Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa
File: 3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa (raw, json)
Hash identifier: k/TxZ5qPax8ZNJWLOAPmYGftBtUJsboHH1eoLQ08Pnk=
Subject key identifier: 72:6D:21:A5:7C:F0:E8:AD:10:92:04:B6:86:0F:AF:D5:3B:77:EA:B4
Certificate issuer: /CN=109733f6-670d-4e02-a6e2-403ebf727263
Certificate serial: 010D0C9F4328584902EC2EF8F1B05C0B15B0BB00
Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 46741
IP address blocks: 216.228.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:2e:f8:f1:b0:5c:0b:15:b0:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=48f5dae2-26aa-4173-b6cd-e5dc21068325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:60:e4:9e:38:41:32:a6:85:28:b3:f5:6b:6b:
ea:a7:22:56:34:12:82:73:6b:be:58:3d:4e:0e:80:
da:62:c1:41:d0:c7:dd:ac:98:af:03:a8:3c:47:60:
de:1c:c5:7d:8c:0b:bf:82:08:dd:34:37:2d:1f:8d:
1c:80:23:46:b4:2e:a9:bf:15:89:19:d1:ff:b1:dc:
ad:3a:04:5b:8a:7d:d2:01:59:c0:d2:3e:9b:f8:9b:
49:a6:24:a1:50:e0:7d:e1:44:72:2f:38:69:4d:6a:
ba:8f:70:1b:f5:82:12:be:b1:a5:34:ef:8d:7a:cd:
81:3d:19:23:7a:b1:2e:08:3b:00:f9:d5:06:37:0c:
9c:d0:8a:73:9b:7c:62:25:f3:bc:73:8a:29:46:e7:
74:35:cb:38:23:0b:2b:60:6e:2b:bc:f3:8c:be:b5:
b7:de:78:ae:37:39:8f:ac:53:53:88:c1:63:47:03:
17:30:eb:68:68:48:f1:ca:93:23:4c:c4:a1:e7:c3:
4d:68:2c:c3:94:8d:e3:76:ef:0e:ff:e4:2b:b6:5e:
f9:0e:32:74:76:6e:8b:7a:4d:f1:0c:7b:c7:2b:c3:
b0:d7:27:70:7a:ab:dc:10:d4:f4:a2:c8:fa:d3:c9:
00:93:a1:5e:a8:4f:51:02:fd:c3:bb:df:bf:72:82:
51:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6D:21:A5:7C:F0:E8:AD:10:92:04:B6:86:0F:AF:D5:3B:77:EA:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl
X509v3 Authority Key Identifier:
keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
sbgp-ipAddrBlock: critical
IPv4:
216.228.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:63:f6:c8:37:ce:51:58:bb:ea:f3:74:f4:9e:3f:0f:20:2e:
92:b6:7e:d6:cb:35:af:49:5c:be:56:c3:78:21:08:d0:be:08:
82:a8:ce:0e:e9:c3:b4:23:73:a6:73:2e:07:a4:7c:25:2c:05:
59:b0:54:db:fe:99:cc:cb:0c:ee:60:f3:98:c1:c5:ca:28:37:
a4:4d:1f:39:bd:ad:c9:d4:eb:28:56:bb:5a:54:a6:37:9f:a5:
34:4a:13:97:ed:47:1f:63:e2:3e:b5:d1:94:9e:2f:07:d0:0d:
d3:1d:a3:6f:06:69:45:92:ae:a3:ee:95:8a:04:45:1b:26:36:
38:70:f9:bc:40:29:9a:8d:5f:30:3f:f8:c6:03:3b:69:1a:ca:
45:31:a4:fe:dd:94:29:f7:b6:4f:41:e1:9d:26:17:2b:f0:4c:
6e:5a:a1:87:e1:ec:e6:dc:51:54:4e:10:4e:89:5b:e5:65:2a:
20:51:1a:33:10:60:09:eb:fd:a5:82:ea:e9:8c:06:ba:9b:f0:
3f:6c:70:04:ef:52:54:c0:51:dc:86:17:3f:1f:1f:84:8f:0a:
18:2d:cb:19:0a:b7:87:b2:22:f2:21:88:5b:ef:a1:b6:f7:36:
0c:ee:fa:91:cf:90:4b:cb:60:aa:db:54:56:7f:9e:e9:f6:89:
89:79:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:59:48 2025 by rpki-client