Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/2e55b8d2-5f60-3bf5-b9f3-e5c2bfddeb04.roa
File: 2e55b8d2-5f60-3bf5-b9f3-e5c2bfddeb04.roa (raw, json)
Hash identifier: mmaFN9dFlDyyeJdOuQyr9ZHvHGs+Pxwa53qDdlOQV+U=
Subject key identifier: 31:C5:96:56:3E:37:FE:5E:02:B5:81:8A:DC:05:19:81:50:01:85:E0
Certificate issuer: /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial: 010D0C9F432858491D7182861D13A048175AC680
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/2e55b8d2-5f60-3bf5-b9f3-e5c2bfddeb04.roa
Signing time: Sat 08 Mar 2025 02:00:39 +0000
ROA not before: Sat 08 Mar 2025 02:00:39 +0000
ROA not after: Fri 06 Jun 2025 01:00:39 +0000
asID: 19107
IP address blocks: 216.234.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1d:71:82:86:1d:13:a0:48:17:5a:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Validity
Not Before: Mar 8 02:00:39 2025 GMT
Not After : Jun 6 01:00:39 2025 GMT
Subject: CN=f10036fe-2869-4249-bedd-6da1e507b52f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:14:f3:0f:f0:b2:12:77:74:9b:62:a8:0a:
0f:de:2f:0a:c6:77:e7:c7:57:ae:92:a0:92:30:8c:
51:bf:09:0b:11:3e:a2:94:80:a2:50:9e:9e:34:d4:
32:ae:f3:f4:00:44:d0:11:22:b9:80:20:12:41:c5:
b1:ab:d8:d9:1c:cd:2f:03:29:e6:1e:b7:f2:9b:f7:
1f:a1:bd:c9:3e:d0:a8:92:91:58:94:42:a4:44:94:
76:6e:e4:60:de:bd:f6:26:c2:8e:80:af:06:d2:47:
ee:ac:2e:40:be:47:aa:0a:b3:f9:ab:9c:3d:8c:0a:
1d:c9:18:16:f2:1d:11:e8:5e:c2:9f:72:24:8e:29:
c0:3d:d0:5e:87:8d:27:6f:a4:a2:b8:3c:15:8f:7d:
1e:31:ad:f3:75:31:05:92:70:1a:e2:9f:bd:c5:15:
17:1f:f2:21:e2:22:e7:e2:98:d2:13:8f:8d:96:a9:
03:11:f3:cc:b3:eb:39:7d:3e:a6:af:52:9e:7f:30:
74:28:f9:5b:70:9c:3c:f5:64:02:93:13:de:ee:de:
63:9d:0a:33:63:29:61:70:92:2e:6b:49:59:2d:bc:
71:30:72:1d:58:17:32:31:5e:cc:ca:7c:56:12:71:
75:06:5d:63:ee:30:89:83:f5:12:e8:21:bc:f5:6e:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C5:96:56:3E:37:FE:5E:02:B5:81:8A:DC:05:19:81:50:01:85:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/2e55b8d2-5f60-3bf5-b9f3-e5c2bfddeb04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
X509v3 Authority Key Identifier:
keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
sbgp-ipAddrBlock: critical
IPv4:
216.234.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:2f:46:49:d4:71:6c:2a:d5:13:96:4f:7b:45:ff:ef:9b:52:
13:0c:4c:5f:9b:ed:92:5c:3e:af:b8:a7:d2:d0:0d:19:99:d8:
3f:02:1a:29:00:73:da:5c:12:15:b1:de:5a:ed:6f:1c:99:cd:
da:61:3b:16:da:c0:51:f1:bb:0f:be:79:d5:a6:49:f1:5d:9a:
b9:0d:95:12:13:77:11:8b:8b:c4:b2:6b:1a:4d:8b:b4:30:c8:
cc:65:4d:09:71:c0:60:75:18:a5:90:09:57:61:ff:5d:aa:a7:
d2:ab:a3:8e:77:ff:b2:cf:c9:01:d7:f5:e3:d8:75:04:ed:a9:
fe:ca:02:73:8f:dd:00:7c:e6:84:94:b9:ae:dc:53:e4:39:9f:
bc:d9:63:e1:93:e1:8c:7d:34:d8:65:1c:7d:fc:f6:b7:68:16:
72:0f:7c:17:45:82:6c:a3:87:2a:40:03:95:3b:d1:52:29:5f:
e4:7f:3e:40:0d:53:96:51:56:7e:9f:db:29:88:92:27:48:31:
40:e6:b0:d1:dd:67:ad:f8:c1:f7:df:46:2b:19:9f:97:18:4b:
18:2d:da:92:59:39:02:ec:ba:0b:15:b6:79:13:59:2a:09:c0:
57:cf:7e:83:b3:ba:a4:63:5e:82:c4:9f:14:49:5c:0f:87:e5:
e7:7f:dc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:01:05 2025 by rpki-client