Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa
File: f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa (raw, json)
Hash identifier: E8HDYTPH1ABCdqATHR9mqiFhp+a8IvWz8VsRou3MkUg=
Subject key identifier: 84:B4:8C:CE:A0:0D:30:49:FC:EE:BA:D1:F5:3D:75:03:BD:15:74:27
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584902EC33478C55EB3672027880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 701
IP address blocks: 216.3.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:ec:33:47:8c:55:eb:36:72:02:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=e19e4204-119c-48e6-8f9a-96dd78011932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:ee:22:4e:43:c5:ff:16:3d:18:f6:10:65:
a8:e8:ee:95:65:59:61:f6:2c:88:83:14:77:41:19:
a9:7e:67:51:e4:39:db:88:8d:81:b2:aa:dd:5d:89:
13:5c:38:8e:dd:c5:83:09:06:e2:ee:5b:97:fa:a8:
5a:1b:c1:42:6f:db:6a:18:d3:34:42:30:d7:e2:2f:
38:14:ec:dd:61:68:b7:0c:ce:84:59:49:44:ab:bc:
51:07:3e:34:39:ec:29:b1:c1:74:f4:8a:c3:4e:42:
a2:c3:89:c5:6b:95:e2:a2:5c:79:8a:da:d9:1e:92:
c7:39:5d:d0:33:d8:69:b4:7f:f5:31:3e:a8:b5:fc:
43:ac:96:b3:a1:fb:61:49:25:40:81:0a:b9:a6:75:
85:5e:28:2d:d4:72:69:ce:09:25:e8:f1:41:79:a7:
32:05:c1:5b:e9:1e:56:89:64:2f:37:e8:a9:2f:5c:
6e:1b:d9:76:2b:0c:13:ca:15:53:69:bc:b0:1e:15:
86:f7:64:46:b0:30:bd:09:1f:41:fb:bd:46:e2:11:
6c:50:7f:b2:64:21:d7:cf:b8:77:13:b9:7c:a9:58:
c9:90:80:97:40:dd:15:9d:34:af:d4:72:c3:e6:df:
89:23:b2:02:f1:01:3f:40:08:dd:4f:cf:2a:c3:40:
44:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B4:8C:CE:A0:0D:30:49:FC:EE:BA:D1:F5:3D:75:03:BD:15:74:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
216.3.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:09:db:b8:95:50:ab:7c:32:04:fd:2a:4e:62:6a:d9:e8:0a:
03:11:4e:0e:bb:57:1b:59:19:e5:54:f7:d2:65:f6:9e:99:40:
7e:e4:6f:0a:9b:97:ad:f4:32:ed:f6:88:44:50:4e:50:a0:94:
28:65:35:45:61:38:e5:e0:26:ba:4c:c1:04:41:fb:83:c2:85:
06:2e:0b:12:6f:78:31:87:a6:17:de:5d:7e:8e:9a:70:d2:0f:
71:b6:47:e3:21:d2:c5:a6:45:3d:ce:bc:fe:50:5d:40:76:19:
07:68:8a:65:b7:df:10:e1:35:bc:2e:a8:9b:2c:e9:cb:37:fc:
1f:46:3b:78:0e:fb:6a:18:5a:3a:17:51:ca:fa:ef:ee:f7:47:
5d:54:aa:67:e6:64:64:46:c6:a8:41:d9:32:90:bb:eb:d6:75:
a3:cd:21:ff:53:62:fe:4f:7c:28:37:e2:cd:bb:52:04:e8:08:
c0:c0:14:d7:d6:e1:9c:09:bf:b2:06:77:23:ee:0d:0c:2d:31:
14:fa:e3:e5:26:3f:ed:e0:1e:0f:e2:ab:c2:2e:e4:24:92:f9:
0f:40:6a:50:e1:bf:23:be:4d:0d:8d:c3:67:2f:21:c0:7c:6f:
a3:18:24:0c:9c:8d:f6:02:fd:e9:da:5b:8a:c3:1c:0f:12:e1:
f2:36:1d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:33:48 2025 by rpki-client