Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa
File: 9a980a6a-941e-34a1-9ffa-edd653116330.roa (raw, json)
Hash identifier: F4zChxR4g9z1kdcSNeclF7QeY2LlSjIOzeSSA8HTRjw=
Subject key identifier: 76:BA:AF:AD:73:B7:78:C8:4D:7A:82:2C:B8:C5:D2:F0:D0:D2:C1:BB
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285848CC7B9CF505AA02EFE1228280
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 11090
IP address blocks: 216.137.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:9c:f5:05:aa:02:ef:e1:22:82:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=20e59e58-aa11-4976-9830-025af7896cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:90:7a:88:58:77:45:3a:9f:7e:0f:09:0c:f5:
1b:8e:64:d4:4d:6a:a6:12:6c:df:e0:54:2c:67:46:
53:cd:cc:f3:c2:f5:00:b1:39:e3:e2:49:2a:19:7d:
27:46:ef:18:28:04:fa:69:15:11:6b:d2:1b:be:70:
59:1c:df:c1:9a:c8:7e:76:04:a0:8d:57:df:0f:fe:
2d:dd:0a:9d:9c:d9:62:1c:df:7e:22:6f:f0:73:cb:
20:43:08:fc:15:a4:95:04:70:61:fd:5d:67:8f:63:
3e:e5:b6:d3:25:b8:9c:fd:18:27:33:04:c2:49:35:
b4:7c:a4:22:48:32:a3:24:40:a3:c6:70:eb:a5:3b:
82:0f:d7:88:dd:18:69:9e:01:4f:a6:70:0b:24:41:
67:77:71:37:ad:d3:ec:27:55:9e:b1:04:e8:c7:0e:
2b:3b:a0:31:e1:82:9e:c6:7d:89:83:5d:b0:b4:6c:
41:21:e9:c2:3d:d5:69:2b:57:d6:49:2e:5c:5c:7c:
60:cd:49:60:2e:2f:c1:51:78:14:db:fa:a7:f7:e9:
3f:6a:ec:8b:66:02:f8:5e:55:54:71:52:98:63:8e:
94:f7:db:be:53:ea:27:92:75:06:37:bd:fd:da:f6:
ad:bf:a5:9e:45:c9:28:1b:94:53:8c:be:06:c7:8c:
da:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BA:AF:AD:73:B7:78:C8:4D:7A:82:2C:B8:C5:D2:F0:D0:D2:C1:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9a980a6a-941e-34a1-9ffa-edd653116330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:ad:9c:52:f4:15:b9:50:10:a8:fe:8c:f0:36:19:43:c6:3a:
3f:90:dc:d0:2e:2d:dc:71:b9:4d:47:9d:1f:7d:46:17:92:35:
54:84:40:82:0a:f6:d4:67:28:1b:5f:63:b6:b3:0a:49:0d:f3:
ea:f5:a5:95:ee:84:19:16:58:c3:98:7a:23:04:96:13:db:12:
3f:59:aa:3d:ca:cb:d2:85:18:2c:aa:40:a2:1c:9c:47:fe:f2:
49:db:10:dc:c7:e6:c9:74:3c:1d:29:a4:16:15:e5:be:65:12:
eb:de:c1:7e:e2:80:a0:3b:cb:9b:b0:7a:d4:98:53:b6:ea:f3:
31:f5:89:55:d2:4f:36:e4:9f:92:ee:5d:4f:19:97:44:0b:7c:
c8:05:c0:e6:e9:f0:82:f8:fe:fa:19:e9:ee:9d:be:13:9b:aa:
f8:3e:2c:c0:76:ec:c9:eb:ca:a9:dc:1a:c9:24:67:d8:2a:70:
05:3b:b4:3a:7f:79:16:b2:35:55:7d:c1:53:6e:71:c2:8e:1d:
b9:10:ef:7d:9b:1e:a2:9a:d3:06:ff:78:fc:84:4d:35:e8:17:
dd:f7:4d:48:3c:f8:11:63:81:d6:43:19:72:59:7d:8c:50:0d:
0a:80:c9:ca:40:65:91:92:a7:25:43:e4:0f:f3:ed:91:03:bd:
e1:52:7b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:13:35 2025 by rpki-client