Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/aa7896fd-24b8-373e-adc6-b96dba9805ad.roa
File: aa7896fd-24b8-373e-adc6-b96dba9805ad.roa (raw, json)
Hash identifier: kZKXDQh+RptxRNt6bltaBpF00Xc5VRoPaci6TwLed1Y=
Subject key identifier: 61:E9:13:C9:2D:EC:2D:C9:3C:17:CC:B0:17:23:EF:CD:EE:1E:DD:D6
Certificate issuer: /CN=9d186494-6006-4592-b81b-d4c764dc8430
Certificate serial: 010D0C9F4328584950F9613ED6958C6D4CB25F40
Authority key identifier: C6:4A:0C:0C:56:22:BE:C0:A1:E0:66:90:87:6D:2C:EB:50:ED:51:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/aa7896fd-24b8-373e-adc6-b96dba9805ad.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 16509
IP address blocks: 216.117.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:61:3e:d6:95:8c:6d:4c:b2:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d186494-6006-4592-b81b-d4c764dc8430
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=e4a45e1c-2cae-479c-9625-836bc64d7441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1d:4a:df:ed:04:d1:ed:e5:f6:0c:77:a9:35:
01:af:73:e4:dd:4f:b5:d6:07:cf:69:ab:f0:3a:a8:
40:b2:9b:bd:cc:e8:b8:ba:dc:64:63:1a:03:e8:ed:
47:de:11:23:72:3d:c7:09:92:af:8e:d1:5e:44:b4:
2e:cf:6b:1d:3e:fd:19:ac:1e:d9:86:d5:ee:31:cb:
88:ab:12:0a:60:43:32:c9:86:1a:88:4a:ab:2d:66:
99:e4:7e:c9:08:ad:55:66:12:a5:04:92:92:6a:a4:
4a:c1:4f:27:cc:5f:8e:0e:f4:db:85:90:58:3d:c1:
28:e0:c4:aa:ed:a4:66:b1:0b:93:cc:5f:2a:8a:88:
50:16:76:f8:1f:f6:d4:4c:63:d8:b7:af:bc:f9:3a:
07:2c:e8:4b:c8:8d:73:08:1c:8a:ba:99:f7:67:d5:
88:75:d6:6c:6c:47:e5:52:62:b5:b7:ac:2a:1c:3b:
e8:10:4c:93:b2:44:2b:a5:28:f1:a6:0e:7e:60:88:
fa:64:46:63:54:b5:f2:eb:a2:82:37:c5:1f:42:b6:
84:d8:b7:27:e2:bc:2c:aa:f6:2c:df:26:17:f9:d6:
f5:ec:ed:23:e5:7e:c5:09:a6:16:55:06:e2:b8:df:
54:d7:0b:40:e8:91:92:27:4e:85:8f:bd:af:c0:b2:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E9:13:C9:2D:EC:2D:C9:3C:17:CC:B0:17:23:EF:CD:EE:1E:DD:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/aa7896fd-24b8-373e-adc6-b96dba9805ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430/9d186494-6006-4592-b81b-d4c764dc8430.crl
X509v3 Authority Key Identifier:
keyid:C6:4A:0C:0C:56:22:BE:C0:A1:E0:66:90:87:6D:2C:EB:50:ED:51:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9d186494-6006-4592-b81b-d4c764dc8430.cer
sbgp-ipAddrBlock: critical
IPv4:
216.117.249.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:5e:22:1f:02:cd:87:cf:b7:4b:68:68:9c:df:49:9b:cc:06:
9c:e6:bf:d8:bd:16:6e:88:f3:e3:00:92:2d:cc:7e:34:2b:2d:
d7:89:c5:c6:8d:01:2d:29:f5:71:87:44:80:9a:f2:05:90:69:
e6:cd:f4:af:db:c9:2e:7a:29:38:d8:e2:bf:c6:c1:13:de:da:
2e:ba:b0:40:69:0e:7e:af:63:e0:2e:84:19:ee:9d:55:db:3c:
03:9b:02:10:b1:8a:b0:36:0b:6b:07:74:48:48:5b:41:2f:bf:
d2:dc:2d:fd:6a:67:f5:87:d7:27:e9:85:ea:f1:b1:f4:b2:69:
2e:35:e2:56:13:56:ab:e6:3a:6f:ed:ba:b9:b0:cf:7f:46:03:
96:a1:b5:d2:3f:3b:50:61:51:7c:83:92:94:1b:a6:68:e9:bf:
a3:89:74:25:bc:86:6e:5a:35:f4:1e:17:80:8e:87:06:99:91:
a6:ac:5b:59:25:0d:8c:2e:1f:02:25:03:a4:c9:43:1d:a8:e6:
1e:6f:c9:e8:76:90:aa:d9:23:1e:ad:37:5d:52:d9:0f:cb:c7:
6e:3c:cc:87:24:0a:bb:85:23:85:25:fd:43:8a:da:d5:d9:9d:
b2:c0:95:fd:de:01:bd:cc:cb:88:31:3f:40:df:8f:18:b4:4e:
19:cc:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:20:46 2025 by rpki-client