Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8d7186ed-a699-3d81-ad27-be6b15bea539.roa
File: 8d7186ed-a699-3d81-ad27-be6b15bea539.roa (raw, json)
Hash identifier: CyKl3w0jliOYpcYAKT91d+F7ppeV3J3cGsTOS+bvI4E=
Subject key identifier: E2:96:8C:8A:54:78:B4:9D:CB:53:B8:8E:94:E1:A3:64:51:C1:C5:5A
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F43285849538363646A8B86BBFEB15380
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8d7186ed-a699-3d81-ad27-be6b15bea539.roa
Signing time: Thu 27 Mar 2025 10:50:39 +0000
ROA not before: Thu 27 Mar 2025 10:50:39 +0000
ROA not after: Wed 25 Jun 2025 10:50:39 +0000
asID: 401585
IP address blocks: 23.249.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:83:63:64:6a:8b:86:bb:fe:b1:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Mar 27 10:50:39 2025 GMT
Not After : Jun 25 10:50:39 2025 GMT
Subject: CN=dca4af30-4a5c-443f-b818-00cd71f337cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:f7:03:f8:73:2f:0b:3c:cb:87:d8:4f:a3:
56:61:a3:19:26:28:ff:c4:b1:90:da:fa:05:2a:50:
36:9d:15:69:a5:7a:c7:b9:c2:ae:45:bf:37:b0:aa:
6a:2e:39:76:97:a3:c2:a9:9f:a6:7e:cd:d3:3f:76:
b7:7a:35:1a:f7:dc:9a:28:bd:d9:bc:4f:e1:ac:76:
34:77:af:0f:da:ca:3a:65:d1:3b:6e:41:3e:df:aa:
90:ad:97:c7:03:80:9f:cb:d3:3a:3f:f3:07:ae:36:
05:4c:00:43:bf:2e:a9:06:79:f0:71:ef:56:1f:2c:
cf:b2:14:df:3b:71:a4:0c:13:5d:4a:24:7a:9c:fe:
27:78:05:0c:df:11:14:9d:7a:62:b3:e1:ec:ce:98:
aa:c9:bf:af:cc:bd:6e:06:9b:04:45:e5:9f:7e:ea:
11:d5:6c:3e:b4:10:01:6b:5d:59:43:b6:b8:46:52:
94:35:84:ff:0a:f5:e1:d0:f0:85:df:54:15:44:b2:
4e:59:d9:5f:0b:bf:44:94:ec:f6:bf:b7:42:47:8d:
d8:bb:a7:b7:4f:87:04:bc:7a:47:6c:49:95:be:4d:
7c:d6:f4:fa:ca:08:d6:ee:99:61:8a:f6:7f:f4:b9:
26:50:71:0a:eb:f1:d9:be:1d:bb:60:f1:2c:45:c4:
32:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:96:8C:8A:54:78:B4:9D:CB:53:B8:8E:94:E1:A3:64:51:C1:C5:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/8d7186ed-a699-3d81-ad27-be6b15bea539.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
23.249.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:ba:e3:14:c6:9c:69:d5:a6:e6:5d:17:55:a7:a1:13:a2:8d:
88:bf:5a:26:55:40:3f:f3:e5:53:d0:4f:d1:b5:1f:64:6a:33:
f7:30:75:21:ea:df:c0:81:60:e4:2b:a2:2c:83:49:17:10:1b:
a5:ab:9a:1d:ec:4d:dd:54:cf:46:9c:88:38:dc:56:26:b5:fd:
53:5c:53:6f:d4:99:60:3c:6e:aa:04:00:fb:51:a8:12:36:d4:
4b:5d:25:ff:0c:a0:80:d2:0b:f6:12:11:e5:2d:11:68:f9:77:
54:02:f1:3f:9c:aa:5f:96:32:05:6f:01:34:56:10:e4:23:8b:
bc:da:4b:eb:25:d9:83:f6:37:7c:f3:59:99:6a:7d:b5:3d:43:
22:71:c3:75:9a:5f:52:81:13:73:a8:72:7a:f7:55:17:9a:7a:
8d:10:c4:58:b0:cc:c1:f6:0e:35:34:41:18:20:75:dd:a1:93:
6d:f5:c0:4e:68:d5:e0:e0:07:7a:2f:36:e2:b4:c2:16:20:c3:
3e:31:42:a8:8c:27:c2:45:bb:72:dc:19:e0:ac:3f:75:aa:22:
e0:17:c2:d6:8e:4c:09:86:e1:b8:41:d7:f5:fb:6b:c5:ae:34:
08:b4:d5:70:b1:60:af:84:09:21:f6:41:9a:7c:16:14:57:34:
6f:56:a4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:50 2025 by rpki-client