Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4b01834-8b58-3933-9837-0bd7809c602d.roa
File: e4b01834-8b58-3933-9837-0bd7809c602d.roa (raw, json)
Hash identifier: QqUAy8dD4/3Jt6rHegvB0eerOXaGipvUgYjfh0DyKg0=
Subject key identifier: E3:3E:DD:F3:87:BC:E9:5F:41:F8:9D:3D:CC:5F:0D:8D:54:84:88:6F
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F43285848BBBB77D74BF5B1EACA500C40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4b01834-8b58-3933-9837-0bd7809c602d.roa
Signing time: Sat 01 Feb 2025 02:00:39 +0000
ROA not before: Sat 01 Feb 2025 02:00:39 +0000
ROA not after: Fri 02 May 2025 01:00:39 +0000
asID: 852
IP address blocks: 172.218.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bb:bb:77:d7:4b:f5:b1:ea:ca:50:0c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Feb 1 02:00:39 2025 GMT
Not After : May 2 01:00:39 2025 GMT
Subject: CN=30bfdc91-37ac-44a2-b9e4-f5c83c9e19c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:d8:b6:82:80:c6:f8:92:07:c0:29:e9:53:
d7:c6:bc:56:16:83:34:06:48:a1:99:db:52:fd:b0:
48:d5:be:ea:eb:7e:84:4a:67:68:c4:d4:00:ee:31:
a6:bd:20:ea:25:40:35:41:5a:c8:f6:3b:88:f3:10:
d2:f9:ae:64:ba:1a:3b:ed:9f:05:8b:ee:d2:19:7a:
e8:e0:11:7b:47:35:3b:3b:f1:15:95:de:89:88:3d:
d4:34:6d:66:ac:3e:f6:3b:9f:1c:7a:26:e9:e1:d5:
9f:2f:77:f0:20:5f:86:da:e9:c6:70:db:0d:7f:a0:
4c:e4:7b:66:05:fd:69:c1:30:40:c4:8c:a3:1e:70:
62:ea:81:68:b6:03:ef:5b:7f:ab:72:42:45:df:04:
ba:36:c1:28:a1:dc:f9:c1:dc:a1:0e:26:53:3f:7b:
9e:5c:1d:9a:4e:07:c7:ee:78:7d:e1:d3:e7:86:c3:
6f:ec:e8:38:50:9d:19:e0:11:02:65:6a:5f:ce:1d:
d8:40:bd:79:f1:76:47:ae:8d:aa:7c:f4:e2:ad:96:
d4:65:29:a9:45:35:29:da:76:a1:b3:d1:e6:bc:82:
c5:61:1f:9a:30:9a:4a:4e:87:3e:d5:e5:6d:1b:cf:
8a:b2:4c:77:57:30:ee:f9:ab:82:c1:d3:12:36:c5:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3E:DD:F3:87:BC:E9:5F:41:F8:9D:3D:CC:5F:0D:8D:54:84:88:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4b01834-8b58-3933-9837-0bd7809c602d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
172.218.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:f5:4e:18:83:34:95:87:57:f9:b0:a1:1f:3d:48:cb:d7:29:
1c:dd:90:9d:25:54:d3:7a:78:16:b6:7e:58:f8:9f:63:f2:c8:
12:69:7c:07:a9:24:9d:1f:7a:8a:a8:e9:54:97:3b:22:96:60:
49:f9:35:70:23:53:19:1e:72:68:da:c9:b8:71:dc:7c:5a:f6:
50:c9:eb:c9:c8:20:a7:b9:34:6d:f4:24:99:5d:f5:a2:44:b1:
d0:ee:48:f4:40:9b:38:ac:bb:8e:bc:15:f7:96:87:85:3a:0f:
89:27:80:50:41:c8:ca:58:d7:19:36:48:78:db:c9:f4:f2:c6:
fa:99:e7:db:a2:8a:60:39:59:c3:8e:fd:fe:e1:a0:95:78:6d:
99:d0:d2:62:e2:2b:2b:67:b1:2e:be:73:3c:f5:0a:76:74:fa:
d8:9b:ce:2b:42:ee:1e:12:2c:59:bc:78:96:34:d2:b5:96:27:
a0:dc:8b:65:11:aa:14:2b:e6:2c:77:7d:1b:5b:8d:cc:68:3d:
a9:7d:89:9c:4b:58:c8:4a:f5:3a:29:1c:72:40:a6:e0:a1:e8:
7b:0c:c9:b3:81:4c:98:f3:cb:54:f6:82:0a:8a:2e:1c:4c:90:
fe:16:72:58:49:3a:1b:3b:75:b2:f0:e4:77:09:e6:09:f0:ff:
34:56:2f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:50 2025 by rpki-client