Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/22f37b24-db80-36de-a961-616bf07a5ed9.roa
File: 22f37b24-db80-36de-a961-616bf07a5ed9.roa (raw, json)
Hash identifier: gPhRL+2zDo/zyRxc0mU94UNdzXA6UCKcWa4Ss6uTpIU=
Subject key identifier: 32:29:3B:C8:0E:D4:19:DE:CE:84:17:1B:9A:0E:54:A7:B7:A1:05:37
Certificate issuer: /CN=ef44742e-e289-4929-aa2c-7657c06d160d
Certificate serial: 010D0C9F43285848748B1ED9DD67E58223E44040
Authority key identifier: 89:77:CE:08:E3:14:EE:1A:F7:12:AF:74:96:0E:93:E7:4B:0E:86:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/22f37b24-db80-36de-a961-616bf07a5ed9.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 400645
IP address blocks: 130.250.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:1e:d9:dd:67:e5:82:23:e4:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef44742e-e289-4929-aa2c-7657c06d160d
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=17f73bfe-21a9-4ab2-b4af-ae0430b2c141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:36:6b:a5:f5:90:99:cf:36:2a:d6:fd:1c:f8:
ff:22:a2:02:17:46:f4:18:79:20:f2:98:e4:05:a3:
a1:c6:d7:ba:22:15:25:03:6e:a8:22:3f:5c:2b:8c:
28:8b:12:dc:07:d6:6a:bb:2a:c3:0f:88:f5:58:ac:
1f:d1:67:e4:87:46:c4:a5:dd:20:a1:88:bc:e5:e9:
ef:27:bf:24:fd:b3:21:61:90:a2:36:d1:71:eb:07:
6f:21:8f:90:48:a9:9d:69:ba:b9:e3:55:ee:4b:96:
0b:ef:ca:9c:46:68:96:76:b2:6b:16:22:db:c0:a7:
d1:ae:c9:ef:23:ec:71:99:a4:2d:c7:3d:f6:30:e9:
bb:8a:db:38:e7:35:6d:a2:54:aa:7b:43:65:64:ef:
51:c2:e9:e2:bc:c7:33:30:de:b4:1d:bc:a9:c3:80:
38:68:3f:04:a2:34:24:72:f8:84:81:03:fc:d8:41:
7a:f6:d9:2f:e9:47:c1:9f:79:01:09:5c:bb:73:2b:
ae:e9:d6:9a:aa:3e:87:f9:e6:b9:d0:84:8a:df:f1:
17:fa:6f:71:36:27:6c:0c:3a:ac:cc:26:69:a1:31:
31:d2:0e:cc:aa:94:c6:92:87:50:e3:be:2f:a3:78:
1a:d0:9c:25:d9:e4:13:8e:8e:1a:52:11:47:fe:93:
c0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:29:3B:C8:0E:D4:19:DE:CE:84:17:1B:9A:0E:54:A7:B7:A1:05:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/22f37b24-db80-36de-a961-616bf07a5ed9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d/ef44742e-e289-4929-aa2c-7657c06d160d.crl
X509v3 Authority Key Identifier:
keyid:89:77:CE:08:E3:14:EE:1A:F7:12:AF:74:96:0E:93:E7:4B:0E:86:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef44742e-e289-4929-aa2c-7657c06d160d.cer
sbgp-ipAddrBlock: critical
IPv4:
130.250.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:af:12:0d:b0:e1:2f:93:eb:41:d9:32:f8:38:81:b0:65:cc:
cf:70:76:1a:b2:32:fd:b2:f0:38:42:59:f1:94:b6:55:fb:13:
07:f2:a2:32:7f:79:f3:87:d7:9b:36:84:10:6c:d9:28:ef:89:
aa:b4:3c:86:d4:bc:7a:c5:9d:cf:6e:ac:f6:7a:13:a7:08:dc:
b7:6d:c6:21:49:6e:ed:2d:72:aa:53:cd:e4:67:6c:82:60:83:
6b:ec:2d:f0:60:83:f5:6c:75:b2:ba:0f:2e:81:89:68:69:0a:
6f:85:96:16:82:4c:16:8e:38:c7:aa:06:5b:11:df:1d:82:2f:
86:3a:12:cf:ef:74:43:4d:1b:74:5e:37:65:a0:d2:24:53:91:
d9:05:90:fe:da:da:58:8c:e6:7d:24:99:1c:25:c8:cd:03:57:
22:0d:7f:dc:11:59:ad:b2:cc:02:25:5c:74:df:52:da:49:ce:
cc:de:e3:e3:2d:de:18:79:48:6e:0a:59:42:46:a9:84:5a:6a:
d8:d1:f8:b1:62:7f:3f:1b:8f:da:8c:d2:92:d6:5f:fa:85:c1:
a2:e1:7a:b2:47:c0:c3:5e:83:b8:5f:de:f8:08:d7:64:57:19:
c8:77:b6:c6:05:9c:ee:18:ef:0f:df:fe:36:e0:1c:ef:dd:d1:
f3:1e:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:33:13 2025 by rpki-client