Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2d5edc6c-6627-338d-b291-162093481cde.roa
File: 2d5edc6c-6627-338d-b291-162093481cde.roa (raw, json)
Hash identifier: qKSUKmjAa5dlqhI0EII+CATS8NUxvMJEZiNqhP+Dpg8=
Subject key identifier: D5:81:CA:9A:9E:8C:2E:FF:7B:C6:9A:D2:13:FA:2A:C6:25:B7:31:FB
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584854702F78DDC3CB91365512C0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2d5edc6c-6627-338d-b291-162093481cde.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 13576
IP address blocks: 216.106.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:2f:78:dd:c3:cb:91:36:55:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=f4e3bd50-7f06-4b5d-a86a-aa440ae572ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:39:3e:68:8c:55:b9:12:f0:d6:bf:80:9d:
ff:0e:9b:6c:58:60:63:64:0d:57:1b:15:ab:4f:aa:
35:0f:d6:19:c2:af:af:f9:77:e7:b5:59:c0:c4:d9:
81:55:cd:14:80:49:c9:7a:77:6e:19:ba:12:15:03:
f4:c0:6b:e4:89:36:70:ca:42:24:78:8c:60:d6:37:
a2:05:84:6e:99:c9:22:6f:39:34:44:6c:8c:eb:be:
69:e3:39:ce:36:07:ca:1f:74:8c:5e:be:b7:42:82:
93:f4:f5:05:7c:0d:43:d9:1b:8b:a6:29:2c:e7:e1:
f5:6c:c5:b9:15:8d:98:37:e1:19:db:19:11:8f:ba:
55:5f:4b:ab:0d:06:44:1f:43:af:58:ec:1e:a9:ad:
bb:83:45:ac:51:11:97:73:6a:32:7c:5b:91:ab:dc:
61:fd:6e:73:d2:cc:f1:65:e3:f2:00:03:fe:ad:62:
70:2d:1b:29:55:74:a1:39:53:65:85:82:b0:ed:af:
6d:55:0b:54:8e:69:ad:bf:00:67:1b:7c:11:aa:3b:
d6:70:97:a0:12:e4:1f:20:28:55:53:3d:17:e1:58:
16:36:fb:0d:b4:b7:90:01:91:19:9a:06:54:73:70:
2e:94:33:06:1b:dd:d7:25:f7:95:4e:7f:f4:5a:c5:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:CA:9A:9E:8C:2E:FF:7B:C6:9A:D2:13:FA:2A:C6:25:B7:31:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/2d5edc6c-6627-338d-b291-162093481cde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:bf:f9:1a:ed:17:fa:00:7b:92:b6:e7:1b:06:a8:33:3f:3d:
43:36:db:89:16:7a:1c:c7:0a:cb:83:a6:fb:56:7d:8b:67:3b:
73:4a:c5:84:6c:1e:44:be:d0:ea:e5:89:c6:0d:a7:cf:e2:bf:
12:4c:7f:a9:33:7b:3a:ae:a2:19:c4:04:53:2b:e4:58:28:65:
39:0b:8f:dc:3f:f1:eb:93:4f:ed:d9:04:b0:f7:ca:c3:13:64:
0f:54:95:99:4d:49:a8:0a:a3:40:ab:e7:32:7c:26:d7:8c:d5:
7b:ea:01:77:2a:93:8a:8d:19:37:90:b5:87:38:4b:27:9e:38:
e2:01:a9:42:ed:e7:51:6d:a3:0d:db:36:b5:0a:b8:48:d0:6e:
12:6e:1d:1f:1c:73:5b:a5:8c:47:cc:b1:da:8b:06:fa:57:7e:
5b:cb:ed:c0:eb:7a:b4:d0:7c:a3:01:31:32:1e:9b:4a:ec:f2:
71:53:4d:20:d1:43:9a:0f:bd:c5:4d:e1:78:eb:a4:29:99:78:
e1:8f:3c:24:c7:3f:1a:10:3d:3c:54:40:83:8a:bb:9d:9c:74:
3f:d5:cd:08:09:76:86:dc:3c:33:0a:bc:a3:39:fd:98:49:c8:
ef:c9:8e:de:60:26:b5:ae:da:9c:84:3a:8a:e1:4a:69:63:5c:
64:ec:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:16:53 2025 by rpki-client