Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/25d077b6-59a0-3789-8842-0fe4e9ca20cf.roa
File: 25d077b6-59a0-3789-8842-0fe4e9ca20cf.roa (raw, json)
Hash identifier: x43YrWrhsSO6utP0/+NEYbcPJ3sFSOijLvQZDQxxmYs=
Subject key identifier: FD:BB:07:4A:BC:F6:2E:90:BF:77:5E:A5:20:DE:17:13:12:2E:33:12
Certificate issuer: /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Certificate serial: 010D0C9F432858487CEB33B0475BFD17EF21A9C0
Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/25d077b6-59a0-3789-8842-0fe4e9ca20cf.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 216.250.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:33:b0:47:5b:fd:17:ef:21:a9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=d08db839-95b7-4cc3-95a0-92fb24f467cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:30:ac:e0:23:a6:e3:73:8a:1c:82:e2:83:
9f:7f:0f:a6:c5:a0:ba:f5:83:3a:e3:ad:4a:00:ef:
21:2b:d8:6f:f8:d5:43:8f:7b:c4:41:a3:2f:c4:2e:
8b:06:68:ff:6e:7f:7c:07:73:73:54:61:bf:f5:54:
08:c8:18:22:41:55:7e:9c:c1:17:1b:43:2e:07:a1:
b1:98:09:07:e6:c6:45:e6:44:73:97:af:a6:b8:64:
bd:5d:09:ee:b2:4b:69:66:28:cc:29:51:32:b0:ef:
e3:a1:ac:70:e8:bc:bd:8b:f5:93:94:94:b3:7a:04:
a8:fc:84:7b:61:53:69:d4:96:e7:eb:d0:99:1d:ac:
4e:61:04:7e:78:4a:79:70:3f:89:6c:d7:d9:d4:bb:
39:96:a6:26:b0:60:48:72:ad:9c:24:20:f3:51:e6:
fd:f7:1c:43:44:3a:3b:e6:92:b8:60:6a:63:65:1d:
0a:42:28:84:34:c8:73:1b:72:9a:68:92:42:c4:5a:
38:ed:19:29:65:78:a4:41:26:8d:85:11:4c:c9:7e:
a1:c6:29:b3:02:d5:65:e4:d7:79:01:39:67:12:57:
ed:3f:b7:a9:3c:10:a6:79:f1:22:59:9d:27:46:9f:
2c:6e:72:11:4b:c9:82:3c:5b:ed:ec:c7:1a:2f:f6:
73:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BB:07:4A:BC:F6:2E:90:BF:77:5E:A5:20:DE:17:13:12:2E:33:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/25d077b6-59a0-3789-8842-0fe4e9ca20cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl
X509v3 Authority Key Identifier:
keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
sbgp-ipAddrBlock: critical
IPv4:
216.250.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:07:d1:de:50:04:c7:a9:ec:24:73:e8:a5:cd:07:3c:13:e5:
20:bc:23:d4:76:78:bb:53:a8:de:82:7b:68:0e:69:0a:a2:45:
3d:6e:a0:e7:5c:11:0b:1e:3d:1f:e7:bd:f9:7b:6f:9c:90:42:
28:87:01:ba:43:79:72:08:b4:0b:6f:97:dd:32:a1:93:9b:a1:
7f:23:b4:40:26:a5:7f:64:5b:19:61:d2:ba:6f:7d:35:75:36:
8d:34:01:27:f2:cc:84:1a:87:f2:58:fc:a1:89:98:5e:a6:87:
9d:25:f3:f4:5a:fd:f9:9e:c8:b2:2b:55:67:44:64:16:4a:3a:
cc:29:f4:ee:10:7c:83:50:bf:3b:29:96:da:22:07:9e:63:5b:
ea:7e:40:82:14:ea:bd:04:d7:f4:b8:6d:77:29:20:92:7a:82:
3b:a6:43:be:f6:5e:5b:71:0d:f0:85:06:23:7f:56:c1:d4:55:
6d:d6:18:af:24:f4:9f:56:5b:55:32:7c:e8:20:9a:bd:1b:51:
9b:40:42:95:73:7a:a7:9a:32:a0:5f:e2:62:ff:14:c9:07:6b:
b4:ed:b8:50:27:9b:81:d2:ff:67:1c:6f:cf:af:73:95:37:b1:
25:7d:d9:03:2b:07:53:f6:08:72:81:92:12:af:0d:cc:77:98:
b8:02:f3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:23 2025 by rpki-client