Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa
File: c6373672-771d-3946-baf4-d4e76c94aaf4.roa (raw, json)
Hash identifier: Jp2CF45Ie1W6VC1wk+f7lHLz7Jq54/91SXIIMSeKIBk=
Subject key identifier: 4D:A5:F9:22:EE:A0:8D:9F:0B:E3:DF:60:F7:7E:F0:E8:66:7C:8B:C7
Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial: 010D0C9F432858491D71778105A5CB1403315C00
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 6939
IP address blocks: 216.21.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:77:81:05:a5:cb:14:03:31:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=54259a1e-f633-4657-9647-a5a220ff1551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:82:e7:88:f2:78:75:05:58:1c:c2:45:bb:
dd:62:8c:c8:26:c8:a6:9d:43:45:d6:6a:36:0a:a5:
0f:04:8e:4c:6d:60:4f:14:73:60:21:8b:1e:df:82:
7e:f2:b0:92:d5:d6:bb:62:e9:f0:1b:03:c3:eb:06:
28:a3:c0:38:62:b2:15:fc:a4:b1:52:6b:e3:ef:bc:
87:1c:31:e7:4e:77:15:c9:1d:14:40:34:e8:22:00:
5e:94:01:66:03:38:1f:da:87:45:ff:e7:ab:d9:fc:
12:e9:59:48:41:18:5d:06:4a:25:80:92:f4:f0:4f:
d3:60:49:96:aa:b6:e1:06:e7:12:7e:0a:67:5a:d2:
d0:ed:21:9c:50:5f:b6:ab:ae:65:33:a8:a6:bd:f4:
c5:dd:74:09:61:2f:9f:1e:f1:c8:b7:7b:64:be:e2:
4e:8a:ef:15:f2:1c:c2:39:65:8c:ae:9b:23:0a:88:
9c:ba:a3:27:2b:f8:3c:51:12:83:0b:35:ae:45:47:
ee:e5:de:27:30:07:a2:67:49:cf:22:38:b9:e1:7c:
96:26:fe:0d:7b:94:a5:7b:a9:4d:e5:68:ea:79:77:
b8:c2:75:56:72:04:75:4d:a6:34:f6:ed:c9:3e:b7:
40:57:79:72:2a:d8:2b:14:ff:1c:7a:fb:65:85:d9:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:F9:22:EE:A0:8D:9F:0B:E3:DF:60:F7:7E:F0:E8:66:7C:8B:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/c6373672-771d-3946-baf4-d4e76c94aaf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
X509v3 Authority Key Identifier:
keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.21.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:74:5f:b4:f8:fc:5d:db:db:a8:c0:91:b6:f1:1d:0f:4f:0e:
03:b1:ff:1f:36:d4:88:98:55:66:15:16:ce:24:71:2a:9d:1e:
83:11:c7:5a:37:dd:46:c7:45:f4:6b:ec:42:99:b0:f9:27:ec:
75:8c:6d:09:7b:66:ab:b2:0a:e7:b2:f0:ba:14:04:e3:f4:f1:
71:f5:be:88:69:30:35:27:43:5d:56:00:6b:f6:52:12:85:c1:
f0:09:12:4f:9c:fb:71:15:10:65:8d:da:78:f4:09:72:11:c3:
7b:c7:d6:27:fb:d7:d0:51:81:37:fc:9d:a4:4a:38:e6:bd:57:
21:6c:df:8f:87:99:75:ab:20:08:e2:ba:b7:3d:cb:cf:00:7b:
e4:71:86:b7:a2:2c:0e:08:da:ba:66:c7:57:47:54:ca:11:0e:
f2:20:e8:4c:78:77:28:5d:85:0d:d9:d4:69:3b:b9:98:45:57:
99:46:a1:19:0f:33:00:76:d9:eb:5e:10:e9:2f:d1:2e:bc:df:
0d:13:b3:e1:1f:36:c3:36:46:c7:c1:8d:21:a7:25:c7:1b:ab:
17:30:56:3c:c1:0f:9a:f9:71:ad:30:ea:08:c1:8f:8a:ec:dd:
d5:49:40:55:f5:21:38:77:48:6f:7b:90:10:ea:95:58:b0:9b:
6b:5b:10:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:53:02 2025 by rpki-client