Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5cfab8b4-902b-3b2a-bff6-9386eac488b9.roa
File: 5cfab8b4-902b-3b2a-bff6-9386eac488b9.roa (raw, json)
Hash identifier: /cOJ6Ci1WmhyGxhqvTtKEWBdtyjjtMWVbto6lgFcmeQ=
Subject key identifier: 52:AF:94:42:78:DC:79:AF:6B:5E:B3:46:B3:49:3F:81:BA:1D:AC:C9
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7CD589C4AC7DE47B25A80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5cfab8b4-902b-3b2a-bff6-9386eac488b9.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 11831
IP address blocks: 216.18.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:cd:58:9c:4a:c7:de:47:b2:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=19b8452e-791e-41ce-92d1-3ad65330d02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:a1:42:9f:36:73:aa:ea:74:ff:d1:f1:96:
30:61:37:ae:46:8e:99:6d:4a:6f:ca:5f:2d:1e:ea:
fe:9d:3c:d4:4b:c8:e1:3c:2f:cd:33:a9:7b:12:4d:
fd:12:80:86:d1:5f:50:79:13:de:8d:c0:b8:19:a0:
2f:6f:65:6c:00:27:78:44:a2:d0:94:eb:e1:6e:23:
17:68:2d:53:f0:fc:ac:2d:0e:cd:c5:3e:af:8c:2d:
d4:45:51:ee:e5:13:1e:1c:eb:92:09:e9:5a:c8:33:
92:83:c3:65:eb:38:dc:6f:e6:89:ab:fb:50:6f:dd:
11:66:cf:4b:9e:9b:04:78:d6:2c:3f:44:47:df:12:
46:cf:d7:e0:02:24:3b:69:b3:d5:f4:be:25:a7:44:
69:d0:79:2a:dd:e8:2e:1f:f5:80:f8:77:12:12:2a:
a6:27:17:36:b2:de:3e:cb:cd:e8:c7:d2:27:d9:42:
3d:c9:a4:53:53:d0:67:dc:9c:fd:c0:86:fa:b2:d0:
7c:19:72:3e:c7:36:74:74:7a:55:b9:1f:03:eb:e6:
c5:0b:70:64:85:20:88:38:7d:ac:30:86:16:3a:6e:
9d:7b:dc:60:b2:c8:11:b0:11:28:63:24:97:af:fe:
fc:e7:ad:8f:7f:a0:fd:8b:fe:88:6c:cd:32:90:a8:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AF:94:42:78:DC:79:AF:6B:5E:B3:46:B3:49:3F:81:BA:1D:AC:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/5cfab8b4-902b-3b2a-bff6-9386eac488b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:0c:53:83:5c:20:e8:f1:19:54:ad:a8:dc:15:1d:bc:5c:3a:
50:9b:a1:18:6e:92:16:d4:fe:37:b8:e9:5a:63:7e:78:7f:e5:
9b:fb:b2:30:aa:58:25:5f:78:88:f4:69:67:0c:0a:56:36:c4:
30:1a:8e:da:84:61:c2:ad:4b:8e:7a:54:52:f1:1a:6e:e8:ec:
3b:b9:3a:71:8b:e1:cf:26:8d:6d:10:c5:d1:43:13:0e:4b:b7:
db:b9:16:8c:0f:93:49:5b:d7:9d:5f:89:32:24:c0:fa:21:b7:
58:9d:f1:2f:de:f6:31:f2:7f:c9:a1:76:ef:42:5c:9a:1e:dd:
6b:e5:7a:0a:37:b9:e0:88:5f:83:22:f2:3e:0c:8f:81:b5:03:
1f:90:06:5f:0f:dd:d1:12:2a:62:b8:ba:46:57:c2:ef:38:76:
aa:b2:f3:a5:07:fd:87:d0:fd:22:6f:c6:88:45:7a:96:30:55:
a3:82:83:d7:c2:b3:a3:3a:95:0b:6f:85:0b:38:04:f4:99:94:
f0:05:0c:ee:db:60:83:6c:91:5e:a8:3c:35:f3:3f:7f:37:5e:
7c:26:30:13:2f:23:b7:82:ee:c3:87:11:e8:5e:34:f0:2f:87:
53:e2:57:16:b1:65:7f:7c:36:75:fb:34:89:c1:9e:fd:d1:cd:
15:4f:4d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:25:27 2025 by rpki-client