Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/5f16356a-9348-336f-aee4-e4ace7aff025.roa
File: 5f16356a-9348-336f-aee4-e4ace7aff025.roa (raw, json)
Hash identifier: VhqI0CzoRe6m3RxvuoS+C6Tgz63/Y8h2FajR4ry1CHU=
Subject key identifier: 70:B6:40:E6:78:08:81:0D:4E:79:FB:05:09:6B:B0:05:C8:E3:2F:47
Certificate issuer: /CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
Certificate serial: 010D0C9F43285847F84F848628124C3B7F33AD80
Authority key identifier: D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/5f16356a-9348-336f-aee4-e4ace7aff025.roa
Signing time: Sat 23 Nov 2024 02:00:28 +0000
ROA not before: Sat 23 Nov 2024 02:00:28 +0000
ROA not after: Fri 21 Feb 2025 02:00:28 +0000
asID: 3851
IP address blocks: 131.216.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f8:4f:84:86:28:12:4c:3b:7f:33:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
Validity
Not Before: Nov 23 02:00:28 2024 GMT
Not After : Feb 21 02:00:28 2025 GMT
Subject: CN=df3530a8-9f7f-4fd4-ab25-62f6a7a66b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:60:b6:7f:dc:10:08:9d:aa:ba:fe:e8:cd:
d5:3f:8b:12:ae:79:4b:d7:8a:d8:62:c1:61:f4:4a:
69:c7:c2:ab:6b:ca:e0:38:ba:3e:65:3e:bb:80:be:
30:a9:cf:4d:8f:68:58:67:ce:1e:11:4a:63:0c:f0:
d6:27:25:14:99:33:9e:04:d6:56:a6:06:65:ef:0b:
b4:cf:b7:66:f4:a9:57:d5:6e:19:dc:31:9d:de:6e:
2d:66:16:64:ef:0a:24:be:86:fd:01:0b:7b:d1:fb:
ef:7b:fe:b3:cb:76:1b:2c:13:75:62:9e:26:05:68:
78:d8:ae:e5:54:bb:e3:e2:72:fb:2f:3e:49:d1:c0:
0c:cf:15:c7:5a:23:6d:d0:bc:d9:ba:33:19:bd:af:
9b:5c:86:07:c5:5d:c5:ac:9b:be:75:00:33:82:cd:
bb:f8:bb:bf:57:c7:ba:5b:e3:34:d7:0e:0e:f1:ec:
92:4d:27:cf:ab:f7:7c:bf:6f:f0:7e:19:65:2d:e1:
bf:d8:7f:1b:6c:7a:f7:f1:8c:de:79:6f:69:10:d3:
d3:4d:39:97:f7:43:c9:92:f7:01:80:83:68:09:1a:
15:85:76:60:94:75:9e:5c:8c:9a:2b:3c:7e:16:63:
d7:a4:88:0e:49:81:00:4f:10:bd:d9:da:83:4d:64:
fe:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B6:40:E6:78:08:81:0D:4E:79:FB:05:09:6B:B0:05:C8:E3:2F:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/5f16356a-9348-336f-aee4-e4ace7aff025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl
X509v3 Authority Key Identifier:
keyid:D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
sbgp-ipAddrBlock: critical
IPv4:
131.216.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:fa:6f:0c:37:69:fd:e7:78:21:cf:76:bc:9e:bf:e6:3a:d3:
e2:f6:d4:4f:97:f1:25:06:57:e0:46:a5:e4:c5:1b:e5:61:d7:
c1:aa:e4:e4:35:38:13:a0:0b:16:a4:b8:a0:34:43:b5:b8:04:
92:71:ce:58:6d:a0:17:e8:6d:eb:89:05:c7:74:14:87:c7:a1:
57:db:20:86:71:04:eb:26:66:b8:66:e4:e3:c5:cd:36:b4:44:
f6:31:b9:ef:51:af:b4:12:d9:45:7a:37:3c:68:00:38:73:3e:
2a:1e:d2:dd:d8:72:5d:94:77:1b:bc:4d:ef:5d:7f:40:4d:c0:
23:5b:6c:03:3d:81:b8:45:c1:c1:4e:fb:53:f2:90:e9:8d:90:
12:7f:5c:13:d2:64:b9:c4:ec:f2:dd:6b:e9:a2:42:d1:68:8c:
d3:24:a9:84:7a:30:b9:98:fd:03:95:1e:2b:01:82:d7:df:68:
b9:ed:47:b5:00:fb:17:c1:e6:f8:a2:2b:20:51:e9:1b:74:b8:
28:cc:2c:b7:aa:b9:c3:69:04:88:09:42:08:bc:72:38:7a:c6:
60:2c:a5:f1:70:22:ff:34:cc:d1:3b:e4:63:3a:1f:4a:94:93:
76:61:fd:3f:92:dd:29:57:14:20:8b:4c:70:bb:49:d6:f2:77:
8b:86:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:21 2025 by rpki-client