Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa
File: 9c46e998-1908-3d4b-a119-3d998db7b89b.roa (raw, json)
Hash identifier: TPLRN8nJcZBk5geNCBUmTi5CI8W2VJnqyVszeaSjCLc=
Subject key identifier: DC:27:58:5E:CF:C2:6E:82:5E:7F:4A:0F:92:2B:61:FC:5E:02:1D:12
Certificate issuer: /CN=25393f82-9e95-47aa-9897-0027f6c5e3d4
Certificate serial: 010D0C9F43285848A565FA19F1233731CEBFDF00
Authority key identifier: 38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa
Signing time: Fri 24 Jan 2025 02:00:39 +0000
ROA not before: Fri 24 Jan 2025 02:00:39 +0000
ROA not after: Thu 24 Apr 2025 01:00:39 +0000
asID: 399673
IP address blocks: 216.25.96.0/20 maxlen: 24
216.147.64.0/19 maxlen: 24
2606:5640::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a5:65:fa:19:f1:23:37:31:ce:bf:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25393f82-9e95-47aa-9897-0027f6c5e3d4
Validity
Not Before: Jan 24 02:00:39 2025 GMT
Not After : Apr 24 01:00:39 2025 GMT
Subject: CN=339c68a5-85a7-4d93-aa49-5e601212a954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:76:62:16:24:2f:85:08:8e:1e:b5:cc:62:
de:46:ff:ce:7c:5a:2d:3a:81:cd:c5:f5:94:3c:72:
d1:e3:62:fe:36:02:e2:74:94:85:98:b9:3a:f3:2e:
87:d5:6f:c7:0a:8d:75:ba:0d:62:d4:c0:0d:c7:54:
b0:bb:94:26:f5:64:d6:95:ed:4f:c4:03:64:1f:d4:
12:88:15:46:5d:1c:b7:bb:7b:d5:92:6f:e6:58:90:
20:b0:af:16:9b:f8:55:7e:f3:4a:d0:c6:49:a1:ae:
70:46:8e:2a:c9:8d:c2:8d:18:af:44:c6:ee:cc:5e:
7d:a4:33:0b:ea:c4:c6:02:dd:8c:cb:ad:c2:65:f8:
8d:5c:35:b5:68:6d:22:e3:b3:0b:b4:54:9d:dd:a3:
67:3c:70:17:78:ee:c3:7c:9e:45:48:c1:09:6a:41:
54:e6:fb:d3:17:3d:4a:f0:1e:99:fb:60:f2:be:86:
54:02:59:26:7f:7f:4f:2e:c4:a2:c6:35:4b:e4:a4:
67:6f:fc:c9:50:16:fb:a1:d7:71:86:15:94:32:3e:
f4:51:e4:86:e8:ab:8a:d9:e6:56:fd:0c:3a:30:2b:
07:d3:b3:6c:89:e4:41:27:2d:9a:32:b3:28:16:35:
76:04:42:af:62:d0:d2:a5:01:22:6f:d3:e7:35:89:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:27:58:5E:CF:C2:6E:82:5E:7F:4A:0F:92:2B:61:FC:5E:02:1D:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/9c46e998-1908-3d4b-a119-3d998db7b89b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4/25393f82-9e95-47aa-9897-0027f6c5e3d4.crl
X509v3 Authority Key Identifier:
keyid:38:08:2D:20:D6:AF:79:AA:18:82:BF:65:24:5C:0D:75:E7:C9:86:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25393f82-9e95-47aa-9897-0027f6c5e3d4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.25.96.0/20
216.147.64.0/19
IPv6:
2606:5640::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:e5:0d:11:77:cf:03:8e:c7:40:a5:0d:95:7b:9b:2d:1a:e5:
8d:1e:43:26:84:38:c5:af:b9:33:0c:41:ea:7b:38:48:71:e0:
88:4b:7e:6f:81:d8:6e:f1:41:3e:05:bd:2d:ab:7f:a2:70:7b:
3e:eb:4a:09:31:a9:13:fb:d7:a0:0d:f9:a3:f8:2f:ff:59:f3:
33:f4:e4:45:92:ef:62:d7:41:31:54:35:0f:af:8c:30:2e:ed:
f3:83:46:75:a6:98:a9:4c:9a:53:27:cf:67:09:7a:3c:63:06:
78:a3:c4:ee:a8:28:a8:f0:5d:46:19:98:d5:1d:d2:61:61:1a:
60:2f:91:8b:ed:65:d7:98:46:44:d3:3b:4e:71:7b:04:14:52:
cb:78:3a:92:d5:46:63:cc:69:3d:e4:ae:1e:5f:04:fb:c2:0e:
5e:b8:4a:f9:ba:ea:ec:33:b0:14:e9:46:ca:1d:c4:d4:8c:46:
7d:41:b7:01:11:cc:d1:00:f4:3e:d8:8e:95:8b:da:9a:73:13:
4b:fd:c6:22:8f:72:48:2e:4c:a2:ea:25:f7:1c:91:f0:1d:2f:
26:60:20:e2:6c:0e:c3:d2:9e:02:f3:d4:50:c1:6c:62:19:c9:
d0:81:f5:a3:8a:67:bc:a4:6a:6f:4f:3e:3f:d6:46:26:65:e4:
9d:f1:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:24 2025 by rpki-client