Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa
File: c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa (raw, json)
Hash identifier: 8QZcXVB/7MytfBkfZzgAQBgAkMk9FqD14VyD770vzKM=
Subject key identifier: A2:74:2C:C8:35:27:FE:86:D3:A0:AC:0F:52:E6:F9:31:3A:B7:EC:4E
Certificate issuer: /CN=5f2a9189-c125-4e00-9c8a-343805ff6fb9
Certificate serial: 010D0C9F43285848C84B9CD8C34B586707073100
Authority key identifier: 73:8B:FB:18:EB:D4:32:31:82:1C:A3:D7:32:18:DF:21:F1:44:1D:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 31782
IP address blocks: 216.249.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:9c:d8:c3:4b:58:67:07:07:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2a9189-c125-4e00-9c8a-343805ff6fb9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=8653b561-f455-4fd9-9df9-ab8d4de5d485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:bc:72:ac:8f:6a:09:29:24:6a:8b:46:2b:
c3:73:b2:84:8c:9e:90:42:eb:d9:0a:81:08:53:5a:
8e:23:c5:46:af:82:3a:9f:3d:f1:db:4e:c4:ea:09:
f7:f6:db:13:29:f5:62:35:23:68:97:bd:4d:2c:dd:
08:79:18:e0:4a:2d:96:cc:c3:b3:70:83:e4:d7:00:
fe:3f:aa:6c:12:1e:ca:5d:83:7e:6f:f7:f7:63:22:
89:3f:5b:07:67:d6:5b:97:c7:b2:53:e5:0c:12:be:
1b:97:41:20:75:3e:bb:2c:62:18:76:37:94:92:e3:
fd:24:2e:d9:d3:ca:2e:f2:65:a5:eb:62:8e:8b:5a:
cf:fe:f1:d6:46:52:cb:9a:e7:30:3e:19:a0:e2:98:
69:3a:fb:9d:78:09:7f:a0:a4:d8:1f:cf:23:d5:d0:
f5:4d:a5:25:67:27:87:b5:24:db:e1:18:21:fe:86:
63:be:90:92:92:04:9a:fb:56:35:b2:5d:a8:0c:cc:
8d:8f:97:7f:47:f0:5d:bd:12:c6:ab:cc:03:6d:c1:
0c:49:c8:ab:e4:8e:ef:3e:2e:d6:ce:89:28:1a:34:
de:c3:67:63:ee:c3:05:87:5e:d9:31:85:4f:e5:03:
bf:38:df:28:a9:16:5c:29:86:55:58:8e:78:cc:e6:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:2C:C8:35:27:FE:86:D3:A0:AC:0F:52:E6:F9:31:3A:B7:EC:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.crl
X509v3 Authority Key Identifier:
keyid:73:8B:FB:18:EB:D4:32:31:82:1C:A3:D7:32:18:DF:21:F1:44:1D:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:1e:af:ea:aa:c3:ba:ad:0b:a0:a9:3b:b3:a5:cf:f2:0c:bb:
1f:6b:a1:8b:19:dc:53:b2:94:77:6e:f8:6f:ec:1d:9d:bc:ca:
61:de:3e:c1:e2:23:df:b6:32:8b:6c:42:a1:0c:23:2b:45:5b:
00:a4:20:74:d2:60:73:30:c4:92:8f:42:f5:5e:8d:28:48:3a:
bc:23:dd:c3:04:b3:79:b7:a6:9c:d9:a4:8d:95:91:9f:d3:49:
26:6f:48:30:2d:8a:2c:c7:3b:1d:f8:57:1e:37:90:ee:1c:17:
8c:99:91:46:2c:95:af:53:f6:14:19:80:a1:71:32:db:a6:96:
9f:ec:a3:f5:5a:e2:56:a1:35:2f:22:fd:f9:9c:e8:b8:90:00:
21:d1:1e:80:f4:47:70:02:db:6c:83:01:0a:a9:0f:5a:65:c4:
a4:96:d9:c5:7d:cc:61:1c:b1:ee:b2:7c:d6:14:22:a1:b4:22:
7b:ec:c7:84:b3:88:4d:91:6a:2c:7b:af:79:c7:52:ce:4c:02:
df:85:8f:e2:e6:39:4d:7e:b2:c1:63:8a:b6:12:d7:fb:55:84:
ca:a3:fd:75:6d:89:f3:63:e7:06:c0:75:ac:92:41:78:3b:ad:
15:08:61:e3:47:29:dc:bd:30:49:bc:7e:1b:62:7b:fa:9b:e4:
ca:67:dd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:38 2025 by rpki-client