Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/e2027b58-c8f2-3fc8-85a7-ce6af4b914bd.roa
File: e2027b58-c8f2-3fc8-85a7-ce6af4b914bd.roa (raw, json)
Hash identifier: uuyAvdx2vpfSldYpeMfAKigGpwt9qu4gzOxUgouLpIA=
Subject key identifier: 64:60:6F:09:68:E6:FD:58:6B:B8:D1:E4:70:DA:F2:BA:BD:F5:24:13
Certificate issuer: /CN=221cdd91-10e9-41bb-8765-69edc6f1e631
Certificate serial: 010D0C9F43285848090FAA670028761FACCFCA00
Authority key identifier: D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/e2027b58-c8f2-3fc8-85a7-ce6af4b914bd.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 130.50.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:aa:67:00:28:76:1f:ac:cf:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=221cdd91-10e9-41bb-8765-69edc6f1e631
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=6a17c81d-27d9-4b17-8451-4aae88a0e2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:ab:ef:49:03:f5:8e:db:71:5b:15:da:46:
85:67:6a:2f:86:2d:b3:74:54:71:8e:71:48:80:24:
38:38:6c:3c:29:ef:73:9b:45:b2:68:dd:51:21:ef:
e6:71:f4:c7:f7:dc:f3:c0:a3:0d:d8:fd:e4:20:4b:
3c:14:d8:8c:ca:97:84:89:a0:90:ef:c2:19:50:23:
4c:40:87:2f:f5:80:c2:8d:96:7f:c4:ea:44:1b:db:
fa:95:3e:32:a1:f3:38:d6:bd:1c:67:c9:cf:1a:93:
fd:ea:27:81:73:35:39:f4:d1:a1:6c:90:a9:3e:a5:
2b:fa:e0:0e:1d:68:1f:75:a0:05:f7:03:0e:a7:10:
67:cb:64:19:2c:f8:08:7b:f2:d0:4e:8d:b6:50:8e:
97:02:5a:7d:4a:d8:69:ec:fa:40:1e:12:af:7e:b6:
90:3d:8b:fa:30:33:77:08:80:b0:71:ce:96:a1:41:
f4:2e:e8:08:15:48:01:da:d0:2f:af:09:ac:cb:95:
a6:bb:ee:0f:6a:4b:24:ad:ef:27:17:4e:17:37:3b:
cb:30:99:d4:1f:3a:81:19:43:88:d9:01:d4:62:03:
c3:bb:69:96:95:ac:f5:5c:58:56:5b:73:1b:fd:95:
fd:09:17:bf:6b:3b:1d:b5:df:78:e4:d8:cc:4b:56:
61:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:6F:09:68:E6:FD:58:6B:B8:D1:E4:70:DA:F2:BA:BD:F5:24:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/e2027b58-c8f2-3fc8-85a7-ce6af4b914bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631/221cdd91-10e9-41bb-8765-69edc6f1e631.crl
X509v3 Authority Key Identifier:
keyid:D4:0C:BD:52:74:20:06:4C:A1:FA:04:8B:7D:02:D2:8B:6E:9F:21:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/221cdd91-10e9-41bb-8765-69edc6f1e631.cer
sbgp-ipAddrBlock: critical
IPv4:
130.50.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:fd:fd:31:4f:53:38:22:5a:e6:7d:41:f1:cc:af:6b:d3:20:
cf:46:19:f2:7e:ce:91:5b:c5:53:36:77:cb:46:11:6a:42:11:
97:9f:47:1e:13:98:e3:42:20:8c:fe:24:f7:73:3a:55:05:32:
9a:93:37:5d:46:d4:de:f5:98:53:7f:bd:a4:af:9c:4a:e2:16:
0f:d3:88:d0:02:79:ed:43:c4:81:56:c1:39:0b:83:48:b5:31:
36:a0:26:19:c2:d8:f6:b9:c4:25:29:66:7f:39:01:bc:57:08:
59:37:1f:e9:ff:e1:b3:6e:28:7c:be:a4:be:fc:53:2b:fe:7a:
4f:4a:48:17:7d:ce:99:1b:ee:f6:3b:94:a7:e4:63:17:8a:06:
2e:87:49:f9:15:76:0e:ea:56:05:50:96:2e:29:19:08:65:46:
2a:3a:33:a9:fa:30:23:df:95:5b:3a:a1:81:55:2d:6a:31:b9:
53:d0:57:13:08:1e:74:e6:bc:75:bc:46:5d:5a:4c:8a:6e:68:
37:2d:a4:f7:72:fc:b6:05:f1:54:af:1b:d9:ab:77:34:9e:df:
7c:44:77:d3:ce:9c:f6:29:6f:07:70:50:b7:23:c1:25:fb:83:
75:58:d1:52:b4:1c:4a:77:20:a7:cf:5c:8c:3e:7b:51:97:67:
50:33:c7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:41:56 2025 by rpki-client