Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa
File: d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa (raw, json)
Hash identifier: sqTRd0V/f8ZFDNSF9P+7UB40wtrXDRJlrDN2jXWdet4=
Subject key identifier: E8:FD:D3:EB:81:85:DE:50:DA:7A:D0:A0:6F:C6:00:D2:7F:7B:77:D0
Certificate issuer: /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial: 010D0C9F43285848AF2B7C1A5A675ABD7D61FF00
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 16509
IP address blocks: 216.185.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:7c:1a:5a:67:5a:bd:7d:61:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=34af5cb7-5580-4713-b567-a3ffe63e8b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:4b:05:97:e0:3f:ce:66:29:71:61:89:1e:
c3:94:da:31:fd:8a:42:d6:0e:aa:b2:46:54:ec:f7:
54:21:e6:3d:de:38:ec:6f:47:f8:ec:35:93:31:71:
09:88:6d:51:62:6c:9f:7e:df:16:f8:b7:85:58:70:
6e:81:51:6a:3e:41:27:66:5a:c1:22:10:2e:01:ea:
c9:c7:ed:ec:3b:1d:3b:82:dc:46:5d:f9:4d:c9:2d:
b0:b9:04:53:49:5b:95:8e:12:43:86:e7:33:92:47:
7e:ef:4b:41:2b:89:ea:06:d8:c5:7b:8c:8c:52:b5:
2f:76:ee:ee:61:58:10:22:a1:ec:2e:ee:f0:81:8f:
cb:50:d7:29:f6:4f:31:b8:c0:40:ad:20:a7:0c:ce:
1c:30:b9:25:0e:6e:e4:2e:4b:76:cf:31:f7:2a:53:
5f:21:c4:f9:e6:ef:d4:49:65:0d:da:a9:6a:59:f3:
00:02:e3:d1:d2:44:d4:9c:42:6b:64:3e:42:0b:d2:
a9:c1:1b:14:37:e1:78:3c:c3:e9:9e:f5:57:af:18:
c2:63:1d:a2:dd:27:21:a0:ed:70:5e:92:f6:d9:d8:
20:a1:dc:51:cb:11:41:4d:62:76:d0:64:c6:ce:ee:
19:a4:3d:09:45:3f:9b:40:2d:b9:9b:87:02:91:c6:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FD:D3:EB:81:85:DE:50:DA:7A:D0:A0:6F:C6:00:D2:7F:7B:77:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/d1c2a17b-4c25-39cf-bedd-b7a56d735294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
X509v3 Authority Key Identifier:
keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
sbgp-ipAddrBlock: critical
IPv4:
216.185.210.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:cf:71:9f:a0:10:de:b2:11:0c:c1:75:19:08:a3:e6:08:d5:
e3:f0:69:7b:24:9e:a3:48:bd:50:b0:d2:0f:9f:6d:63:6d:16:
8a:a0:a1:bd:06:86:26:93:56:1b:ff:ba:d7:ba:8a:a1:69:6d:
79:0a:47:87:5c:0b:d6:47:c1:72:89:65:2d:2f:8c:9b:93:39:
98:5f:0a:53:e7:5f:14:66:4e:15:03:80:aa:10:13:af:88:d8:
15:4d:05:82:61:42:5b:75:9a:02:4d:2b:02:5b:75:db:c9:5b:
31:e5:8f:49:7b:fd:60:a2:f6:a5:8e:bd:d4:1e:cc:bd:62:ad:
e5:73:20:f6:7d:65:c4:07:55:60:00:2f:af:6b:8a:fd:ba:5c:
4b:f5:f7:9e:0f:97:61:41:3a:14:f1:5e:ab:04:31:3b:59:d9:
7a:f0:a4:ac:16:3c:64:01:bc:c9:cf:30:96:e4:87:ac:70:00:
03:42:16:94:f1:31:21:9d:01:fa:3b:ae:b3:96:75:79:09:86:
2a:6d:59:42:60:10:3b:35:e9:18:d9:72:64:6d:01:42:ae:ad:
93:6b:d7:0d:dd:92:4b:04:ca:22:42:6a:62:7c:a4:61:35:30:
0b:a2:d6:59:e1:28:32:f2:ce:b6:97:98:72:03:ca:93:20:6c:
e4:fc:21:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:34:07 2025 by rpki-client