Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0344eba0-5400-3727-a9b4-12f7e7edd770.roa
File: 0344eba0-5400-3727-a9b4-12f7e7edd770.roa (raw, json)
Hash identifier: 1qCzmuR2QSRDc7opWViRKKcso0wxltYngN46BbympP4=
Subject key identifier: 8D:D0:5E:E6:20:AE:DD:74:B5:70:FE:90:30:49:69:CD:0A:20:85:65
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848960B5842CB4F6156DA52377C
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0344eba0-5400-3727-a9b4-12f7e7edd770.roa
Signing time: Sat 18 Jan 2025 14:00:52 +0000
ROA not before: Sat 18 Jan 2025 14:00:52 +0000
ROA not after: Fri 18 Apr 2025 13:00:52 +0000
asID: 16417
IP address blocks: 216.71.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:96:0b:58:42:cb:4f:61:56:da:52:37:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Jan 18 14:00:52 2025 GMT
Not After : Apr 18 13:00:52 2025 GMT
Subject: CN=feebb64c-1662-45ef-aab3-7d320d53e669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:c3:ae:e6:b8:30:49:fc:21:1a:52:55:2e:
30:f9:8f:04:49:b2:01:e1:10:34:10:34:ab:94:4d:
59:32:bf:c4:32:7e:d1:26:77:4d:67:46:3f:c4:08:
5b:a2:74:94:35:92:5b:f8:1d:29:e4:12:55:dd:8c:
d1:d1:c9:e1:cc:9e:33:34:08:1c:34:26:6e:0c:a9:
b9:d8:99:34:13:da:47:05:d0:69:f7:0c:80:16:81:
20:5c:b0:e0:80:db:d8:72:fe:8f:15:78:00:50:d0:
32:74:87:72:1b:52:9f:a1:95:14:84:86:04:54:ac:
2d:8a:53:6b:02:a9:b3:4f:e8:5f:0b:8d:2b:6c:09:
b2:db:89:58:08:42:a4:7e:d1:50:9d:f0:a4:a5:98:
35:d5:2f:4c:4a:1f:8e:54:5a:86:46:bf:72:38:f2:
80:08:7e:db:1b:d0:e4:37:8f:9a:0c:3b:99:dd:d5:
fb:7c:ff:d1:77:2e:c2:3b:60:7c:3b:87:a2:75:47:
44:3b:e6:81:88:a1:a9:75:34:e5:40:0c:fe:f3:c3:
c4:15:7a:3e:35:c0:9a:00:94:c4:9a:b3:59:59:eb:
7a:76:15:38:34:bd:61:61:5d:b8:38:60:1c:b0:b1:
74:af:a6:b1:a7:12:06:71:55:83:17:e9:3e:76:56:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:5E:E6:20:AE:DD:74:B5:70:FE:90:30:49:69:CD:0A:20:85:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0344eba0-5400-3727-a9b4-12f7e7edd770.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.71.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:77:d2:d4:14:fa:d3:e9:8a:f2:90:6e:1e:20:09:9e:e2:31:
1e:4a:d8:9a:ef:7e:45:92:3a:4c:3a:d5:49:ab:59:76:bb:9e:
4f:3c:62:ec:f8:94:84:25:5a:a9:66:35:ab:43:d9:d2:47:3a:
15:62:1b:ee:2c:e3:2b:3b:1e:a9:1e:05:b7:25:59:6f:6b:71:
0c:5d:85:7e:0a:1f:fb:69:6d:08:5f:ac:8f:2b:c6:a4:17:6d:
ce:35:51:16:69:a9:c8:b0:f5:95:5a:87:aa:69:db:d9:86:e8:
0b:22:84:a1:fc:7f:64:32:64:66:b3:d5:28:34:1f:8a:6d:72:
82:f0:5c:e3:5c:60:f1:60:6f:b1:c1:a6:39:dd:1f:ee:ac:6c:
05:59:01:f5:5c:f9:1d:a9:0b:bd:72:09:a8:48:14:31:48:3b:
7e:c2:4d:8b:7a:b6:db:90:4f:3f:45:71:ff:68:0d:ac:93:d4:
0f:51:7a:a8:0d:2b:c9:50:06:7d:c4:13:93:1d:bf:50:31:fa:
4c:c9:3e:7e:1c:89:20:3f:4b:99:52:e6:f1:68:c3:d2:77:e8:
8b:ed:6b:c2:42:0a:33:db:24:51:74:60:12:29:fa:81:9f:b7:
50:0f:f1:19:66:d5:19:92:22:42:40:74:aa:5a:35:63:83:ff:
87:c9:a8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:35 2025 by rpki-client