Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ab32e215-2622-38a5-9feb-f902b70e4b88.roa
File: ab32e215-2622-38a5-9feb-f902b70e4b88.roa (raw, json)
Hash identifier: yJOSUv9olfmqVppQVRxor5neS/pLbCiPxMjJYFX3OPo=
Subject key identifier: B0:28:33:6F:D2:94:74:67:C1:22:08:7A:D4:DB:71:EF:86:50:4D:84
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F43285848977090B30CAC0C897BC87900
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ab32e215-2622-38a5-9feb-f902b70e4b88.roa
Signing time: Sun 19 Jan 2025 02:00:39 +0000
ROA not before: Sun 19 Jan 2025 02:00:39 +0000
ROA not after: Sat 19 Apr 2025 01:00:39 +0000
asID: 13768
IP address blocks: 216.187.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:97:70:90:b3:0c:ac:0c:89:7b:c8:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Jan 19 02:00:39 2025 GMT
Not After : Apr 19 01:00:39 2025 GMT
Subject: CN=438fe374-d5f8-44ba-ad04-bedb9aa9fb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a6:1a:ec:a6:08:ef:d2:54:13:ac:fd:e7:d0:
bf:16:08:b5:a2:0a:75:07:84:80:55:d8:b1:22:41:
a3:c4:13:56:bb:d5:70:13:64:29:5a:96:37:d2:05:
4c:23:d9:57:56:6f:b2:07:bf:e1:09:2d:32:fe:37:
1f:5f:4c:27:24:45:e3:ff:7c:36:5a:31:85:e5:c8:
d2:6e:50:25:9f:0d:25:3b:65:b9:84:fa:da:bc:e9:
b9:a1:05:15:cd:5c:ea:d8:9f:c8:5d:c6:e5:b6:b2:
bc:1c:d8:00:30:25:ae:f6:a5:91:05:08:44:3e:20:
5a:6f:f6:44:18:cc:4e:38:80:5d:46:3c:13:09:01:
07:f0:93:c7:63:dd:b1:a1:14:10:3b:99:31:cb:57:
73:f3:fa:e6:94:2b:d7:05:83:71:c9:df:2d:74:33:
ff:87:3a:2c:75:1f:65:06:7b:32:75:5d:a8:36:ef:
14:50:a2:81:6b:44:e4:bb:da:75:41:1d:de:c1:2e:
02:54:a7:c2:06:27:70:da:3d:ff:a1:1f:92:ad:57:
a2:c6:40:55:c1:34:55:b6:4e:40:83:3d:0a:f7:f9:
a8:47:4b:95:f6:d5:40:a7:16:2d:3d:85:4b:0e:0e:
f8:7b:91:c9:7c:c2:1b:aa:de:00:18:08:82:6b:0f:
1c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:28:33:6F:D2:94:74:67:C1:22:08:7A:D4:DB:71:EF:86:50:4D:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ab32e215-2622-38a5-9feb-f902b70e4b88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
216.187.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:36:ba:82:5c:f0:cc:3f:88:23:15:64:ff:e7:4c:cf:1a:d3:
17:c0:46:54:7d:20:7e:78:6d:1d:73:e0:6d:54:ed:d0:6a:42:
26:f0:58:20:80:89:61:b3:98:49:b1:85:f8:8a:88:c6:3e:99:
f8:f5:70:19:07:59:1d:bb:1d:1a:94:62:96:cd:f1:3c:8a:e9:
c9:04:3b:19:f6:c7:df:8d:ce:ca:2e:c0:c6:01:ac:c5:fb:d9:
0b:c7:34:19:94:d7:93:3f:e0:88:34:fa:08:7f:e9:66:4c:4c:
b2:57:7b:06:7c:54:0e:6a:c3:81:2f:05:62:ad:00:b7:90:e5:
9f:a9:4c:85:cf:bc:fd:21:c4:41:22:5f:87:da:8f:7f:eb:22:
7b:bf:3d:ed:f7:a0:5f:6a:37:b5:6f:ee:7d:6d:8d:a6:51:d0:
67:ee:e0:26:27:60:bf:db:d2:5f:27:a0:f1:15:7f:3d:ff:df:
a6:9d:75:10:02:c3:be:6a:87:db:ca:c7:d7:ce:43:97:6f:53:
6b:1f:36:01:77:eb:43:8a:c3:64:eb:cb:e1:3b:ea:1a:ef:b0:
7f:07:25:58:69:68:62:1d:86:b8:67:a2:8a:79:44:f8:29:77:
96:45:8e:10:f2:fa:f7:5e:a7:9d:d2:4c:fa:b2:a8:ac:05:c2:
0a:69:33:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:34 2025 by rpki-client