Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/6a6c5a7c-3111-3b5f-88ad-84472b55f7af.roa
File: 6a6c5a7c-3111-3b5f-88ad-84472b55f7af.roa (raw, json)
Hash identifier: Nq24Yo1Cink9TLk+8UUzT+eCVRLdqRVN10lh7zbz2lE=
Subject key identifier: 7A:0C:A3:85:4D:59:2E:70:25:72:E7:87:3A:C2:07:BD:A1:4F:AA:E8
Certificate issuer: /CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Certificate serial: 010D0C9F4328584937D93AC4FBD765C219D6AD00
Authority key identifier: 83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/6a6c5a7c-3111-3b5f-88ad-84472b55f7af.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 30045
IP address blocks: 192.219.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:3a:c4:fb:d7:65:c2:19:d6:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac1a56b-ea33-4bd6-9d3e-00896a91db6b
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=94779e3d-b78e-4f1d-a0fe-e86a440044e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2c:11:14:6a:ee:cc:ec:5e:e1:98:a1:51:16:
f9:12:37:01:fc:d4:81:26:6f:22:f0:12:a3:5c:c9:
2d:6b:cc:76:17:7d:a1:cf:ab:e9:1c:21:9f:2d:cb:
2c:65:50:9f:28:4c:0a:a2:07:c4:e2:12:c6:cc:7f:
b4:34:e8:cf:49:81:8f:b5:74:11:31:36:05:65:0c:
86:e5:75:42:4b:80:6c:2b:f1:36:88:f9:63:83:03:
95:fc:b8:be:d3:0b:55:35:92:0f:34:63:8c:56:de:
9a:bc:84:1b:86:92:23:7b:f3:f2:62:77:e3:f9:53:
4d:3c:bf:b5:91:70:fe:3c:28:9c:ab:e2:56:d1:e5:
e1:33:7f:43:8c:ed:0d:81:b3:55:7f:cb:94:9f:e0:
e6:c0:35:d3:68:c5:52:d5:f5:85:cc:f8:e7:f4:c3:
1a:54:b9:ac:29:34:d8:cb:34:1a:e0:02:02:ea:e3:
08:92:ec:e8:6e:f5:dc:ec:dd:81:c1:4e:a4:82:ac:
00:9e:ba:40:45:5d:4f:c2:8b:44:0a:f9:0c:c9:a3:
77:23:4b:d1:80:d1:d7:c6:ed:9e:72:46:22:c7:f1:
0d:4e:8b:9f:7b:c1:a2:b0:52:7e:08:60:41:c0:07:
49:a1:15:b4:da:0e:5c:f4:2a:6f:81:c8:7a:54:b0:
d4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0C:A3:85:4D:59:2E:70:25:72:E7:87:3A:C2:07:BD:A1:4F:AA:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/6a6c5a7c-3111-3b5f-88ad-84472b55f7af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.crl
X509v3 Authority Key Identifier:
keyid:83:75:3A:63:28:AB:E2:8F:7D:C0:A7:3B:4C:3A:33:CA:63:07:13:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ac1a56b-ea33-4bd6-9d3e-00896a91db6b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.219.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:61:3f:b3:2f:13:b6:31:12:84:71:69:3a:7d:9c:8a:e1:b9:
33:90:de:4b:45:a5:5b:67:03:9d:eb:9c:fa:6a:7e:68:91:a3:
53:2c:b3:90:a7:80:13:27:ad:c0:ac:8e:e3:f9:7b:fb:29:05:
60:af:3b:82:af:36:36:94:89:74:69:d7:90:ba:75:f1:9a:5c:
e7:2e:39:52:b2:07:0f:ce:0b:df:50:a0:a4:23:04:73:1b:df:
87:db:a8:a9:b4:29:7c:ed:16:8b:a9:12:5e:0b:75:c2:8e:06:
8f:e1:92:4c:37:5d:f5:cd:b7:5f:a9:33:11:be:b9:f3:ed:5b:
a6:7c:79:b5:c3:a7:bf:7b:af:84:53:eb:77:42:c4:19:f7:ad:
0e:e5:ed:9c:4e:f6:16:51:12:db:56:70:0f:13:52:b7:ee:4e:
39:46:e4:5b:c3:23:ab:2f:00:23:1d:b6:f8:bb:14:8c:8d:6f:
2b:a4:2b:0b:5c:53:92:e4:97:72:65:7d:17:2d:6e:07:8e:ba:
77:cf:e4:4a:d4:4c:ba:87:d7:b9:56:81:35:a2:4e:1c:2d:a5:
97:56:63:8a:1d:25:14:7f:59:16:e2:29:39:65:d1:6b:4e:ba:
62:4c:e4:ba:15:b3:8b:a3:c1:78:c7:ac:b1:be:f3:72:07:a0:
49:e8:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:21 2025 by rpki-client