Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/8d806902-8c58-39b5-855f-8457cfd3c136.roa
File: 8d806902-8c58-39b5-855f-8457cfd3c136.roa (raw, json)
Hash identifier: lyqeP17wQSoty0dlGdUoxvHEWoCzEij1FCLZHTdQvco=
Subject key identifier: DF:B8:E1:D9:23:AC:63:39:61:AA:6D:40:CB:5B:38:95:B6:B3:38:48
Certificate issuer: /CN=9df74e6e-da16-4cba-a854-ee087e767113
Certificate serial: 010D0C9F432858487755DFFBE5F4F252C7CFDE80
Authority key identifier: 12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/8d806902-8c58-39b5-855f-8457cfd3c136.roa
Signing time: Tue 07 Jan 2025 14:00:53 +0000
ROA not before: Tue 07 Jan 2025 14:00:53 +0000
ROA not after: Mon 07 Apr 2025 13:00:53 +0000
asID: 15318
IP address blocks: 132.206.0.0/16 maxlen: 16
132.216.0.0/16 maxlen: 16
142.157.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:77:55:df:fb:e5:f4:f2:52:c7:cf:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df74e6e-da16-4cba-a854-ee087e767113
Validity
Not Before: Jan 7 14:00:53 2025 GMT
Not After : Apr 7 13:00:53 2025 GMT
Subject: CN=75d3f639-2a82-4d5a-a350-387d489ddebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:69:3e:dc:7f:96:5c:52:b8:0c:29:34:11:
ad:51:f9:98:f2:83:37:0a:43:80:f4:f5:cc:e7:e8:
51:38:b8:75:93:1e:26:0c:7b:b7:e1:d4:29:d9:b7:
7e:b1:81:f3:7c:dc:7b:4b:46:b1:b5:f3:0a:a8:9f:
e1:5b:e5:53:64:ba:f2:e6:e5:31:cb:04:4f:f0:cc:
a6:de:2d:5b:a6:5a:ee:66:81:9a:70:54:8a:68:37:
39:f2:64:42:90:1b:aa:f1:96:cd:72:e6:cd:ae:54:
aa:9f:ae:4b:f7:54:76:35:c5:c5:9f:bd:0c:54:95:
c6:90:1b:b8:e0:b2:5f:ab:77:86:07:bf:73:fd:bc:
6e:ac:a4:ea:0b:90:dd:91:91:d6:bf:91:96:7b:c2:
53:1e:c3:da:03:9c:f1:c3:e2:dc:5d:29:cf:6f:1b:
22:64:f0:e4:8e:45:d3:36:d5:cd:32:83:65:61:c9:
d4:9b:c3:28:04:11:33:96:43:1d:ce:ac:9f:4d:17:
e2:fe:81:e3:35:cf:03:d5:b6:2d:13:e9:26:9c:9c:
8b:8d:7b:e3:a1:70:14:55:14:82:53:c1:7c:24:24:
de:e8:c2:e8:88:0a:a4:09:ee:03:e3:a3:85:49:48:
86:a7:67:ab:20:6e:04:da:6e:60:b0:98:3f:c9:9f:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B8:E1:D9:23:AC:63:39:61:AA:6D:40:CB:5B:38:95:B6:B3:38:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/8d806902-8c58-39b5-855f-8457cfd3c136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113/9df74e6e-da16-4cba-a854-ee087e767113.crl
X509v3 Authority Key Identifier:
keyid:12:AE:14:72:17:71:FF:0D:97:4F:D5:06:89:53:FE:DA:F0:F1:7D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9df74e6e-da16-4cba-a854-ee087e767113.cer
sbgp-ipAddrBlock: critical
IPv4:
132.206.0.0/16
132.216.0.0/16
142.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:7d:25:64:aa:e1:95:af:fb:e1:84:66:e1:93:83:3e:53:e7:
f8:a1:04:e0:52:f7:bd:a8:b7:95:d4:a5:fb:77:a7:d0:8d:80:
b4:39:33:d2:b2:a4:15:9a:61:3c:f3:fd:00:d4:a1:28:39:fb:
f8:16:37:0d:fd:b2:5a:ae:dd:5b:4a:72:74:23:e1:d4:2d:14:
9a:43:7d:e5:ab:4e:cf:6b:45:7e:43:95:ea:a1:7e:71:db:9e:
42:b1:06:67:7d:bc:18:7f:b3:e9:ba:1c:38:b3:dc:e7:3d:f2:
53:de:2c:28:11:05:0f:5a:9b:fd:2d:69:a2:2f:0f:93:7f:57:
47:83:62:4f:ce:92:43:cc:8f:c1:b4:2a:02:d8:88:f7:a3:cb:
da:32:82:8a:6b:a5:6d:dc:ea:4f:7c:eb:71:94:4e:d8:4b:b4:
54:cf:ed:11:16:a2:41:c8:01:aa:93:2c:89:a8:39:94:f7:b7:
05:6c:11:1b:68:02:dd:7e:15:4a:75:d3:88:81:af:6d:80:c7:
8f:da:27:21:9d:a9:d3:22:f2:78:b4:16:26:34:af:dd:2c:85:
6c:b9:5e:68:13:8f:4d:81:b3:27:b5:68:31:a1:82:85:2d:7c:
99:90:01:ef:b4:39:ee:c7:8d:91:8d:ba:37:db:b5:53:04:aa:
e7:6e:cc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:37:01 2025 by rpki-client