Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b26796fe-cb3a-30b0-bb7d-8c002c3064a4.roa
File: b26796fe-cb3a-30b0-bb7d-8c002c3064a4.roa (raw, json)
Hash identifier: NXN4YCpiE1fXh5CaMjpm02NFvXPMERKQ2Zdqa0DVWRk=
Subject key identifier: C0:50:62:31:D1:7C:AE:92:98:6A:70:43:C6:B8:6F:95:4A:36:D5:DB
Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial: 010D0C9F43285848CB61536D29CD4DE19206E580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b26796fe-cb3a-30b0-bb7d-8c002c3064a4.roa
Signing time: Thu 06 Feb 2025 16:32:05 +0000
ROA not before: Thu 06 Feb 2025 16:32:05 +0000
ROA not after: Wed 07 May 2025 15:32:05 +0000
asID: 834
IP address blocks: 216.122.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cb:61:53:6d:29:cd:4d:e1:92:06:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
Validity
Not Before: Feb 6 16:32:05 2025 GMT
Not After : May 7 15:32:05 2025 GMT
Subject: CN=d27fe578-06c1-407d-a4de-2b26235c5525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:fd:e6:e6:34:36:7a:e2:d0:de:98:86:12:
24:6d:67:a1:a8:e3:bf:9e:2e:cd:3d:bf:6c:9a:68:
44:df:a0:fa:11:5f:19:be:81:a3:e4:fc:d1:9c:30:
a4:cd:c9:f3:76:47:4e:93:7b:e4:1d:18:bf:a9:01:
02:0f:db:d6:48:17:5c:9b:03:69:45:bb:c7:56:97:
f8:72:37:a3:af:32:ce:a1:ed:85:93:e2:4a:83:ff:
e6:da:f3:12:69:11:23:7a:cc:6a:3b:54:d5:58:78:
31:d7:08:6b:b5:c6:19:d0:e6:8c:06:04:f7:56:84:
38:70:ce:3c:6b:29:d6:9b:fe:4e:0a:1f:bb:4b:63:
0b:b8:27:f2:19:b5:7d:f5:2c:07:ae:80:56:e6:1d:
5d:e0:18:b1:c9:c7:77:e5:10:04:81:85:01:af:66:
61:d6:9c:f1:64:78:22:7d:21:57:fa:0c:05:4a:af:
6a:e6:7a:cf:1f:58:c5:64:91:e3:7d:94:9e:bf:aa:
ee:54:7d:94:b6:a0:f6:ca:7b:93:b7:bb:82:c7:7a:
28:25:1e:69:03:4b:92:b1:eb:31:45:36:21:c6:0b:
22:40:c6:ac:64:17:39:1b:74:8b:18:71:26:cf:3d:
8f:6d:cc:64:bd:8c:a1:3b:76:e6:b3:62:f8:ec:79:
10:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:50:62:31:D1:7C:AE:92:98:6A:70:43:C6:B8:6F:95:4A:36:D5:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b26796fe-cb3a-30b0-bb7d-8c002c3064a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
X509v3 Authority Key Identifier:
keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
sbgp-ipAddrBlock: critical
IPv4:
216.122.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:a6:22:f8:78:a5:c8:a8:3f:cf:3a:9f:85:08:f1:5c:e5:2a:
53:f9:07:c4:71:8c:3e:c2:6f:3a:02:12:08:a2:e8:58:92:31:
8d:b7:3e:58:a5:bb:53:ce:49:2c:a6:f6:62:28:c0:b9:1f:01:
43:d5:85:00:f6:36:dd:3b:1c:19:a7:75:18:6c:18:39:ea:cc:
44:52:51:da:07:fc:2d:b9:4f:e0:80:a5:46:f5:9f:dd:f3:c4:
e8:63:63:ab:b9:5e:46:e8:b1:71:4e:b0:19:24:9f:7e:ff:2e:
13:67:3f:8e:4f:6e:0c:1a:25:a4:7c:67:fd:2e:d7:4c:b0:57:
13:c0:6c:38:46:a0:92:e1:d6:79:e1:66:e9:89:2c:28:a6:95:
24:56:24:d9:53:80:4e:07:55:fa:53:57:0c:0d:41:bb:59:72:
3e:c4:66:4e:f9:ce:8e:42:64:01:0f:ff:b6:50:df:74:e8:e0:
83:b2:3c:84:20:37:32:fa:cf:3d:fe:76:55:2e:91:52:10:97:
61:d2:3f:7a:b4:64:31:3f:8f:12:59:0e:8d:23:2e:e5:68:fb:
53:83:5c:67:a8:b6:81:2e:73:6b:d0:02:00:a5:5a:f4:73:db:
73:76:0d:ae:94:6e:00:0b:5d:7a:fb:a8:53:ed:f2:01:35:92:
9e:60:35:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:48 2025 by rpki-client