Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/520a1c55-8b76-3016-a3f5-ef1de25431cc.roa
File: 520a1c55-8b76-3016-a3f5-ef1de25431cc.roa (raw, json)
Hash identifier: OzbZc1FwHgb3wie1cwmgNmko364QptHiolB/QK7yOlI=
Subject key identifier: B0:72:37:FA:14:5D:D8:60:09:8A:AD:59:E1:58:3E:60:D7:FC:0E:3B
Certificate issuer: /CN=70057aa1-544d-4237-b549-304fd45324ba
Certificate serial: 010D0C9F43285848A400C1CD78AA86D89FBF28B0
Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/520a1c55-8b76-3016-a3f5-ef1de25431cc.roa
Signing time: Thu 23 Jan 2025 14:00:52 +0000
ROA not before: Thu 23 Jan 2025 14:00:52 +0000
ROA not after: Wed 23 Apr 2025 13:00:52 +0000
asID: 30039
IP address blocks: 216.222.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a4:00:c1:cd:78:aa:86:d8:9f:bf:28:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba
Validity
Not Before: Jan 23 14:00:52 2025 GMT
Not After : Apr 23 13:00:52 2025 GMT
Subject: CN=db6fd997-bc57-4c61-9c0d-e87dc3ac99d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6f:92:8e:7e:c6:21:a9:a2:26:bb:bf:ea:be:
1d:91:ba:d1:01:1b:ea:67:d9:5b:42:53:97:91:54:
5c:af:d7:0b:be:ed:26:97:76:77:eb:fb:42:bc:44:
19:cb:ae:03:56:99:6a:55:05:58:42:63:12:b2:ba:
39:db:1d:86:ec:7f:9b:85:0a:49:4d:c6:ba:9a:10:
2c:29:d6:dd:61:fd:c4:d4:7f:aa:94:f1:1e:b9:c8:
7c:c7:e5:45:26:cc:61:bb:54:9d:41:84:5f:da:c9:
70:a1:4c:05:d0:27:32:2c:cd:8d:bc:ab:a4:16:9c:
d1:5b:c6:07:2f:9e:a6:e5:a2:2d:d7:4f:6f:f3:71:
0b:89:4d:ac:5d:71:ba:fc:c1:a3:12:a8:a9:ac:c0:
7a:76:05:1f:6a:6f:bd:54:da:35:37:01:67:b6:2f:
c2:08:bc:30:b5:c0:10:30:70:2c:93:78:53:6b:3d:
e3:f5:2c:03:3f:20:9c:45:a9:c4:63:8b:be:80:89:
0b:88:19:31:07:eb:ba:6d:58:86:08:aa:af:88:5e:
02:32:b2:5f:43:84:d8:2d:b1:26:80:60:2b:bc:79:
f5:b9:f1:fa:2f:a8:c2:e5:87:b8:92:fe:76:a2:c2:
bf:c3:88:6e:20:8e:18:39:80:10:78:5a:7b:96:a5:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:72:37:FA:14:5D:D8:60:09:8A:AD:59:E1:58:3E:60:D7:FC:0E:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/520a1c55-8b76-3016-a3f5-ef1de25431cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl
X509v3 Authority Key Identifier:
keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.222.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:21:15:ff:76:42:ce:59:1a:65:b5:0b:69:7f:62:3c:83:19:
2b:5c:aa:e3:7d:f9:fc:05:60:e9:12:9e:a0:37:21:8b:c7:9b:
06:98:94:34:04:b3:a4:bb:a4:f2:8a:8d:d9:69:e9:97:81:d7:
5e:c7:37:c5:67:05:49:40:3c:d8:57:22:86:76:fd:12:bb:ad:
b8:01:46:9d:60:cd:75:dc:85:51:8f:91:a2:2c:8a:d0:45:ee:
bf:2f:ae:2f:8e:44:82:cb:f9:7b:e4:97:e3:ee:48:9b:aa:c7:
3f:88:65:3b:87:ba:2f:30:6a:31:76:e2:8d:47:56:be:0a:fe:
5b:4d:f8:cf:74:17:00:50:60:31:a8:5c:81:9d:41:52:67:90:
cf:65:a5:c0:bd:8b:a5:41:57:77:9a:f3:2e:71:4c:01:2d:87:
0e:79:e0:c5:84:96:eb:a1:41:b8:12:b9:33:09:1d:62:83:83:
61:9e:70:55:66:e2:73:a8:8f:d6:8a:3c:ad:67:f4:0c:48:82:
cd:1f:5c:00:7a:39:a4:a2:b3:88:9a:13:f8:6c:e8:89:a0:8e:
0b:38:f6:4e:e0:6c:d9:9b:a1:07:a7:6b:65:6c:aa:9b:8e:4e:
b9:90:81:a0:44:cb:ad:1d:e6:4b:92:f8:d1:27:eb:07:b6:00:
b8:ec:fd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:41:43 2025 by rpki-client