Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b52baed0-56f9-397d-bed0-cb96042493f7.roa
File: b52baed0-56f9-397d-bed0-cb96042493f7.roa (raw, json)
Hash identifier: RUUQ7Me+KZQsyJZ0H3A6T89e8RlN/ysyZUBSanCFapk=
Subject key identifier: C4:81:DF:58:33:89:8F:45:AE:13:3D:10:62:BC:34:C7:FF:2C:86:A2
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848FBF12F33FB17EC0279883B20
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b52baed0-56f9-397d-bed0-cb96042493f7.roa
Signing time: Mon 24 Feb 2025 02:00:38 +0000
ROA not before: Mon 24 Feb 2025 02:00:38 +0000
ROA not after: Sun 25 May 2025 01:00:38 +0000
asID: 4997
IP address blocks: 216.222.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:fb:f1:2f:33:fb:17:ec:02:79:88:3b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 24 02:00:38 2025 GMT
Not After : May 25 01:00:38 2025 GMT
Subject: CN=9e51230b-db47-4d8c-b412-45d5b3b28e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:fd:d7:de:c1:bf:a9:ac:b3:d4:86:b3:85:
30:73:db:0b:ba:33:12:a2:03:85:f9:42:a6:c5:15:
cc:e5:28:e6:a9:1b:1e:7f:9d:d8:e4:96:9d:f0:7b:
3a:1b:ba:76:84:2a:c3:6f:ab:b9:fc:62:c8:8c:6d:
b5:f4:8b:ae:32:9e:e2:a4:1e:e7:77:92:54:43:b1:
d6:e3:54:cd:fc:00:1f:8a:bd:a0:89:a7:e4:8a:d7:
f5:0a:83:39:cf:1d:06:c2:93:df:1d:ed:c9:33:bc:
c1:d9:49:86:fd:c3:b9:de:3a:38:01:2c:1d:89:ec:
88:35:76:c2:08:ea:8d:cb:58:3f:32:64:45:06:72:
c0:cc:36:e1:77:12:4b:fc:ad:ad:21:2e:f3:6c:1f:
b8:61:85:10:db:d6:97:83:79:51:7f:b8:89:67:db:
a3:43:74:1a:ed:cb:1e:60:98:fe:94:df:19:30:fe:
78:91:f4:b0:9a:34:41:ca:a5:e6:52:aa:04:11:df:
b9:5e:3f:10:f5:74:ce:6e:fd:6e:50:4e:12:f5:1b:
1a:fb:a2:72:5e:6f:42:65:5c:1a:41:a8:f7:5d:9b:
e3:45:36:f9:d3:80:97:ba:87:3b:d7:2a:3f:c1:64:
55:b4:9e:33:6c:66:c2:f1:c5:8a:fd:61:f8:40:7b:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:81:DF:58:33:89:8F:45:AE:13:3D:10:62:BC:34:C7:FF:2C:86:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b52baed0-56f9-397d-bed0-cb96042493f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
216.222.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:10:e3:17:f7:7b:1c:12:21:46:1b:b1:df:6c:80:b2:e1:ff:
7f:91:e2:8f:fc:9d:fa:3a:79:8b:7a:86:c0:0a:44:02:43:d2:
c7:0f:bf:63:b0:a5:a3:4d:7e:72:19:ea:3e:fb:6f:5b:a5:c1:
9f:bc:b4:fb:10:95:f5:97:be:59:7c:f0:96:0b:c1:c5:87:d1:
a8:81:ae:e2:4a:f7:8e:78:8d:ff:45:a5:76:b9:0f:e8:44:d5:
64:22:04:01:54:1f:8f:d2:91:9d:82:a1:88:99:05:20:54:e0:
60:93:a0:0d:50:55:22:b4:09:cf:4d:de:ec:cc:94:e3:fe:f2:
7e:77:2f:33:19:79:79:d7:3f:34:90:f1:0e:e5:22:6f:35:e3:
f1:64:3e:8a:fb:da:df:4c:43:40:10:c6:36:33:e1:e4:4d:b6:
91:43:34:96:77:62:fb:ad:b3:43:01:6e:c9:c3:c9:c1:ea:12:
3f:69:e2:df:e1:a2:24:fd:94:85:b6:0d:25:16:be:1e:41:e1:
14:4b:3d:77:89:be:34:4a:ff:ef:11:bd:d4:02:0c:cf:7e:b2:
36:15:04:fa:75:46:3d:46:ba:4a:9e:2e:12:7d:30:62:0c:91:
2c:55:c2:6a:c6:df:f9:bd:26:38:b3:d5:2e:17:aa:bb:bc:ff:
65:5c:b0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:08:31 2025 by rpki-client