Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/459f13ea-9cc4-360c-9ffb-ea41b7aac55e.roa
File: 459f13ea-9cc4-360c-9ffb-ea41b7aac55e.roa (raw, json)
Hash identifier: drKtjbmGcuKkOAFYaOjSqKdjqEGA0Mb/eOTQnhlRO0s=
Subject key identifier: DE:2E:11:AA:3F:D6:4A:BE:AF:60:9A:52:33:35:96:54:95:87:55:51
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F432858490E16C770121FF41C9D6BB100
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/459f13ea-9cc4-360c-9ffb-ea41b7aac55e.roa
Signing time: Sun 02 Mar 2025 14:00:52 +0000
ROA not before: Sun 02 Mar 2025 14:00:52 +0000
ROA not after: Sat 31 May 2025 13:00:52 +0000
asID: 400624
IP address blocks: 16.0.57.0/24 maxlen: 24
16.0.58.0/24 maxlen: 24
16.1.96.0/20 maxlen: 20
16.7.6.0/26 maxlen: 26
16.7.6.160/28 maxlen: 28
16.7.6.176/28 maxlen: 28
16.103.138.0/23 maxlen: 23
16.143.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0e:16:c7:70:12:1f:f4:1c:9d:6b:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Mar 2 14:00:52 2025 GMT
Not After : May 31 13:00:52 2025 GMT
Subject: CN=a6e21cb8-2fe0-4526-b478-79e036605988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a9:05:d9:aa:54:0c:0f:63:4c:f3:ce:2c:e5:
8c:01:b9:ee:6a:bd:b1:88:87:ee:b4:5a:31:37:0a:
da:e9:4a:60:4e:d1:f6:2f:5c:7c:22:60:de:ac:a7:
fd:61:a2:a9:f2:6a:18:32:ac:25:ab:0d:21:57:05:
50:4a:16:d4:47:04:45:4c:68:2e:f7:e7:ad:2f:e8:
f5:49:84:b9:ed:e2:32:19:0a:32:14:ac:e5:d3:e6:
c3:e8:8a:4a:e5:ec:d0:92:fc:8d:5e:6c:fc:f3:a3:
48:40:96:97:25:d2:a4:7b:b6:ba:1e:5e:50:b9:89:
85:11:a6:f0:c8:89:bd:9d:b5:44:19:76:60:88:8a:
7f:85:39:a1:c3:40:00:ad:bc:d0:2a:5e:a2:0b:26:
e9:67:12:d2:90:9a:0c:25:80:4c:5f:d0:f3:df:69:
81:3f:f0:76:8e:b5:91:70:0f:d2:d3:96:34:b7:f5:
90:12:ee:22:22:78:c2:8c:a3:2c:b5:46:8d:83:a0:
a6:cb:79:8f:8c:f5:fd:50:7e:0c:0c:26:c1:4f:3f:
b4:48:2e:71:d3:c1:96:4e:18:39:46:39:b9:9e:a2:
0e:a2:2e:fb:61:23:8b:7c:b4:7b:c8:89:6e:23:27:
21:52:9a:af:95:47:38:03:c5:82:cd:e5:f6:bf:c5:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2E:11:AA:3F:D6:4A:BE:AF:60:9A:52:33:35:96:54:95:87:55:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/459f13ea-9cc4-360c-9ffb-ea41b7aac55e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.0.57.0-16.0.58.255
16.1.96.0/20
16.7.6.0/26
16.7.6.160/27
16.103.138.0/23
16.143.29.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:b9:23:c4:c8:e6:42:e6:ee:35:1c:7d:d4:5a:16:b4:3f:77:
36:72:83:16:a1:e7:47:c3:99:34:1d:57:cb:a2:47:8c:93:bb:
7b:4f:64:2b:f6:6a:d5:b2:81:ae:bd:fc:4f:f1:0d:c1:70:41:
08:eb:77:7a:73:82:35:61:3d:55:f9:29:16:b7:30:53:01:10:
f5:1b:fa:6b:39:b6:69:07:0b:f6:9d:8f:95:35:c3:4b:75:4c:
9d:96:e0:b5:3e:79:42:59:88:89:45:dd:b3:ba:69:bc:8d:e5:
2f:2d:11:5c:cd:6b:2f:16:6d:10:ca:20:e4:c7:92:ed:3a:48:
ed:73:b4:95:c2:d4:f0:bb:b8:aa:8d:0c:eb:11:f3:22:ba:dd:
7f:e0:a8:f0:a3:ef:ad:f2:41:f6:25:81:a6:38:d5:45:39:ab:
cf:4d:2c:9f:95:7c:e9:d3:36:45:1c:23:f3:1a:ce:63:5c:fe:
d3:46:ed:36:b3:2e:92:49:81:06:8c:7e:a5:17:21:fc:07:57:
29:a7:48:93:9a:55:7a:e1:3d:8f:5e:83:c9:d9:18:6e:6f:57:
62:7a:8a:f7:44:2b:fa:c0:64:c4:08:4b:e3:29:d1:5c:4b:16:
d9:d0:5b:82:9f:d7:a0:21:ab:ae:7e:bc:a9:4c:3e:fd:2f:c4:
7c:6e:4f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:20 2025 by rpki-client