Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa
File: 0250530e-60f1-3b41-aba9-e6d0f26b8737.roa (raw, json)
Hash identifier: W9K0kFLWFmDPj0L1T1xSMYWdOfvKAKFsZ5Zo5TeHpUo=
Subject key identifier: B5:5D:36:F0:61:CB:D3:12:6C:1E:17:56:4E:E0:39:8A:CA:1C:94:8C
Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90
Certificate serial: 010D0C9F432858480EA50EE8659F861E39B7ABC0
Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 36136
IP address blocks: 131.201.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:0e:e8:65:9f:86:1e:39:b7:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=dcefe32d-f330-408f-b3dc-ceaea77da3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:f3:2d:04:1f:2f:e0:03:a9:da:6c:77:ca:
4f:b5:67:fb:65:44:cc:5e:85:c7:ba:4c:da:2d:23:
35:28:51:02:5f:2d:3e:17:29:b1:cc:a7:f8:a2:3a:
5b:8c:12:b0:03:f9:1c:56:12:e4:70:e3:0c:34:cb:
79:60:17:43:99:b8:72:27:fb:bf:36:92:43:22:6a:
a8:70:59:f9:77:92:8d:5a:06:9b:7d:72:28:a2:33:
01:65:e8:83:dc:61:e7:0d:1b:55:55:5b:5a:fe:8f:
f8:22:e4:7e:80:7a:81:bd:39:26:2d:d8:78:b2:33:
3d:82:9a:06:e4:dc:10:1d:47:a0:bc:8f:c4:ee:bb:
1e:42:21:fe:52:ee:74:9f:28:73:87:57:97:9a:1d:
65:cb:7c:e6:e7:5a:49:84:83:80:6c:09:46:67:f0:
b8:66:f5:20:67:5f:c0:95:fd:fb:84:91:c3:9d:0a:
4d:ea:82:63:19:0f:bf:83:ec:a2:0c:10:8e:3e:f2:
5b:68:71:19:e2:2a:08:5e:ea:0c:13:e6:42:83:fd:
c2:17:af:b0:2b:2a:26:7e:b1:58:59:cf:fb:2f:0c:
4b:a8:78:45:64:ad:b4:65:dc:35:4b:4e:f2:25:6e:
24:84:e5:48:44:4c:4f:8e:1e:08:91:42:2a:ee:c6:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5D:36:F0:61:CB:D3:12:6C:1E:17:56:4E:E0:39:8A:CA:1C:94:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl
X509v3 Authority Key Identifier:
keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer
sbgp-ipAddrBlock: critical
IPv4:
131.201.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:50:5b:5e:70:1b:e5:d4:c5:52:26:be:a2:1f:25:25:2d:95:
bf:37:29:34:b0:5b:36:aa:ed:fa:8c:6e:29:18:72:3d:73:46:
b4:51:5f:fc:37:37:64:21:d1:e5:a9:9c:67:7d:58:16:48:95:
f0:fc:65:5e:77:9b:a3:d0:2b:27:82:76:ea:a7:b0:3f:4f:48:
05:ac:ea:cc:c1:b1:12:80:39:81:8a:f5:5b:ab:8d:cb:de:32:
d2:00:48:a5:7f:ce:6a:8c:da:87:e6:65:7f:19:c8:1e:de:70:
fc:30:67:ed:6e:6e:40:04:cc:21:9f:03:51:22:60:4a:ba:e4:
25:a4:40:43:98:4e:5b:ca:44:4a:a6:3d:b2:a8:ac:fc:95:69:
db:41:af:42:f9:ae:5b:9d:12:5c:bf:66:12:0a:18:3e:7f:26:
40:ac:b8:90:c8:6f:49:7c:d4:d7:2d:70:ff:1a:60:a3:14:86:
fe:11:cc:14:3a:ba:6a:84:26:56:75:2f:94:af:2a:3b:02:4f:
9e:32:3c:e2:5b:07:2e:c8:0c:15:1a:e2:05:d0:d2:e4:de:cc:
8a:f5:18:d3:95:04:fe:d6:c7:db:aa:0d:f4:0b:eb:9d:ee:1b:
23:03:73:0e:c0:d5:ec:88:6b:f9:3d:27:d9:c4:23:6e:d4:a2:
83:03:a6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:47:50 2025 by rpki-client