Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa
File: 24a91ee2-c3ed-3ba1-9469-640cde946175.roa (raw, json)
Hash identifier: 8n+2v0KK5p83xSaICpuFQxRChWqnYQ52KXm7q1qSqqM=
Subject key identifier: D2:2F:50:BB:50:C5:CA:DA:B0:0C:3C:48:DE:A7:DD:97:7C:E9:7F:E3
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285848CDE103FB6C209B9CF3EFF7E0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa
Signing time: Fri 07 Feb 2025 14:00:53 +0000
ROA not before: Fri 07 Feb 2025 14:00:53 +0000
ROA not after: Thu 08 May 2025 13:00:53 +0000
asID: 396616
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cd:e1:03:fb:6c:20:9b:9c:f3:ef:f7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Feb 7 14:00:53 2025 GMT
Not After : May 8 13:00:53 2025 GMT
Subject: CN=9e8dbc83-f394-48e7-8e10-e9a6d0a9c5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:54:45:e9:2e:c9:f4:2b:e6:7f:4f:7d:9f:
ee:9e:7a:09:c7:4e:0a:50:0c:06:28:82:44:fa:56:
8e:76:8c:0d:47:cc:f6:7e:66:1e:86:26:4e:3f:fd:
90:a5:c7:24:c4:d9:4d:1b:07:e2:bf:3e:50:55:92:
87:8f:1a:6d:46:15:58:1a:f3:50:e7:c2:f7:ac:7c:
ad:61:fe:96:18:85:58:de:6a:25:cb:0e:04:ff:68:
9d:96:89:5f:ac:71:5b:b5:bd:ad:3a:ba:a5:fc:c3:
08:98:2b:d8:0b:3c:3c:c6:7b:f5:b2:2c:3a:f1:91:
8a:c6:c5:4e:7a:74:bb:0e:38:51:8f:44:c6:a6:bb:
d5:76:89:28:2f:1f:bb:f4:ae:be:b3:86:4c:f8:fe:
ee:43:d4:7a:96:d3:39:11:29:9d:20:e8:a2:c9:8a:
ab:9b:aa:53:35:f7:8f:49:3b:0d:d4:04:a6:d1:0f:
04:2a:d7:a4:bd:41:f5:1e:3e:f5:54:f6:5d:78:d8:
e7:22:db:49:9d:0b:6e:de:63:23:01:36:98:b3:56:
55:ce:78:47:03:cd:c3:de:f9:ba:c0:10:17:ed:99:
78:94:37:01:87:ad:9b:cb:35:fd:94:0b:4a:15:72:
27:f2:f5:0a:39:c2:30:30:1b:05:98:69:c4:20:d0:
5d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2F:50:BB:50:C5:CA:DA:B0:0C:3C:48:DE:A7:DD:97:7C:E9:7F:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/24a91ee2-c3ed-3ba1-9469-640cde946175.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:9b:0e:3e:01:56:13:c6:17:23:20:45:a2:33:53:80:e3:1b:
a8:b9:1c:b0:52:e1:1e:ab:bb:86:eb:b9:57:bf:84:53:6a:9e:
02:0e:48:f5:51:e5:4b:24:0c:78:1e:97:9a:8a:59:7f:ae:67:
71:cb:a1:6b:8a:94:13:d1:da:38:f3:96:5e:5a:44:ac:c9:dc:
75:24:2d:d6:b9:f2:39:2e:a1:1c:18:be:b0:08:8f:d8:58:c7:
e6:b6:1a:e4:29:cb:06:0e:a7:32:48:83:03:14:f1:49:69:8d:
43:2d:65:f5:f0:ba:2b:e8:f0:e6:69:ec:63:cf:6c:69:c9:2e:
30:dc:49:7d:99:4f:9e:03:01:47:c1:14:e3:93:a0:96:fe:d4:
e7:8e:d4:3e:11:1e:84:9d:d9:fe:e0:02:dc:7d:56:7b:43:03:
e3:2e:28:b9:d9:1f:8d:b9:cd:14:46:fd:07:d8:6e:06:05:0e:
4e:10:92:b1:ea:5c:17:9d:b3:4b:6b:17:aa:d6:44:54:58:7d:
64:f0:d1:42:36:ab:97:e4:0b:84:62:7e:49:69:e5:30:22:35:
d3:18:e7:26:17:28:cb:88:35:4a:36:ce:74:1d:56:21:69:e3:
d8:7b:c9:87:68:b4:c5:2c:0d:c2:4e:49:d1:9b:6b:58:ed:b4:
e7:bc:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:40:56 2025 by rpki-client