:69:15:5b:e7:
cb:7f:82:c0:f4:8e:e1:96:a3:a7:b2:f1:02:01:c0:
e9:b9:c6:5d:c2:04:ec:fb:e7:ce:7e:10:c2:c1:5c:
50:16:9b:cc:72:8d:af:3c:4d:40:2e:0b:3b:43:19:
dd:97:93:83:c4:0e:06:3c:6c:55:46:48:2d:18:a3:
93:69:5d:1c:2e:45:70:fb:cd:21:49:9a:d5:7f:d0:
80:ef:58:97:68:5f:5d:08:ed:e4:03:43:2e:9d:50:
f1:2e:0d:49:2d:7b:f0:70:57:6e:10:a3:b6:c3:86:
33:dd:6e:1b:3a:d7:75:ae:e5:fa:34:b5:47:4c:ac:
e3:82:aa:12:33:0f:1e:06:95:36:84:7f:f9:bd:22:
06:28:2a:a1:de:fa:e0:c4:93:d4:52:48:af:43:ba:
6f:fc:1c:48:85:b2:af:65:e1:b1:1a:8d:59:47:52:
2d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5C:12:6D:8B:17:B2:5B:79:0C:C6:B8:F2:2C:EF:A9:2F:16:D6:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/b21482bf-859e-351b-b358-a1c00b657c28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.131.120.0/24
IPv6:
2606:b300:8200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:6d:26:17:96:ba:f8:fc:04:68:6b:54:a5:f0:1d:67:9d:71:
bd:05:ec:78:ef:cc:40:12:af:3a:63:dc:7a:2e:6a:5d:47:d8:
da:b1:ea:c4:34:86:d4:da:93:32:f0:29:6c:1a:c2:54:07:be:
89:e3:81:ee:e8:d6:f8:b1:54:c1:44:a6:b1:ce:dc:df:cd:53:
c7:88:1d:32:94:94:1e:6e:bc:a5:5d:99:f3:40:4a:d3:e8:f6:
f8:d2:8d:5e:34:01:2b:6b:45:63:33:0d:00:55:d4:89:b0:67:
17:b9:13:62:b5:0b:32:5b:fb:bc:a5:a0:6a:c9:75:9f:f3:75:
a5:a5:8c:6a:4b:61:b6:de:34:eb:61:4e:29:9c:15:0b:82:f4:
a7:16:df:fc:57:4d:80:48:c9:1f:15:db:bf:d4:3b:e1:47:05:
79:7f:7c:6f:77:66:8b:70:f9:37:44:58:cd:df:f9:b2:f9:96:
5e:8c:2d:df:10:80:c2:5a:d6:8e:06:fc:d7:71:15:e9:b0:bc:
b9:a0:69:7f:c1:bd:0f:33:a5:11:f0:7a:24:d4:14:fb:03:63:
8a:71:0c:44:2c:0e:f9:7c:75:1b:40:3e:2c:6d:1a:08:19:3a:
f0:2a:ba:d1:98:39:81:05:d8:0b:26:bd:21:94:ea:6e:2e:6b:
a4:7e:c0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:34 2025 by rpki-client