Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa
File: a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa (raw, json)
Hash identifier: rdSScCGUOesNuZInl3tSjbVJMOolwumSJLWQouk0VU8=
Subject key identifier: 05:A1:0F:BD:36:BA:A7:EE:76:AB:7F:25:B7:4F:45:62:B3:28:4A:BF
Certificate issuer: /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial: 010D0C9F43285848854B508C2BFFF5BF4F95E060
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 16787
IP address blocks: 192.219.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:50:8c:2b:ff:f5:bf:4f:95:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=c16e9cac-8bed-4a50-9949-692c414fa3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:fd:b8:ff:5e:06:91:ba:23:73:20:db:2a:
ce:fd:22:b8:55:d9:c6:e0:9c:aa:54:f1:8d:f5:31:
08:e1:a9:9e:e3:d3:79:73:11:8d:4a:2c:2b:05:41:
86:83:7e:3b:ff:ca:2e:32:b3:55:59:01:7c:6f:da:
6b:0f:29:ec:d6:80:7c:d5:6b:63:74:cb:8f:7e:73:
22:c4:63:f9:c3:f8:dc:2e:a3:0d:3f:6f:69:30:31:
3f:30:30:0c:c7:65:c0:54:01:2c:83:0f:9d:24:d2:
3c:7b:2b:7c:48:65:a4:be:0f:ff:6f:9c:1d:11:d3:
ca:57:8d:23:b7:5a:4e:e9:cc:bc:12:8e:44:48:63:
30:fe:cb:09:22:b3:76:ce:c6:63:0a:28:52:62:51:
2c:87:3c:56:1e:48:9b:a7:8e:bc:bd:19:42:e5:a4:
09:60:bc:43:e9:09:15:03:20:0d:25:16:c2:e0:3f:
3f:42:b3:f3:4d:21:05:fc:41:a8:55:93:f5:82:b5:
ad:23:5b:17:8e:85:e0:d8:4c:7e:62:2a:90:3b:b4:
98:b7:ab:98:11:c7:41:ea:6b:73:91:86:0b:3f:ea:
d8:62:be:07:d9:86:b3:77:5c:81:1c:b4:42:1b:11:
73:fe:51:f8:a2:cf:e1:94:6e:b0:be:3c:b3:50:43:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:0F:BD:36:BA:A7:EE:76:AB:7F:25:B7:4F:45:62:B3:28:4A:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/a0ef1a13-49d9-3439-878e-d98f51f1c08d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
X509v3 Authority Key Identifier:
keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
sbgp-ipAddrBlock: critical
IPv4:
192.219.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:74:44:8b:cd:ca:ce:77:79:b8:43:3a:ab:68:57:f2:fd:85:
a5:fe:7f:ff:47:cf:1e:79:1c:53:a8:a7:38:33:2c:9f:4b:b9:
e8:88:b9:9e:0b:0b:16:6a:1d:bd:fb:b9:06:5c:02:93:33:e7:
ae:2e:14:f5:03:89:d3:22:38:4e:b0:d4:a8:18:7c:ad:1a:24:
bd:a4:e9:30:8d:c1:86:b7:52:bb:a3:4c:5d:ae:59:cd:7b:24:
06:52:e2:b0:1b:fa:ba:8a:72:4a:c8:a5:a5:0a:54:9a:07:0e:
36:c0:4d:ef:86:ad:ea:c2:b4:38:d0:f8:a3:80:2b:d6:08:a3:
ef:81:cb:1b:26:aa:c9:f1:00:ce:15:2c:93:52:59:45:ca:ea:
3c:39:f8:0a:6c:92:09:82:6f:6b:27:df:9f:8f:12:31:5e:1a:
0c:9c:ba:06:2c:01:ab:ca:16:26:d8:c4:a6:c3:9b:7b:be:2e:
1e:c5:7a:81:a5:cb:43:d2:bb:6e:25:40:d7:0e:89:89:ca:ec:
35:4e:bf:7c:71:73:53:41:01:5d:14:a5:c6:ca:cb:1e:42:eb:
a8:7b:b4:11:14:31:05:82:44:16:cb:a2:a4:3a:c9:d5:7f:f4:
eb:0d:1d:03:a3:a0:81:d0:40:8c:20:6f:0c:bc:11:fb:04:5f:
a5:89:d9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:58 2025 by rpki-client