Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4a37cc34-5949-36f5-8d84-0fcfaf5b3fe3.roa
File: 4a37cc34-5949-36f5-8d84-0fcfaf5b3fe3.roa (raw, json)
Hash identifier: azCAkanC4VdyiBdM2McNoGIUcmyjyGbldimfP7B9rk8=
Subject key identifier: B8:BE:03:58:C3:7E:04:5A:DD:7D:37:D9:87:83:38:4C:0C:5A:AE:F8
Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial: 010D0C9F43285848805BCEDC46D20F0C835CF9A4
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4a37cc34-5949-36f5-8d84-0fcfaf5b3fe3.roa
Signing time: Fri 10 Jan 2025 19:35:20 +0000
ROA not before: Fri 10 Jan 2025 19:35:20 +0000
ROA not after: Thu 10 Apr 2025 18:35:20 +0000
asID: 22652
IP address blocks: 216.113.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:80:5b:ce:dc:46:d2:0f:0c:83:5c:f9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Validity
Not Before: Jan 10 19:35:20 2025 GMT
Not After : Apr 10 18:35:20 2025 GMT
Subject: CN=44af334a-e090-4538-916c-56b303180082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:56:0f:5c:90:68:f4:d4:de:a9:5c:9a:39:
2f:15:75:bd:9f:65:8c:b7:62:30:90:ce:3d:de:d2:
cd:de:f3:a2:7c:a3:27:2f:11:d0:f9:e2:bb:df:fa:
8b:ad:12:fb:bc:75:a2:cd:95:06:fa:3b:2d:0a:2a:
f0:f1:cb:2a:72:f8:b4:83:57:e3:ee:4a:ab:d8:59:
7e:bd:65:d8:0f:ea:98:b7:8a:e0:af:92:34:49:99:
9a:ea:4f:6a:e0:6c:73:c8:03:ca:6e:25:46:40:01:
06:aa:8c:57:54:ef:1e:2d:5f:66:12:9c:8a:38:8c:
be:da:f4:4f:55:01:d2:20:5b:0d:b8:31:17:3a:4f:
0e:ac:da:ab:e6:08:0d:73:a3:59:fb:42:72:ea:dc:
45:b1:38:7d:0d:94:e7:b7:f4:de:6e:fc:7b:66:3d:
1e:b0:a2:06:58:2d:37:f3:a0:04:2e:6b:86:41:b0:
91:07:ef:db:44:7c:04:ef:27:e7:c2:05:50:f7:8d:
79:97:41:79:f3:ba:9c:ad:d1:52:37:40:46:81:88:
be:90:6b:ba:a3:e5:57:ae:e0:cc:24:f2:6f:c8:09:
8a:0c:fb:23:a9:46:a8:3d:b9:da:12:78:83:ba:30:
2f:51:f5:80:0e:a9:84:80:d8:94:77:3d:93:e9:e5:
4a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BE:03:58:C3:7E:04:5A:DD:7D:37:D9:87:83:38:4C:0C:5A:AE:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/4a37cc34-5949-36f5-8d84-0fcfaf5b3fe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
X509v3 Authority Key Identifier:
keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
sbgp-ipAddrBlock: critical
IPv4:
216.113.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:da:9e:3b:18:8d:e2:d5:cb:01:e9:a1:9e:e7:17:3d:64:8e:
3e:89:9c:ca:6b:48:e1:fb:56:57:54:06:5d:19:14:ae:de:01:
68:15:ee:0a:84:1b:05:e3:1b:4d:1d:14:b1:75:c5:35:a8:1f:
2d:5e:3b:e3:9c:af:bd:05:d6:77:a6:aa:86:1a:8e:6b:55:1e:
99:5f:54:32:44:9e:43:3e:1e:b6:55:1e:d7:35:6b:db:aa:e3:
a2:96:a0:0e:6d:f3:0a:c2:ca:88:08:a1:7b:cf:2d:95:2b:bc:
5e:f0:7b:ec:7f:49:e5:43:44:2e:3b:ea:1d:a6:c4:43:53:68:
76:57:d6:1d:a8:24:4e:7d:6f:a4:78:61:cb:e9:bd:98:e5:79:
b4:b7:dd:a8:3b:8d:2a:40:44:9b:66:5a:6a:fb:71:cf:3e:20:
2e:f2:98:c8:c2:59:c6:da:76:9a:30:96:f4:9e:67:ba:be:77:
40:90:5f:06:6b:04:a9:b6:97:6f:52:ca:6e:2c:5a:0e:82:21:
42:7c:3c:8a:3e:4d:33:a3:2c:fe:e6:59:36:13:f5:9c:13:ac:
a0:6b:04:75:dc:27:aa:76:a1:1c:d6:63:2e:19:c2:cc:2b:2b:
ae:da:3e:ce:73:2e:8a:f2:a2:47:13:ae:f1:53:15:6f:25:df:
58:9c:ae:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:39:46 2025 by rpki-client