Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa
File: 2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa (raw, json)
Hash identifier: hlKM2W1awKofqzQU7Mz5AiLy5urLQlDel+mNVI06U9s=
Subject key identifier: 0F:A1:65:7E:DE:42:D6:72:C1:B9:9D:5D:1A:5A:60:2C:8E:C7:7A:98
Certificate issuer: /CN=ee195698-fb60-40ef-a454-85fcbf3381b9
Certificate serial: 010D0C9F4328584950F95EF1135E8BDF12A96A00
Authority key identifier: 3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa
Signing time: Wed 26 Mar 2025 13:00:53 +0000
ROA not before: Wed 26 Mar 2025 13:00:53 +0000
ROA not after: Tue 24 Jun 2025 13:00:53 +0000
asID: 198949
IP address blocks: 137.216.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:50:f9:5e:f1:13:5e:8b:df:12:a9:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee195698-fb60-40ef-a454-85fcbf3381b9
Validity
Not Before: Mar 26 13:00:53 2025 GMT
Not After : Jun 24 13:00:53 2025 GMT
Subject: CN=04bfdcef-8fa9-49c7-863f-0cf61a412cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1f:b9:90:67:a4:dc:0f:24:cf:9b:58:87:ea:
a1:52:ad:29:d1:77:fd:1b:50:81:cd:56:c3:b5:66:
87:f3:53:89:6e:17:05:c1:d6:f9:3d:10:52:8a:14:
4e:55:94:1f:db:fb:b9:c8:94:5c:0b:51:93:c5:92:
32:f9:5d:5c:52:6e:9e:7b:cd:4c:c2:7c:e8:5a:c4:
d1:78:2d:ee:6a:ce:24:f7:06:14:09:f7:fa:69:0f:
50:35:fb:79:75:2e:82:8d:78:c9:97:4d:64:9a:ca:
47:ea:6e:83:4e:23:4c:80:3d:df:f9:ee:11:82:66:
a9:d9:c5:42:33:c2:ac:cc:40:22:db:e2:19:8e:44:
70:65:2b:40:87:82:42:68:07:b2:12:35:86:b9:e3:
31:a8:ef:b0:f1:a0:04:21:9b:e2:d5:5b:02:a6:9e:
7e:c9:b2:c8:6c:e3:50:12:6c:10:7f:84:ee:cf:18:
39:b1:12:a5:ac:e8:25:3c:11:14:06:03:18:85:59:
95:0d:2b:08:74:f5:ac:60:8e:96:04:fc:16:3e:c4:
7c:94:ae:49:30:0f:33:d6:fa:bb:e1:36:e4:25:4c:
6c:f0:ab:45:2b:3d:1b:e5:01:bf:ad:cd:4c:ee:ef:
70:2e:4a:21:c5:9b:63:e3:0f:76:b4:27:8d:8b:99:
bd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A1:65:7E:DE:42:D6:72:C1:B9:9D:5D:1A:5A:60:2C:8E:C7:7A:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/2ffa1deb-a3f7-3c06-943f-a6e4982f853c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.crl
X509v3 Authority Key Identifier:
keyid:3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer
sbgp-ipAddrBlock: critical
IPv4:
137.216.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:d6:dd:28:66:3a:0d:a1:f6:2e:57:61:63:30:63:db:ec:23:
a6:37:9d:99:9f:59:fa:e1:ac:2f:96:2f:b0:98:24:88:8b:56:
8d:54:e7:e8:11:df:4d:19:61:1c:12:72:64:e3:da:2f:07:23:
08:4e:00:c1:81:e2:b2:44:bd:a0:4a:be:9d:f2:0e:96:20:7f:
25:42:cd:ca:ff:f2:c4:7f:30:a7:35:8d:d0:4f:60:10:48:90:
85:0f:71:92:d5:bf:7b:69:5d:d1:81:5c:8f:ee:01:ea:1c:17:
8b:89:6f:b0:ec:f7:86:77:bb:b5:ed:40:8c:20:83:64:66:87:
9a:a4:cb:c1:f8:61:9d:a8:c6:23:72:ee:fd:e5:a0:4a:31:db:
ec:37:94:f5:4c:2f:fa:f7:14:39:bf:f2:67:c8:a1:21:02:da:
90:15:6c:95:31:c2:12:d7:e0:6c:86:de:76:2e:73:11:5a:a4:
cc:24:f1:b6:d6:5b:09:0c:b5:92:90:34:cc:c3:ae:e5:34:5c:
83:2f:e1:80:c2:b1:85:75:c4:66:d8:ce:ef:10:d4:b6:09:52:
e9:6d:dd:d1:09:90:39:b8:81:f9:52:4f:e9:5e:90:66:77:86:
df:98:c0:5a:16:af:59:d3:2c:d2:05:66:df:0b:e6:64:89:a5:
97:86:59:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:44 2025 by rpki-client