Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/6cf9a2f1-01e7-3e4d-9f55-84ee56e5c954.roa
File: 6cf9a2f1-01e7-3e4d-9f55-84ee56e5c954.roa (raw, json)
Hash identifier: 8vWOjL/7aYBRPWdAX8Ptr8B5sCZmAueYQaS+wOoqRnI=
Subject key identifier: 4C:85:11:D3:7D:F0:85:EE:E0:4E:0E:02:EC:85:01:7A:6F:B1:08:2E
Certificate issuer: /CN=4a74ffe6-3c09-4633-b8de-781dfa287da6
Certificate serial: 010D0C9F4328584832F02751BA9B21D81A331990
Authority key identifier: C9:6F:C4:11:30:E8:F2:88:A4:88:91:C8:03:A6:37:EA:A2:1C:A5:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/6cf9a2f1-01e7-3e4d-9f55-84ee56e5c954.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 398266
IP address blocks: 130.51.202.0/23 maxlen: 24
216.230.18.0/24 maxlen: 24
2602:feae::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:27:51:ba:9b:21:d8:1a:33:19:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a74ffe6-3c09-4633-b8de-781dfa287da6
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=1a3fe970-5e3b-43c8-b898-151924a506a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:70:3a:ba:1f:a7:eb:6d:69:4c:c7:a8:55:12:
28:47:f5:0a:e5:89:a6:88:c2:d0:5c:62:5d:91:cc:
3c:2d:78:ba:50:3a:6c:31:2d:13:3e:ef:09:e8:24:
8b:05:ff:e8:31:ad:b9:76:a7:eb:ea:af:ea:cc:21:
88:80:0a:b1:ac:22:d0:21:9e:4a:8e:60:98:0b:10:
9e:50:d1:8d:28:ca:a1:67:87:f2:e2:1e:5b:0b:40:
92:9b:2d:87:8f:6f:c7:2f:f0:3b:07:db:8f:14:cf:
d7:49:92:9c:30:ee:21:ff:d3:3d:3e:46:c3:b9:b9:
a3:06:a3:17:ad:ae:65:85:d2:0d:4e:bd:69:ac:c5:
52:cd:58:9c:59:00:d1:f5:43:38:b4:14:d3:1b:0a:
72:7c:c7:5a:89:30:cc:5e:bb:a6:b3:4b:60:5f:ff:
d4:73:41:07:bb:f0:0b:70:80:04:34:27:a3:92:06:
cd:6b:ca:0c:f5:93:e2:50:93:9a:7a:7f:d3:72:bc:
e2:31:e4:d8:ac:93:11:b6:19:3f:32:6f:53:09:e2:
64:55:ac:db:fe:17:2b:27:83:69:e4:ef:97:02:dd:
52:50:10:38:e6:a5:de:48:e4:a6:6b:a4:e1:b1:5d:
d8:4d:48:ce:90:f1:2b:3f:47:c3:b7:c4:97:c2:7f:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:85:11:D3:7D:F0:85:EE:E0:4E:0E:02:EC:85:01:7A:6F:B1:08:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/6cf9a2f1-01e7-3e4d-9f55-84ee56e5c954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/4a74ffe6-3c09-4633-b8de-781dfa287da6.crl
X509v3 Authority Key Identifier:
keyid:C9:6F:C4:11:30:E8:F2:88:A4:88:91:C8:03:A6:37:EA:A2:1C:A5:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6.cer
sbgp-ipAddrBlock: critical
IPv4:
130.51.202.0/23
216.230.18.0/24
IPv6:
2602:feae::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:94:39:0c:ce:39:15:cd:70:4a:2a:a9:7c:94:81:2e:a0:fb:
42:16:fc:a8:be:29:83:6c:8b:2c:72:5a:42:12:c1:b8:18:7f:
b3:62:11:d2:5f:46:db:b6:84:6f:89:0f:65:26:51:5d:44:a5:
48:4a:fa:f2:0c:cd:02:22:12:d0:a0:5d:d7:3d:8c:f8:a9:d7:
f1:88:4a:49:af:94:2d:10:8b:60:84:50:a2:9e:24:41:45:39:
7f:44:80:37:40:b9:3e:e1:23:df:53:0e:4d:49:2a:bd:22:34:
cc:7d:46:9d:42:b0:58:d3:c2:8b:fd:82:3b:65:c3:7c:7a:3d:
f6:14:32:86:e1:81:ab:df:8f:f8:eb:50:1e:29:25:8c:03:78:
ef:99:20:47:cc:34:89:27:77:f3:70:4c:07:b2:ed:a5:25:9f:
29:76:03:8e:35:ff:9c:a0:74:61:bb:43:49:d6:6c:b0:87:13:
f3:5e:37:be:31:0a:d4:15:62:b5:c9:e6:b1:af:3a:46:c7:a5:
0d:2a:6e:dc:3e:22:18:ee:0f:77:89:8b:79:48:a6:e0:3d:a7:
d9:08:79:f3:67:c5:46:18:9c:f2:5c:ef:31:bf:fc:24:55:b9:
51:d3:b7:d9:85:e4:35:b1:7b:f6:cf:a0:dc:61:dc:57:d0:8f:
a2:c7:96:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:21:03 2025 by rpki-client