Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa
File: f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa (raw, json)
Hash identifier: 5GBrdXa1GmyNnveDIjmGC3J5kMDIyS3K0JbEu82OlPg=
Subject key identifier: 2D:38:00:38:38:9D:46:44:42:01:78:E7:1D:79:B1:E6:A3:3B:00:F5
Certificate issuer: /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial: 010D0C9F43285848EC96957F1B7E86384A6FB940
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa
Signing time: Tue 18 Feb 2025 14:00:52 +0000
ROA not before: Tue 18 Feb 2025 14:00:52 +0000
ROA not after: Mon 19 May 2025 13:00:52 +0000
asID: 14618
IP address blocks: 142.202.36.0/24 maxlen: 24
142.202.37.0/24 maxlen: 24
142.202.38.0/24 maxlen: 24
142.202.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ec:96:95:7f:1b:7e:86:38:4a:6f:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Validity
Not Before: Feb 18 14:00:52 2025 GMT
Not After : May 19 13:00:52 2025 GMT
Subject: CN=07da60ed-0df2-4ed0-bd84-e0d1654b26d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:70:7d:da:b6:3b:ca:1e:2a:60:69:b3:d2:
e5:21:d8:ee:b2:47:43:18:b2:f9:75:5e:54:29:31:
86:8f:db:52:9d:65:d3:c9:19:24:2d:15:a6:f6:86:
3e:01:a2:85:19:fb:cf:20:24:ae:f9:72:30:34:e6:
95:e9:99:42:64:96:dc:a5:47:50:18:b9:13:06:4e:
2f:81:21:e5:a1:97:a9:00:08:25:08:42:08:e5:0f:
00:ba:e2:6a:2f:7f:04:f2:c3:e9:b6:ee:08:80:41:
af:04:c2:b4:17:51:c4:38:b6:1d:34:e0:81:07:d3:
e6:f0:0c:15:fa:a3:c3:48:87:8c:6d:a0:44:f1:20:
49:82:61:b1:84:24:2c:f1:4f:e9:7b:f3:b6:68:c8:
88:12:54:92:d0:0f:4f:a2:21:3f:a6:99:21:b8:2d:
6d:e5:3e:17:dd:4e:49:54:4a:0e:81:a2:93:ed:65:
4f:b6:d6:24:7d:08:36:51:40:8f:81:b0:56:54:c8:
88:5f:67:70:52:c9:dd:7b:7d:be:1e:b0:4c:f7:7d:
83:5e:23:0c:ac:92:86:1d:c7:82:63:d3:b8:8b:98:
a7:a2:c9:23:26:d8:85:9a:4a:bd:e5:50:e0:fb:d3:
f5:15:3e:8d:77:f2:2a:29:4c:1a:91:f9:12:ae:65:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:38:00:38:38:9D:46:44:42:01:78:E7:1D:79:B1:E6:A3:3B:00:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/f16f516e-8c3f-3ace-9ab3-9b2b80788004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
X509v3 Authority Key Identifier:
keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:a5:8b:e6:0e:3b:9b:46:47:1f:13:79:4a:93:85:42:18:b9:
da:d2:a7:cd:c1:0d:ba:e0:fd:15:f9:c9:62:a1:90:ac:4f:a4:
68:12:5e:91:c1:89:96:db:19:d8:c1:99:78:fc:38:c7:9e:db:
0d:e1:0c:68:b2:b9:cc:8e:c1:e2:02:15:67:b6:68:1e:c7:67:
4d:40:a4:5a:9b:a4:e6:c6:18:c7:95:5f:51:5c:3f:88:1a:55:
1f:bb:f5:82:1a:9d:b3:63:c3:ea:e0:5b:2e:db:e8:61:50:62:
9b:cb:f8:8a:b9:0b:99:97:e1:10:90:26:ba:71:fd:8d:7c:bc:
82:38:8c:d3:50:af:8f:87:55:17:1a:90:72:df:92:5f:7f:84:
87:33:42:a5:4e:b5:90:e1:14:aa:e8:8b:7e:31:7c:13:d7:9e:
9c:3a:2d:96:29:96:bc:43:7a:43:a3:cc:39:a3:e5:99:6f:ba:
14:6a:f1:21:8a:87:68:2c:6b:a2:1c:8e:4b:7a:cd:c5:34:74:
38:2e:ce:a9:bc:e5:a8:0e:32:8d:f0:a9:7b:51:d9:fa:0a:22:
cb:0b:25:05:0e:11:b0:c9:3a:d2:39:96:07:01:da:b8:a9:a8:
46:3d:d0:86:37:2f:59:87:d6:0a:ee:d1:e5:fa:2f:b3:f9:84:
60:fb:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:15 2025 by rpki-client