Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59c6c72e-ba23-31c4-a798-1200a1860ca1.roa
File: 59c6c72e-ba23-31c4-a798-1200a1860ca1.roa (raw, json)
Hash identifier: qU2hZojFFqkVOqtZ1vOOLdBmIsVB60SGlH+45Dv2UdA=
Subject key identifier: 29:30:BE:D3:76:2E:C6:B1:4B:3F:E0:90:9B:F3:DC:52:4D:EA:EC:5A
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328584711E0B38066B47FF90D65EC80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59c6c72e-ba23-31c4-a798-1200a1860ca1.roa
Signing time: Sun 01 Sep 2024 13:00:41 +0000
ROA not before: Sun 01 Sep 2024 13:00:41 +0000
ROA not after: Sat 30 Nov 2024 14:00:41 +0000
asID: 16908
IP address blocks: 216.173.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:11:e0:b3:80:66:b4:7f:f9:0d:65:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Sep 1 13:00:41 2024 GMT
Not After : Nov 30 14:00:41 2024 GMT
Subject: CN=6bb0a180-1960-4fff-b69e-3a49486555c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:a2:1f:08:eb:c1:0d:6f:65:7e:ec:b2:ca:
01:78:94:f4:cb:f2:ab:a4:1f:e6:37:22:05:65:40:
e0:d4:93:e4:45:5f:8c:64:fa:6b:06:90:fe:28:63:
6a:70:ff:1e:11:9c:40:22:f4:7b:12:f4:e8:22:99:
0c:3c:12:15:c1:89:ef:a3:45:47:7f:27:ca:62:ef:
4d:db:a5:05:70:23:0b:2f:2a:78:71:d5:73:d1:84:
20:a7:55:ca:b8:c5:15:8a:8b:ab:fb:ea:21:70:bc:
7d:02:96:e9:01:3f:61:6b:3d:17:f0:ba:57:f2:40:
e9:74:0c:af:aa:26:f3:d2:f8:34:ff:c7:5d:7d:ae:
d3:22:76:0d:17:c3:db:d4:24:3a:2c:84:21:53:e8:
13:db:ff:34:71:c5:f5:fb:46:36:62:72:a9:c2:35:
b0:25:0e:42:12:ca:1d:67:75:5c:69:b5:a7:bb:db:
f0:bb:ab:d0:71:88:fc:b9:c6:c8:be:28:fb:78:02:
58:d9:05:08:a2:23:3a:5b:3d:8d:10:29:4c:4d:fe:
62:fa:cc:c1:a2:a7:a9:82:9a:f2:c0:ba:ca:10:2b:
a9:eb:8a:d1:97:0e:db:07:31:19:76:b3:eb:9a:29:
08:96:82:6f:87:b9:c0:0d:44:d2:f7:a8:b6:9d:76:
3f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:30:BE:D3:76:2E:C6:B1:4B:3F:E0:90:9B:F3:DC:52:4D:EA:EC:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59c6c72e-ba23-31c4-a798-1200a1860ca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
216.173.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:af:63:06:e7:fe:b3:76:e1:12:44:f7:e1:29:ae:3e:75:a0:
37:0d:0c:74:4f:7d:8f:f1:10:2e:51:cd:29:38:d9:e4:58:a8:
12:d6:6a:27:ba:9d:06:58:07:a8:3f:b3:30:69:e3:45:02:70:
85:ee:81:99:f4:f2:3d:1d:34:e1:7d:8d:c3:29:99:3b:be:2d:
17:26:71:16:0a:c2:47:08:b4:a0:4f:ac:42:3d:f6:bb:d1:e9:
5f:23:fc:d8:e6:f0:02:ea:ed:f3:ff:01:26:3b:45:f6:6e:d2:
1d:0b:2f:4e:22:89:e9:ba:5b:ab:5a:46:8a:b9:c0:d7:20:ec:
78:fe:7e:9e:3d:d1:c2:d8:79:49:c8:03:91:e4:df:ca:de:d5:
eb:d4:ce:9b:15:d0:db:89:23:7c:bd:d9:9d:47:57:2f:d5:20:
5b:69:22:c3:83:98:1b:09:59:69:3c:3e:22:9a:e6:77:c8:88:
78:26:b4:08:fe:3e:96:f9:17:9d:74:88:d9:a4:cd:86:2e:ea:
97:3c:28:23:15:88:3b:54:3f:af:f7:82:37:ef:86:58:95:83:
1d:f5:ee:fa:6b:82:b9:7c:d3:53:33:d9:b4:39:3e:08:de:cd:
cb:12:29:81:31:61:a8:a7:35:bc:14:9d:a0:9a:a3:cf:a5:05:
f1:69:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:48 2025 by rpki-client