Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf2ea0c7-d5df-3010-a3a0-af1b6da6b5be.roa
File: cf2ea0c7-d5df-3010-a3a0-af1b6da6b5be.roa (raw, json)
Hash identifier: VT9qVMEBJ++X3cy0PfTsOf976JnlXCO8szhpSdEJbqw=
Subject key identifier: E5:D8:65:01:AA:B0:B0:95:C8:BB:AB:F9:F9:E5:3C:AA:05:E5:28:75
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB454CF2DCE5B5B082BD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf2ea0c7-d5df-3010-a3a0-af1b6da6b5be.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 19720
IP address blocks: 216.2.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:45:4c:f2:dc:e5:b5:b0:82:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=677cc49c-2dd0-47a3-a364-a21f322a8018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:38:3a:16:65:ba:47:e6:bf:34:38:c0:e6:24:
a1:4a:d8:c8:07:2f:10:54:9d:e6:23:3c:f4:05:21:
e8:91:d0:c5:cf:f5:de:8b:0a:40:07:90:69:c5:17:
ea:ac:61:21:e6:14:c3:2f:1c:bd:1d:bd:52:fc:74:
3f:b7:0b:05:8d:c4:27:26:0e:96:0f:4a:9d:16:2b:
1e:8f:13:1c:90:4f:7b:db:26:00:82:5c:3c:ae:c9:
94:d8:94:fe:ad:81:61:01:ef:fb:22:70:a2:e0:27:
d6:36:f9:63:17:59:96:c6:ed:fd:62:93:f2:7c:2c:
73:f8:2a:5b:a7:d3:8a:4d:11:a2:1b:7b:26:55:a6:
de:44:d9:60:2e:1b:de:d9:5b:ee:8c:1b:71:45:63:
0d:17:d9:b3:8a:ac:a7:bf:49:64:94:6d:71:14:9d:
38:41:cc:7a:ad:00:8a:5b:f6:0c:8e:13:f3:1d:35:
2b:7e:7a:ac:eb:22:f2:1d:78:80:99:87:ac:d7:39:
db:b3:29:3b:5a:ac:f6:c8:58:83:f9:0f:4f:6c:90:
d2:e8:d0:b2:a7:44:ae:4d:5e:2e:99:dc:d1:e1:30:
2a:01:ba:a3:3a:7b:18:92:5a:fc:36:55:89:9d:bc:
84:03:33:da:51:2d:f9:86:26:69:4d:9f:41:74:e2:
9c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D8:65:01:AA:B0:B0:95:C8:BB:AB:F9:F9:E5:3C:AA:05:E5:28:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf2ea0c7-d5df-3010-a3a0-af1b6da6b5be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
216.2.194.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d5:e9:95:68:71:75:11:cb:ad:d5:b0:f2:90:80:fa:99:5b:
4d:5f:e8:d0:23:55:8c:ee:69:c7:8b:60:0e:35:b6:6b:eb:2e:
15:b7:30:c2:7b:46:20:4a:fb:61:ea:e6:ed:43:f8:6a:ae:f5:
d1:cd:ac:48:0e:ce:8d:f8:7d:64:1e:1b:c7:08:52:d8:7e:ad:
bc:f7:ca:1f:42:65:db:f8:a6:88:4c:22:9c:66:82:0f:8d:c9:
da:d9:ca:cc:de:ed:a1:2d:e9:27:00:ee:40:3a:53:83:f2:9b:
14:d5:94:e8:27:68:a2:33:b9:a1:2d:f7:ab:9d:13:f1:f1:ae:
01:71:12:9d:72:36:66:8c:f6:d2:7f:1c:61:4b:bb:2d:1b:9b:
5b:23:5f:fd:1b:ad:09:bd:2f:d9:99:40:65:d7:17:57:f8:ff:
e2:24:84:36:47:2b:34:5a:a8:32:6b:22:30:27:a0:02:1c:6f:
9c:15:38:67:d2:6c:d5:06:e1:ac:28:3b:b5:b2:53:55:77:0b:
40:b9:d2:e2:76:8e:20:a2:9f:e9:54:3d:85:45:f2:bc:80:69:
43:57:72:ad:a2:88:8a:2e:38:6a:76:6f:06:e6:d4:be:22:ea:
af:39:5c:bf:92:95:b5:9c:93:70:28:48:99:2f:97:17:bd:d1:
91:f7:b7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:31 2025 by rpki-client