Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/d449ca14-5612-35c6-bb80-64b2f7a45f90.roa
File: d449ca14-5612-35c6-bb80-64b2f7a45f90.roa (raw, json)
Hash identifier: g90XJgZNCAsOhRHqv+UJvXT5XpvTbTUFgBl8MHwmEuA=
Subject key identifier: 78:AB:05:0A:AE:CF:08:39:A5:9B:8A:66:A1:0C:F8:4C:A2:15:95:01
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F43285848B090B23C30C6E02CB6873E00
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/d449ca14-5612-35c6-bb80-64b2f7a45f90.roa
Signing time: Tue 28 Jan 2025 02:00:39 +0000
ROA not before: Tue 28 Jan 2025 02:00:39 +0000
ROA not after: Mon 28 Apr 2025 01:00:39 +0000
asID: 62651
IP address blocks: 216.151.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b0:90:b2:3c:30:c6:e0:2c:b6:87:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Jan 28 02:00:39 2025 GMT
Not After : Apr 28 01:00:39 2025 GMT
Subject: CN=85a53fd7-d620-46bd-bdaa-07c4bcc19389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:46:72:5f:8e:e4:b9:09:d7:f0:ff:9a:fe:
72:cf:3d:6c:4f:f3:0b:2e:92:39:df:fe:7b:35:7e:
95:47:9e:74:b5:17:a7:5d:c8:9a:85:7d:79:d6:ae:
a4:0b:be:16:c6:da:06:ae:2c:32:3e:d4:2f:bd:1a:
97:a1:c8:6d:38:5b:79:df:74:65:07:18:59:8f:ef:
d1:f1:1b:d1:c8:a0:06:9c:bd:76:27:85:e8:8e:dc:
a2:6b:1b:b9:fd:f5:21:cb:28:af:77:c2:c3:1d:bf:
56:10:ae:7d:77:82:ad:82:a5:00:c6:a5:40:09:30:
c6:40:a3:5f:7d:8e:1e:33:b5:e4:d3:a0:77:60:4d:
a8:dc:e1:4e:2d:b1:95:32:2b:56:52:fb:61:37:12:
b9:15:76:34:d9:62:ce:d3:f4:f0:bb:ae:47:c2:00:
1f:83:9f:a1:56:b1:de:b8:b1:98:02:bd:45:85:ec:
c0:82:8f:df:4f:a1:63:a7:89:2b:31:70:45:25:38:
2d:45:38:c6:0c:ba:5d:bd:e2:e2:d9:29:fe:d1:6f:
3f:d4:5e:d0:bf:f3:f9:d0:bc:1f:d1:00:ec:33:ba:
e0:c4:c0:4c:1c:35:c0:e2:20:da:fa:8e:23:54:08:
43:6a:6a:24:07:20:6a:91:9e:e9:fc:5e:9d:0d:9f:
8b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AB:05:0A:AE:CF:08:39:A5:9B:8A:66:A1:0C:F8:4C:A2:15:95:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/d449ca14-5612-35c6-bb80-64b2f7a45f90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.151.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:d4:5c:c0:f8:a7:95:20:cf:a3:7d:8c:68:c8:4c:d0:48:55:
6b:b8:09:46:16:fd:ad:a4:1f:a4:e3:24:40:7e:c9:3f:c1:ad:
4b:d5:9a:06:61:8e:30:92:a5:4b:2d:c6:91:69:5a:b0:bf:a7:
34:b9:87:9c:ff:a1:98:cf:88:e7:c8:1f:a0:fd:e3:a8:66:e1:
80:5d:f3:52:74:ca:30:19:d4:c8:52:62:cd:40:b4:88:bf:84:
2f:a9:55:31:6f:40:4b:7f:c2:5c:a3:f1:a7:00:0e:5d:21:87:
c2:0b:bb:52:74:64:00:4a:59:15:86:6c:db:92:ea:92:61:c5:
54:92:1b:c5:9f:21:98:89:bc:6a:fd:ff:65:be:14:32:29:aa:
81:98:f2:fa:95:18:f6:8f:75:c1:4d:0d:47:09:e5:59:fd:a8:
3b:55:36:b2:25:ca:29:e5:6c:62:e4:89:50:ab:04:9f:a0:a3:
5f:4f:e4:79:3a:c2:aa:9c:79:e8:ba:29:9d:fa:23:50:8c:d4:
66:cd:58:d2:0e:31:d4:7b:dc:ae:94:48:11:13:d9:e0:1b:44:
6b:e3:0f:93:a9:5a:cf:ea:9f:8e:33:7d:df:f6:86:fd:7a:2f:
36:82:f5:7f:69:85:c6:1a:0c:c1:70:5d:81:4d:f0:db:cd:ac:
a5:bc:32:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:20 2025 by rpki-client