Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa
File: ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa (raw, json)
Hash identifier: YuWnvUAfTJfVudVgfShqVgbVaYRfcW0MwgaJsruwFog=
Subject key identifier: D8:C7:BD:64:28:99:C8:A9:06:75:BD:E4:DA:E6:ED:2E:BB:F4:74:50
Certificate issuer: /CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Certificate serial: 010D0C9F432858492CB20C4B35114666E5C6CD00
Authority key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 10439
IP address blocks: 216.98.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b2:0c:4b:35:11:46:66:e5:c6:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=d5b226a7-2a99-4a1f-9c44-87e8c9a11ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:43:af:2c:a5:51:63:08:d5:95:39:ca:44:
1b:96:13:1d:f7:7a:bb:65:d6:3d:59:7a:a4:b6:b7:
f4:53:da:5f:44:2c:f8:f2:ee:9f:fa:f6:67:96:dc:
eb:a6:92:84:04:f2:72:31:82:a4:78:c6:dd:ab:c1:
de:7a:90:90:df:f0:b7:26:51:85:26:d4:ce:a9:6f:
a9:38:08:88:6f:e0:cb:15:33:84:93:00:dd:fa:ae:
a1:a0:b8:e8:6e:7c:f1:b7:42:ea:0b:fd:d6:f2:00:
48:48:42:f8:f5:ce:91:ac:c8:f0:01:0a:3c:61:b1:
14:7f:d9:a0:85:5d:11:02:40:40:98:38:b8:0b:1e:
bb:50:d1:aa:19:18:a1:eb:ac:4b:6e:1f:99:40:7d:
1f:3b:f4:c7:89:1f:ec:98:f6:1d:01:a6:63:78:49:
e1:74:75:24:6d:a2:dc:e6:a0:08:e4:b6:e7:4b:1c:
dd:f9:d4:c5:5d:aa:7a:16:a2:1f:b5:5a:5a:3e:68:
ed:ca:40:db:e7:43:9a:45:93:54:d6:d4:d0:10:4d:
a2:42:40:53:ca:74:b8:a5:5b:6f:e7:03:22:0b:e0:
7f:e3:b3:4d:1c:76:e7:b9:03:95:75:1e:b2:bb:32:
71:81:59:39:06:b5:23:60:c0:9d:7b:ff:25:0b:6f:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C7:BD:64:28:99:C8:A9:06:75:BD:E4:DA:E6:ED:2E:BB:F4:74:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ec7ff637-481d-3dae-bfcf-386fa06b1a1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.crl
X509v3 Authority Key Identifier:
keyid:FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer
sbgp-ipAddrBlock: critical
IPv4:
216.98.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:5d:e4:b2:06:5f:39:b6:46:3e:38:f6:ef:07:6e:c4:fd:08:
2e:48:92:64:02:d7:1f:09:12:0d:96:72:45:f3:e8:27:00:25:
f3:d1:bb:3a:3b:31:f8:87:3c:ef:8a:65:6e:48:de:2b:cd:10:
a1:13:a8:d1:81:dd:51:e7:78:b3:57:12:b2:dc:09:69:f8:e0:
4e:2e:38:80:22:55:b9:82:82:a9:b5:2d:a0:bd:07:f8:ed:e4:
57:d8:78:89:40:19:78:d1:3c:8c:ea:4c:10:6a:39:14:d7:27:
2f:86:d9:d9:e7:9a:6b:d2:4c:ab:d9:95:a8:ec:d2:25:35:13:
0d:72:dd:26:e0:5c:b0:da:52:7d:04:e2:b2:61:c9:e1:d6:a3:
0e:62:31:0b:60:3f:49:36:7b:da:3c:70:4d:d1:d6:4f:24:7d:
58:71:e4:61:eb:fd:9b:e2:d9:8d:67:b1:4f:7e:38:3a:79:b4:
a9:7e:80:5b:0a:8a:2d:0e:d7:2b:03:47:00:4e:cc:ef:9d:a3:
34:c3:a3:ef:7b:aa:9a:e6:a8:8d:7b:a9:ae:09:bb:9a:2c:f2:
79:e2:4a:bb:e9:63:36:04:95:e8:c3:65:87:45:d2:79:96:8a:
c0:9b:f7:6a:82:35:6e:2e:c7:ff:03:48:ab:1c:68:63:2e:4f:
64:7d:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:19:00 2025 by rpki-client