Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d944faf2-80dd-3d57-983e-f715f7ef8b08.roa
File: d944faf2-80dd-3d57-983e-f715f7ef8b08.roa (raw, json)
Hash identifier: bo/G6/ZV3WxNrdhTG++o/3XS1AKFZ2sRrjBgdBbRYv8=
Subject key identifier: A9:0D:B2:E7:1A:03:A7:6B:38:45:A1:9E:20:AA:4C:2F:DE:11:43:B9
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285849071BE8913E47AB8C6D3A6C80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d944faf2-80dd-3d57-983e-f715f7ef8b08.roa
Signing time: Fri 28 Feb 2025 02:00:39 +0000
ROA not before: Fri 28 Feb 2025 02:00:39 +0000
ROA not after: Thu 29 May 2025 01:00:39 +0000
asID: 395133
IP address blocks: 216.235.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:07:1b:e8:91:3e:47:ab:8c:6d:3a:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 28 02:00:39 2025 GMT
Not After : May 29 01:00:39 2025 GMT
Subject: CN=0d33574a-8e48-4f50-a5d2-eb9172461498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:a7:dd:88:06:c6:4f:7d:72:95:9e:25:09:
04:dd:d3:94:a4:23:34:f5:90:4e:73:19:8d:1f:93:
eb:0e:79:54:6b:23:f5:25:c4:78:67:b7:56:12:bd:
2f:2e:ba:88:51:a0:a2:60:c1:17:2a:1c:d9:0f:1f:
54:83:b4:f6:8e:07:cd:3b:60:cf:4a:ff:14:f1:c3:
ad:4d:75:ad:7f:19:4a:d1:f6:42:85:2c:7c:92:f2:
d8:26:70:46:ed:d5:71:65:62:6b:46:39:9f:89:72:
8c:de:89:fa:9f:a5:90:86:65:4d:bd:85:be:99:5e:
3d:6e:35:f1:f1:8b:be:8a:9f:7f:90:20:d2:f8:30:
4f:49:17:e3:74:14:34:34:b1:b0:e5:c3:a7:dc:c5:
58:75:6a:89:6e:9f:ad:be:6a:4e:e3:ba:27:7c:31:
3d:f7:35:3e:ce:07:f9:8e:59:1a:6f:46:48:c3:50:
1d:1e:85:a5:25:64:5b:2f:5a:4f:ad:20:7b:89:8d:
37:7a:5f:dc:3d:b8:1d:b4:21:f7:17:5d:21:83:4b:
67:3a:3c:4c:2f:65:28:d3:56:f8:fd:43:db:6c:98:
17:24:92:a8:5c:8a:21:2e:6c:d5:ad:e0:59:08:7d:
47:eb:07:0a:95:c4:9c:1a:a1:68:99:8d:1d:5d:7f:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0D:B2:E7:1A:03:A7:6B:38:45:A1:9E:20:AA:4C:2F:DE:11:43:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d944faf2-80dd-3d57-983e-f715f7ef8b08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
216.235.154.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:e6:cf:2c:3f:7c:bc:8d:99:1b:30:f6:16:a6:c9:d4:45:5f:
43:24:e9:e4:40:8f:64:dd:a7:b7:67:7d:b6:ce:6c:80:96:54:
7d:d9:17:c2:42:75:fa:6b:a9:a4:02:c8:b6:50:0e:9a:5a:be:
dd:b2:eb:57:10:37:4a:c9:e7:68:2f:a8:79:fe:3a:f0:5b:5d:
cb:09:76:3b:be:4b:26:f8:8e:7e:48:95:21:e4:fa:f5:5c:ba:
18:96:ac:fc:ec:32:d7:6e:0b:9e:d9:31:a0:0b:ba:e8:4a:f4:
33:2c:b5:31:20:84:46:47:55:36:85:66:f9:bc:98:26:58:f7:
97:c7:f5:52:53:36:4f:1e:05:dc:66:af:83:da:46:38:13:5a:
f0:4a:16:bc:c1:4b:91:5c:ef:ab:72:de:a1:a5:d2:5b:bb:a8:
44:12:db:4a:38:bd:2a:11:7c:2f:ed:ec:76:33:27:47:cd:aa:
29:0e:2d:31:2e:6e:2a:d9:e6:ab:f5:de:02:cc:09:61:10:3c:
c7:e1:f4:a4:cb:5a:e8:3a:9a:28:7e:48:f1:fe:78:ee:1a:2a:
ac:ba:48:2d:3a:b7:4d:e8:a6:02:df:eb:4d:85:11:f1:1e:01:
c5:17:80:3c:76:e2:96:56:79:14:f6:9d:79:d7:e0:74:d7:3c:
e3:63:20:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:12 2025 by rpki-client