Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/0ddccc5f-ee76-38d0-96bf-08b3ad9bd22f.roa
File: 0ddccc5f-ee76-38d0-96bf-08b3ad9bd22f.roa (raw, json)
Hash identifier: M5KqY3ttuVzt5LzRIlpgiPt95hymzK0b4egKYfpRBuQ=
Subject key identifier: BA:2B:B5:F6:0B:49:91:12:3F:84:4F:CA:13:04:B5:B1:01:99:D9:8C
Certificate issuer: /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial: 010D0C9F432858491AA6C615E3D75F8E68E68880
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/0ddccc5f-ee76-38d0-96bf-08b3ad9bd22f.roa
Signing time: Fri 07 Mar 2025 02:00:39 +0000
ROA not before: Fri 07 Mar 2025 02:00:39 +0000
ROA not after: Thu 05 Jun 2025 01:00:39 +0000
asID: 22925
IP address blocks: 216.185.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1a:a6:c6:15:e3:d7:5f:8e:68:e6:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
Validity
Not Before: Mar 7 02:00:39 2025 GMT
Not After : Jun 5 01:00:39 2025 GMT
Subject: CN=50e95fbd-45ba-4506-b978-55da58ff14ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c8:3a:f5:79:5c:e2:c4:2f:8a:49:89:b0:65:
7b:39:16:69:d0:92:d5:18:fe:b6:cb:9b:15:b6:b1:
7d:50:7b:73:df:f0:ba:3c:ab:7e:f9:66:91:49:53:
0a:30:a8:9b:21:1a:18:d5:73:92:de:9e:2c:26:a2:
c6:65:bc:33:7a:45:96:68:3a:15:12:ba:e5:9b:0e:
d7:b4:95:47:f0:a8:96:95:32:79:59:0d:b3:73:13:
75:8b:e5:d7:40:da:80:b1:8d:84:ed:fc:17:9e:ee:
78:dd:e7:84:7e:14:75:b8:a1:4e:54:50:e8:98:16:
8e:80:dd:50:01:d3:f6:49:df:aa:36:7a:92:df:82:
e4:b0:42:28:54:d0:d0:c7:a3:34:8c:51:80:43:37:
6a:4f:dd:ff:4e:17:7f:6c:e9:34:84:93:16:c6:19:
38:31:59:41:aa:ac:89:9b:29:8f:56:5e:f7:a1:ff:
47:7f:2f:61:cb:6c:c0:7b:13:7c:c1:25:6e:2d:57:
23:22:1f:7e:e7:ee:b4:af:6b:3f:56:98:52:6f:a5:
27:0f:af:aa:f7:4d:e8:76:fa:07:10:0b:29:44:2f:
17:39:5f:9e:f4:69:57:53:91:ea:89:25:28:cd:9b:
4e:73:24:73:8a:35:c1:d9:15:39:ef:05:60:3e:e6:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2B:B5:F6:0B:49:91:12:3F:84:4F:CA:13:04:B5:B1:01:99:D9:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/0ddccc5f-ee76-38d0-96bf-08b3ad9bd22f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
X509v3 Authority Key Identifier:
keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
216.185.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:d3:be:74:3d:87:5c:9d:00:5a:2e:a5:16:7e:bd:73:95:43:
4d:5e:9b:f1:c1:b4:88:9f:99:45:08:73:ac:1b:fc:39:7f:b9:
82:1e:bf:2d:f2:e8:f9:9a:91:4f:28:56:ca:eb:81:94:d6:c0:
e6:1f:1b:ca:85:c1:6b:65:3e:05:cd:d9:6b:eb:85:da:d0:5c:
7c:cf:9b:82:93:a6:4e:8b:df:78:e6:0c:cd:fa:e0:9c:fa:d2:
e0:fb:2f:f5:87:85:1a:15:dd:65:09:fc:83:56:7f:71:17:3a:
a6:69:77:00:bd:ee:0b:10:8d:02:df:7e:5a:07:cd:1c:56:93:
2d:52:3a:e4:14:4b:9f:70:09:4c:65:d3:72:f1:25:65:c5:6a:
6c:6f:49:cb:21:9d:e0:75:63:c7:12:44:26:49:4e:97:5b:13:
ce:84:ba:cf:59:c6:34:ad:dc:c2:f3:85:5e:f8:37:fe:2a:3c:
3b:f6:fc:87:63:70:29:5b:f9:86:05:99:af:06:30:58:8b:ba:
8e:d3:d1:d3:92:b2:58:2d:a8:ad:1d:5f:a5:1d:db:f6:d3:2e:
05:a5:eb:3f:f8:58:1d:d7:9f:d7:90:7c:9e:d1:b4:1a:02:33:
af:30:8a:31:21:37:e0:e1:16:2d:47:ea:b8:79:45:3b:69:fd:
dc:5f:de:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:46:05 2025 by rpki-client