Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa
File: bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa (raw, json)
Hash identifier: ZOKats7KADGyV1FmkelK4RFOvTGabKf7waZJdJqVR1M=
Subject key identifier: 92:3D:FA:D4:FE:1F:38:A1:16:51:F1:28:78:EF:F2:34:3E:48:17:AF
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858491AA6C70C90C0DA2FFA86FF00
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 394708
IP address blocks: 216.255.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:c7:0c:90:c0:da:2f:fa:86:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=dfb20853-934c-4701-b980-128aca5bd3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:81:91:5e:4e:7a:23:91:94:1f:b9:49:a1:
b5:d7:69:c5:df:d7:c4:53:0c:e6:52:76:f1:30:d9:
65:ea:cb:7f:24:15:b0:97:4c:ff:70:64:66:7c:0e:
9a:cc:98:b0:a6:04:e8:ad:bd:b6:4c:cc:6d:cf:fc:
80:a4:c4:e2:a8:b2:4d:14:7b:a7:6f:21:15:52:66:
25:ad:c8:71:bb:30:d8:8e:6e:ef:51:6f:32:1b:d8:
c6:74:94:2e:43:d0:8a:7c:c8:f2:f7:21:21:b2:2f:
98:51:ac:d9:92:7f:9a:e7:1b:41:cd:e8:58:d4:ab:
53:1d:88:4c:79:a5:88:bf:ea:8c:74:b9:87:08:34:
bf:10:fb:71:d0:1f:fe:e3:c0:0c:6d:9a:20:07:4f:
f6:e0:53:7a:20:91:ed:47:20:29:c6:de:23:35:21:
5f:9b:de:5c:65:07:fa:83:2e:03:68:b3:50:06:22:
26:25:48:e0:ce:b1:dd:27:c2:38:3f:dc:5a:a1:fb:
1d:ed:ea:59:3c:bc:50:11:80:b6:38:07:a9:bf:aa:
da:00:c8:0e:a8:6f:a3:15:18:89:81:45:5f:67:f8:
ba:27:a2:d6:2c:9b:33:a7:50:5d:b9:df:85:4e:21:
e4:a5:0b:b8:76:cf:18:ec:66:8e:44:c6:87:b6:59:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3D:FA:D4:FE:1F:38:A1:16:51:F1:28:78:EF:F2:34:3E:48:17:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.255.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:26:b4:d5:c2:af:f7:a3:de:34:4b:b6:16:bc:49:1f:78:57:
19:6a:6c:7f:be:d7:70:92:bd:4a:8c:8a:a0:fe:0d:2b:ec:e4:
39:82:08:de:c4:54:86:9f:19:83:a5:d4:34:32:d5:9a:7c:61:
d0:e7:34:db:e5:9c:f7:9e:3b:dc:58:b8:bb:44:e6:fb:af:a6:
a8:68:30:3b:3e:eb:ef:db:b9:1b:8f:79:3f:19:b0:63:8e:92:
a8:c2:f0:c1:e9:88:62:95:59:ce:b2:4a:9d:46:e6:37:14:81:
b8:d0:63:25:5f:e5:24:3b:ed:f8:22:77:5b:5d:08:9b:ae:d7:
e7:83:0e:30:bf:cf:77:41:ec:b6:2d:d4:01:07:2f:84:08:8b:
6c:6c:9e:9b:4e:1b:78:39:21:d5:8f:83:70:62:19:cb:70:45:
20:8a:35:8c:51:2f:6f:b8:7e:89:be:43:a6:b7:2d:b1:15:af:
44:3b:d7:7d:8f:58:05:9b:65:d5:ca:70:b4:0f:d5:79:4f:19:
c3:3a:45:df:23:9d:06:3b:5a:6c:4d:ee:71:e2:fa:c2:a2:5c:
c8:4b:18:5c:c9:69:a2:53:84:9a:92:55:4f:75:a3:38:b1:32:
d0:47:07:de:51:64:ce:1b:ed:5b:ce:e6:82:b8:ed:70:2e:c7:
e0:b7:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:59:12 2025 by rpki-client