Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa
File: 822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa (raw, json)
Hash identifier: 0UCD8fKNIJqhET1n+bYA/deIYvcasxmz9O0iDTbwQeg=
Subject key identifier: 43:24:F0:C3:5B:C5:E4:40:6C:61:05:CB:03:F6:9B:3D:77:E0:69:CD
Certificate issuer: /CN=7496889c-61af-4c61-8157-4b7f2fde690d
Certificate serial: 010D0C9F432858484D758CD3F502A82496960A00
Authority key identifier: 59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa
Signing time: Mon 23 Dec 2024 14:00:51 +0000
ROA not before: Mon 23 Dec 2024 14:00:51 +0000
ROA not after: Sun 23 Mar 2025 13:00:51 +0000
asID: 611
IP address blocks: 131.202.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4d:75:8c:d3:f5:02:a8:24:96:96:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7496889c-61af-4c61-8157-4b7f2fde690d
Validity
Not Before: Dec 23 14:00:51 2024 GMT
Not After : Mar 23 13:00:51 2025 GMT
Subject: CN=f2e3da1b-552b-4aa8-b890-120bee8f6f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:cd:24:cc:95:f6:50:d2:72:63:d5:8f:d2:
55:b0:8f:76:dd:af:85:85:9b:12:6a:c9:80:b9:6f:
eb:1e:d6:e8:7a:55:4c:74:6c:b0:a9:41:c7:56:29:
17:6f:64:dd:bf:a4:1d:b3:49:d3:2f:0b:62:39:6c:
a2:ec:b3:fb:99:64:7f:ec:d0:48:e3:e2:c9:a7:a0:
09:cb:55:17:14:3e:c8:bb:2c:5a:6a:f9:d3:b1:3e:
c6:9d:4c:d5:0e:1c:90:09:58:3f:50:73:08:8b:43:
90:e4:da:01:6a:3b:fe:c7:77:f4:a0:3e:3c:5f:75:
19:b0:08:b0:55:95:09:8a:ce:94:ca:3e:da:96:8d:
e5:28:a7:c4:bd:81:8b:49:07:05:26:47:11:af:68:
a1:38:0a:da:b6:ed:af:56:ae:42:4c:b9:2c:ce:8e:
db:4d:0b:53:c4:43:6c:8e:34:46:93:2e:0e:a8:7c:
98:3f:08:5a:bb:48:9b:f4:04:37:f3:d6:47:3c:b9:
4e:c2:98:bb:34:c4:32:a0:51:01:ee:d2:0a:b8:f9:
0c:0e:e0:4f:af:fd:2f:62:f6:da:3f:ab:05:38:2d:
99:25:f4:8d:18:22:d7:62:e5:72:dc:2d:ba:e9:a8:
85:ae:a0:6a:9b:27:e3:9a:87:7d:78:55:8e:3e:d3:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:24:F0:C3:5B:C5:E4:40:6C:61:05:CB:03:F6:9B:3D:77:E0:69:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/822700e2-39c4-370d-a2d6-3e5b4ac06e1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d/7496889c-61af-4c61-8157-4b7f2fde690d.crl
X509v3 Authority Key Identifier:
keyid:59:8A:C0:E6:5F:34:5A:76:4E:8D:20:18:B9:7D:01:9C:D1:12:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7496889c-61af-4c61-8157-4b7f2fde690d.cer
sbgp-ipAddrBlock: critical
IPv4:
131.202.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:30:51:cc:6d:99:14:f0:5e:ea:42:3d:8f:7b:cb:21:2e:e1:
62:fe:82:24:5d:b6:2a:c9:71:de:50:67:38:f1:71:d7:0f:ca:
5a:1e:98:d8:5b:51:fb:12:d5:0a:cf:e6:3a:4f:23:f1:13:91:
8b:b0:03:2a:45:02:fe:25:f6:b7:47:93:bd:58:63:e7:07:34:
0f:1d:73:8d:fb:96:5f:f4:a8:3b:39:3a:91:20:12:81:24:bc:
84:74:63:58:d8:f3:a6:55:ed:29:5e:43:2c:a5:1d:1d:73:0d:
5b:5b:a7:c0:d2:60:ba:be:a0:70:d3:e1:de:4e:19:97:94:de:
6e:47:c8:cc:c3:a2:a5:3a:17:c2:8c:92:6f:46:99:64:e7:e2:
22:35:7a:9e:d2:0f:07:68:63:cb:5f:2f:6f:a6:2a:50:3d:65:
dc:e4:90:8f:19:4c:34:22:22:0d:6b:c0:a1:83:7f:b2:41:53:
2b:72:e5:92:15:23:53:18:b5:5b:5c:8f:b6:60:4c:40:0f:b9:
35:b6:98:2a:49:3a:3e:02:7e:a1:89:40:31:80:b0:78:6f:bb:
2b:eb:d0:2e:91:a9:34:95:7d:83:6b:21:a6:00:45:2e:f6:43:
a8:bf:bd:f3:9e:44:ff:ba:81:bd:a9:27:73:b7:44:11:fe:80:
43:f4:94:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:41:03 2025 by rpki-client