Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa
File: 1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa (raw, json)
Hash identifier: RK8nTqZbA0fZTbpxShM1l/x+a85iOja3PLGkjrkSlPE=
Subject key identifier: A4:FE:A3:2A:B1:B9:08:C2:17:1C:54:B4:3B:F3:71:86:80:69:E9:C7
Certificate issuer: /CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
Certificate serial: 010D0C9F432858487CEB3CAD7D85079042E07540
Authority key identifier: 31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 29744
IP address blocks: 216.196.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:3c:ad:7d:85:07:90:42:e0:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ccbd7e-0844-48b1-88d7-0a8ef46e8168
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=b938833d-2617-4698-b9a9-441cc413a3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:11:07:6c:eb:65:fd:be:b5:38:9d:64:83:
35:ef:80:75:8c:f2:29:0f:bc:0b:de:3e:0a:89:27:
2c:43:12:5c:d9:32:df:6e:32:5b:94:cd:c1:72:9b:
86:a8:67:5e:0a:91:02:73:0b:d8:39:58:32:7f:f3:
f0:f8:45:f4:31:af:3a:66:23:5a:57:09:4b:1e:f7:
2e:9b:fd:7c:66:f6:8e:79:03:22:5e:f2:94:6e:b9:
be:01:4a:ad:78:36:6b:d4:84:d0:dc:1a:95:7f:60:
2a:f7:ec:6f:75:c9:25:80:77:1d:3f:b6:24:9c:5b:
ab:20:7a:35:4d:5d:7d:da:6d:28:75:23:8e:0a:39:
3a:5e:3a:13:b8:43:39:56:39:6e:e0:40:1b:0d:d3:
ee:f2:37:23:0c:b4:40:2d:f0:eb:fd:a8:42:71:d4:
b9:9c:5e:74:e5:88:01:14:4d:54:ef:be:62:09:22:
72:78:cf:9f:11:76:97:3b:72:84:31:91:30:62:91:
5d:28:e6:f5:b0:11:6e:0b:60:f4:19:0f:80:8f:7b:
b2:4d:a4:f0:2c:ad:6a:de:85:fe:ca:9e:77:a8:3c:
8d:1e:be:2b:38:d5:1a:a4:a7:be:e2:f1:2e:0c:fe:
d9:db:18:67:20:75:59:f2:19:40:5b:5a:31:18:11:
72:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FE:A3:2A:B1:B9:08:C2:17:1C:54:B4:3B:F3:71:86:80:69:E9:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/1922afe2-3bab-3e13-a7c0-c1a88e6beab9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.crl
X509v3 Authority Key Identifier:
keyid:31:67:54:B4:BF:16:7E:AD:F1:F4:10:C1:D9:D2:FA:DA:AA:85:3C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/35ccbd7e-0844-48b1-88d7-0a8ef46e8168.cer
sbgp-ipAddrBlock: critical
IPv4:
216.196.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:d8:65:0c:2a:64:74:28:13:02:58:68:e6:b3:ae:bd:54:71:
4f:29:e1:f8:9e:67:d5:09:2f:cc:d3:80:49:12:5c:b0:58:07:
9a:96:9e:63:32:bd:51:b9:e2:a7:66:ad:2e:6c:6e:45:d4:5c:
54:70:41:19:76:92:04:62:a6:8b:46:11:35:ad:7d:09:3f:3e:
d0:85:e1:0b:30:d8:46:29:48:fc:df:53:ef:56:fb:ae:1d:87:
e6:71:6f:24:28:17:22:5c:44:57:a9:da:f5:84:73:45:e6:f6:
e0:b9:56:56:6d:72:00:fb:bf:84:44:3a:ea:6b:e5:0c:02:3d:
bb:95:df:ad:63:a1:bc:ef:31:97:27:9e:1e:4b:16:16:39:43:
b9:47:72:93:83:51:50:7f:80:63:84:14:22:e8:9e:95:2e:b9:
21:54:f5:45:f3:f3:f7:20:e1:f7:05:a9:2e:e6:cb:f2:41:ce:
bc:8b:71:9e:af:16:e2:e4:70:0e:db:96:6c:f4:5e:37:20:24:
0b:3c:dd:38:80:b0:12:7f:88:e4:fb:a0:8c:44:58:ad:f4:53:
81:aa:cb:76:db:e9:c6:1f:b2:f7:f0:84:17:cb:80:4c:52:d2:
c1:3f:a3:6b:f8:a7:8b:57:42:c0:a6:78:3f:0c:45:cd:d7:40:
be:3e:d6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:12:22 2025 by rpki-client