Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/27768a1c-4182-355f-8ed4-0217446693db.roa
File: 27768a1c-4182-355f-8ed4-0217446693db.roa (raw, json)
Hash identifier: 96FB+eLAxkuUdlbfJDq7SrM1ssXUmZshxwm61IMSrOU=
Subject key identifier: 22:C7:3E:D0:AF:DD:C0:C4:B1:C9:F2:A7:55:D5:56:AD:4A:97:0D:E5
Certificate issuer: /CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Certificate serial: 010D0C9F43285848BBBB820BACB21080E9DC8280
Authority key identifier: D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/27768a1c-4182-355f-8ed4-0217446693db.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 63298
IP address blocks: 216.87.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:82:0b:ac:b2:10:80:e9:dc:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20363da-11e1-47d9-ac51-fe156737c8bb
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=ae0346c3-9682-4af4-8cde-fef8eccfc66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:c5:30:3c:76:b5:cc:b1:37:eb:2e:63:1d:
a3:1d:1e:10:3a:f5:4f:26:26:3c:a2:41:5b:71:f3:
99:b8:91:f4:86:55:24:25:53:0c:3d:63:43:af:da:
6e:c7:36:02:87:58:48:6d:40:b8:1a:e6:5d:f2:8c:
60:ec:25:32:c0:0d:a8:e4:ec:b9:18:14:cd:b0:1a:
70:1d:3d:61:da:d3:1f:c8:f0:40:84:76:d8:33:f1:
8a:97:04:4e:62:4c:96:9d:d9:33:b4:d8:0e:70:1d:
56:8f:fe:a0:49:7a:5c:f2:73:26:92:10:be:b6:08:
57:e3:35:05:1b:cc:0a:04:db:a5:85:bb:42:07:26:
68:67:d0:c1:ae:bc:ac:c2:88:e8:00:01:06:b4:76:
de:42:1b:fc:ef:71:5a:25:3e:40:d6:5e:61:de:0c:
25:dd:30:e1:ea:24:78:f9:b3:1a:8d:fe:5e:c6:d1:
4e:f3:44:29:e7:44:83:79:3d:d0:e2:ed:99:c0:d2:
a2:e5:bb:fa:a3:36:20:52:89:ed:64:c7:e9:8c:24:
9a:49:5e:8a:02:bc:40:15:eb:f3:ee:56:4d:92:a1:
0c:5a:6a:76:d0:ac:ce:8a:a9:90:fd:75:01:d2:62:
c1:ab:72:d2:54:7a:f5:d5:8a:c3:f1:5c:29:68:f3:
dd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C7:3E:D0:AF:DD:C0:C4:B1:C9:F2:A7:55:D5:56:AD:4A:97:0D:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/27768a1c-4182-355f-8ed4-0217446693db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb/a20363da-11e1-47d9-ac51-fe156737c8bb.crl
X509v3 Authority Key Identifier:
keyid:D3:44:A3:F2:E0:DD:EE:E5:D3:D4:0E:2F:DC:EA:DF:60:AE:6B:A0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a20363da-11e1-47d9-ac51-fe156737c8bb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.44.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:e6:04:cc:68:52:e6:d1:7a:fd:17:02:ae:72:08:56:6a:2d:
a6:ba:98:c9:90:bb:f8:76:c9:82:ae:2c:64:85:a1:07:62:26:
23:3e:ed:5c:66:9e:3a:e6:90:6b:51:80:00:1a:8f:18:b7:c8:
80:2f:76:0f:ca:67:11:5c:fc:8f:7e:b5:da:9d:d3:98:28:ff:
64:0a:df:5b:cb:41:fc:bc:48:d4:96:c3:d8:6e:d1:f3:05:d7:
16:ab:52:27:19:9c:14:a5:70:ee:b5:bf:9d:bc:74:a3:2b:a5:
52:93:e3:cd:de:db:94:d0:15:fd:07:7e:cf:f6:69:7c:56:18:
7d:77:3d:f2:de:7e:e3:1a:6f:af:e4:26:9a:45:97:3e:d4:4f:
8e:d1:e6:36:e3:de:60:17:51:c2:ac:2a:4a:3f:58:ba:bb:f2:
61:fe:0e:6f:b7:71:e0:00:a1:fc:24:f4:f0:94:68:1f:0e:92:
90:ed:35:b6:99:f0:5e:64:62:55:77:06:68:da:f2:14:85:cb:
98:a4:87:39:6b:b0:9d:4f:28:79:22:8e:96:d0:c7:4e:c7:2e:
ca:ba:66:a3:5c:f8:5c:0e:60:c7:e0:17:56:76:e3:de:77:41:
4b:e6:34:6c:28:55:3a:31:ed:76:f0:7b:d5:c5:eb:29:d4:c3:
ea:63:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:34:57 2025 by rpki-client