Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/cfce32a3-f0e3-3710-a588-830a5724fbd6.roa
File: cfce32a3-f0e3-3710-a588-830a5724fbd6.roa (raw, json)
Hash identifier: Rb6FOEHtvB/if7DpW98Ve1SH0KL722ECOkr9DhmZVEg=
Subject key identifier: 5F:83:D0:DD:AB:28:25:9B:AD:A0:14:A6:73:08:66:FD:7A:11:67:72
Certificate issuer: /CN=65249710-7b94-4fa1-9980-bf1dc5d20857
Certificate serial: 010D0C9F432858486AC59F70725EC778FCE81840
Authority key identifier: D3:D9:5A:04:B4:9C:DA:C7:DE:ED:F5:3E:99:1D:32:60:D6:FC:08:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/cfce32a3-f0e3-3710-a588-830a5724fbd6.roa
Signing time: Fri 03 Jan 2025 02:00:40 +0000
ROA not before: Fri 03 Jan 2025 02:00:40 +0000
ROA not after: Thu 03 Apr 2025 01:00:40 +0000
asID: 8075
IP address blocks: 135.56.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6a:c5:9f:70:72:5e:c7:78:fc:e8:18:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65249710-7b94-4fa1-9980-bf1dc5d20857
Validity
Not Before: Jan 3 02:00:40 2025 GMT
Not After : Apr 3 01:00:40 2025 GMT
Subject: CN=c77fae0a-a7eb-495b-80fb-eb7be0254503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2e:1e:b8:0c:6d:7f:5e:12:31:25:c3:af:77:
f6:22:50:b9:ba:78:6d:7a:73:f5:50:ce:4a:80:26:
23:26:0e:51:40:4e:7f:5f:18:f2:b8:86:10:2f:60:
37:b8:02:dc:c8:01:1f:db:e5:fc:75:39:29:19:95:
8a:0c:7f:d6:f7:84:41:46:1b:f3:b5:aa:58:38:40:
ed:60:21:7d:b5:5f:21:7b:1f:25:75:54:cc:31:08:
cc:ee:93:31:e0:0f:05:34:fe:b3:21:fb:05:0d:84:
45:05:0d:bb:39:c7:78:6c:e2:17:de:5d:18:27:aa:
d0:9b:9f:76:81:96:6c:5c:70:76:e8:8d:a5:2d:d9:
1d:64:2a:13:18:92:c5:ac:a0:fa:bf:ba:e1:72:1a:
06:46:98:17:69:7e:7e:60:a2:92:d6:78:2d:c3:cd:
c4:9a:bd:04:cf:0d:20:1d:2d:27:97:d6:a9:7f:46:
69:0e:05:6c:50:2e:1a:52:2c:f7:3d:88:ff:56:e7:
45:e9:1c:c9:11:1c:06:aa:fc:7f:e2:4a:e4:7b:36:
fc:93:45:d7:ed:b6:c4:b5:1d:19:1a:12:3c:09:10:
b0:31:df:ae:2a:ec:af:f4:d9:3d:1a:18:49:ba:31:
63:ba:02:8d:6d:18:5e:11:c3:49:0a:ec:b8:72:fb:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:83:D0:DD:AB:28:25:9B:AD:A0:14:A6:73:08:66:FD:7A:11:67:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/cfce32a3-f0e3-3710-a588-830a5724fbd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/65249710-7b94-4fa1-9980-bf1dc5d20857.crl
X509v3 Authority Key Identifier:
keyid:D3:D9:5A:04:B4:9C:DA:C7:DE:ED:F5:3E:99:1D:32:60:D6:FC:08:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857.cer
sbgp-ipAddrBlock: critical
IPv4:
135.56.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e1:f1:31:63:ea:9b:f9:2f:9a:e1:07:ce:56:82:72:a3:f2:6a:
cd:11:a6:ed:0b:f2:b6:f1:77:82:ac:8c:8b:d0:a1:b1:a3:b7:
38:54:11:da:56:de:a3:07:9b:8f:9e:c4:fc:02:50:45:0b:e5:
8e:23:ed:f2:a5:cf:1c:8c:03:9a:b8:ba:13:c8:00:3f:c1:bb:
89:22:b3:2a:af:74:9d:41:7f:2d:01:b0:2d:d4:63:f7:e6:f0:
c1:2b:41:4a:48:bc:55:9b:44:a7:3f:01:96:d2:4a:eb:53:6f:
ec:8a:12:a7:d8:10:10:bc:f7:51:24:eb:e5:e3:7c:ed:27:63:
3f:b1:0a:c7:93:bb:d3:f9:a6:a6:cc:4d:b5:b6:86:6b:ac:ee:
55:a3:6c:39:99:4b:ad:16:a0:1e:f6:ee:42:55:64:1a:a0:f2:
86:10:44:a6:75:23:e9:74:16:20:4b:09:39:f9:90:da:7d:6a:
d4:2a:8b:9a:27:93:8b:ef:74:78:0f:fa:bb:83:88:e5:26:0d:
7e:42:59:f1:ca:a1:5e:f2:e9:95:e3:b5:39:e5:84:c3:a8:4d:
b5:3d:02:26:46:91:cf:72:42:54:95:85:32:2e:bb:e2:e6:f0:
57:5f:88:18:ca:86:c2:0b:a9:0e:16:bf:8a:5b:6b:a5:ec:e8:
17:f5:4f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:24 2025 by rpki-client