Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/3c195e35-e825-3d9d-adbe-dfb80f40bfc5.roa
File: 3c195e35-e825-3d9d-adbe-dfb80f40bfc5.roa (raw, json)
Hash identifier: 0nkw1JFYvGrK8SSv/Yxwzh/Y/g2yaI/NWayJT4QOYVA=
Subject key identifier: 85:85:4E:24:7A:98:75:ED:52:87:8A:2A:1A:BB:F1:A5:0C:D0:FA:50
Certificate issuer: /CN=e64236ac-e54b-4545-b57e-b971e5d37968
Certificate serial: 010D0C9F43285848ADC61336D9BF7246480DBC00
Authority key identifier: 1F:1E:FB:D3:BD:0C:4D:7E:4E:CA:5E:18:6C:21:A0:0B:AA:0F:0E:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/3c195e35-e825-3d9d-adbe-dfb80f40bfc5.roa
Signing time: Mon 27 Jan 2025 02:00:39 +0000
ROA not before: Mon 27 Jan 2025 02:00:39 +0000
ROA not after: Sun 27 Apr 2025 01:00:39 +0000
asID: 16478
IP address blocks: 216.162.112.0/20 maxlen: 20
216.162.112.0/24 maxlen: 24
216.162.113.0/24 maxlen: 24
216.162.114.0/24 maxlen: 24
216.162.115.0/24 maxlen: 24
216.162.116.0/24 maxlen: 24
216.162.117.0/24 maxlen: 24
216.162.118.0/24 maxlen: 24
216.162.119.0/24 maxlen: 24
216.162.120.0/24 maxlen: 24
216.162.121.0/24 maxlen: 24
216.162.122.0/24 maxlen: 24
216.162.123.0/24 maxlen: 24
216.162.124.0/24 maxlen: 24
216.162.125.0/24 maxlen: 24
216.162.126.0/24 maxlen: 24
216.162.127.0/24 maxlen: 24
2620:11f:4000::/40 maxlen: 40
2620:11f:4000::/44 maxlen: 44
2620:11f:4010::/44 maxlen: 44
2620:11f:4020::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ad:c6:13:36:d9:bf:72:46:48:0d:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e64236ac-e54b-4545-b57e-b971e5d37968
Validity
Not Before: Jan 27 02:00:39 2025 GMT
Not After : Apr 27 01:00:39 2025 GMT
Subject: CN=c40a6445-e37b-4d82-8ddc-a8970e42f423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:6f:0c:06:83:20:31:82:d4:f6:93:07:7f:
93:09:0e:3f:bf:6c:6c:1f:e3:4d:ff:7b:d5:7e:c1:
b1:e7:12:55:f5:48:9d:36:3d:e2:33:a8:3e:cf:0d:
21:c5:68:c2:1e:c3:6c:cb:a7:fa:fd:81:07:3a:9c:
df:01:f4:0d:ed:c1:13:dd:d5:2f:e9:04:d1:0a:ea:
99:a6:88:49:fb:67:ee:59:0a:3a:e3:4a:25:fd:66:
74:d8:be:7d:39:72:9b:6f:5a:31:20:75:ca:22:e3:
7f:3f:0d:ef:2c:8f:71:6d:13:6f:1b:83:76:d0:4e:
88:ec:fd:89:68:50:bb:92:fb:f0:ac:df:c7:79:b8:
8b:0a:9f:62:94:fd:c0:a5:d0:d3:ca:14:6b:19:98:
ec:9f:07:aa:d4:bd:20:36:66:d3:c7:9d:e6:a7:54:
e8:5c:7c:03:3d:84:43:39:26:12:12:b3:63:76:75:
86:3b:e4:14:b9:4c:d8:50:cb:72:05:31:16:31:be:
48:bf:45:a2:b6:65:3c:63:cc:47:18:2e:46:f1:b4:
33:ed:db:19:bf:c8:04:27:4e:2c:77:09:ce:5d:05:
37:18:62:3c:24:6b:42:a2:f3:19:83:14:3e:90:66:
eb:e1:9a:44:c5:f0:86:01:c0:66:43:4b:a5:be:83:
0b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:85:4E:24:7A:98:75:ED:52:87:8A:2A:1A:BB:F1:A5:0C:D0:FA:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/3c195e35-e825-3d9d-adbe-dfb80f40bfc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968/e64236ac-e54b-4545-b57e-b971e5d37968.crl
X509v3 Authority Key Identifier:
keyid:1F:1E:FB:D3:BD:0C:4D:7E:4E:CA:5E:18:6C:21:A0:0B:AA:0F:0E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e64236ac-e54b-4545-b57e-b971e5d37968.cer
sbgp-ipAddrBlock: critical
IPv4:
216.162.112.0/20
IPv6:
2620:11f:4000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:b2:17:2e:b7:e4:50:ce:11:ee:38:97:15:5c:61:6a:09:60:
ea:77:62:ea:91:b4:88:de:3b:19:e3:4b:d7:75:d9:c6:58:5b:
86:da:c0:9f:af:78:5e:44:4c:cb:bd:54:bb:96:a5:4b:e0:1a:
2f:36:5f:3a:58:34:22:8c:24:74:0a:13:6c:3f:51:01:00:d8:
63:4c:7a:d6:28:25:53:82:2b:58:9a:85:07:95:a0:6e:94:c2:
bb:d5:d6:4a:f9:26:4a:1a:ae:57:59:d2:f2:5f:01:de:f4:97:
3f:91:d5:77:62:16:00:37:2c:fa:02:4a:b1:ec:86:b0:03:29:
5f:86:97:10:76:9e:86:fe:71:c8:92:76:b9:bf:88:36:84:4f:
9d:a6:c1:45:a0:d0:e4:c3:8f:aa:69:70:ae:d8:98:c3:9f:b8:
4d:16:2e:16:4a:a4:1c:5b:55:aa:87:af:6e:df:a2:17:83:c2:
4a:8d:25:3e:6d:8a:c7:3f:c3:62:80:1c:e7:d5:fd:47:27:ee:
10:f6:fc:de:97:ce:22:06:47:7a:90:b8:75:a8:6b:ca:4f:90:
96:a6:da:81:ce:fe:1b:db:15:da:e2:91:41:f8:74:4b:1b:ad:
58:81:24:6b:aa:40:0a:75:e4:82:59:8a:13:2b:7e:59:ad:2a:
38:f7:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:09 2025 by rpki-client