Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa
File: 356617d6-d98a-3c12-9d4a-857c06ded68b.roa (raw, json)
Hash identifier: vrmOXvwGTEaLY6ESm35/RHltBlCNKkOBb9S+FCAK5IM=
Subject key identifier: A1:2B:2B:A3:80:01:1B:86:E1:B3:53:15:95:39:9A:C6:E0:DA:82:50
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848E59BCFB718AD127F1F574600
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16417
IP address blocks: 216.71.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:cf:b7:18:ad:12:7f:1f:57:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=cf9838b6-f18b-4dc8-a260-2bc6de093c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:42:bd:58:32:6c:f2:c6:15:b6:90:0e:44:be:
3c:02:df:59:96:5f:f9:70:83:bf:11:1a:95:d9:24:
d1:0b:34:7d:52:cd:4c:ad:11:5f:dd:ae:13:04:7c:
a8:97:8f:94:95:33:ae:e8:d1:fd:83:67:97:c9:ae:
3f:8a:f4:5d:c0:f6:61:77:af:cc:96:7d:b9:d2:55:
ad:1a:32:54:0f:f2:b0:dc:f3:f6:83:90:9d:1b:43:
60:7f:e5:5e:48:ec:e7:bd:98:b8:88:9e:25:bc:10:
59:29:4b:0b:3a:51:17:d7:e2:ac:08:b9:1f:85:c7:
ac:5c:9a:e2:4c:3a:d5:f1:af:2f:cf:c8:62:79:b3:
dd:f7:3e:f7:59:18:02:8b:bf:6d:36:ed:c3:d0:86:
55:38:a5:0f:83:b6:36:a6:a4:4a:8a:8c:da:2f:1e:
f6:08:e1:34:f6:b9:df:03:f9:da:ca:d9:6c:86:98:
81:55:a0:49:87:a7:bf:8b:17:aa:f1:35:9e:9e:e8:
b7:32:37:c9:bc:0f:ea:22:62:f1:26:67:90:68:32:
05:e3:31:32:02:2e:a0:ef:b9:ba:4b:f3:dd:f2:d9:
b4:fc:46:75:a7:d7:5b:c4:dc:68:80:1d:80:db:9e:
c5:f2:5e:61:23:7b:b7:cb:3a:fb:22:00:5c:c5:d5:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2B:2B:A3:80:01:1B:86:E1:B3:53:15:95:39:9A:C6:E0:DA:82:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/356617d6-d98a-3c12-9d4a-857c06ded68b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.71.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:cd:52:b0:2d:77:4f:d3:d8:39:e7:5c:f2:c4:7d:68:7c:ca:
3a:99:b0:d5:13:d9:39:eb:2c:6d:49:2b:1b:b3:d6:fe:25:27:
7d:6f:49:d6:63:b5:2a:74:2e:63:3a:65:49:fb:81:87:74:2e:
68:a6:65:cc:a8:3a:bb:4e:53:32:d4:01:16:b0:8f:51:31:ba:
03:53:61:46:41:e0:80:d2:53:7a:16:51:c4:7f:93:72:e8:32:
af:37:1a:16:88:82:e4:b1:93:14:9b:69:67:7b:b5:d5:30:4b:
d2:67:06:26:d8:d8:79:97:bc:f2:69:06:54:ee:ee:9a:38:d3:
d0:fe:c3:61:74:9f:e8:33:31:0c:cb:e5:06:3f:9d:1d:15:49:
8b:c9:77:4d:fb:d5:1f:bf:d2:d0:4c:15:9a:43:8a:72:0d:d1:
80:82:53:e5:aa:00:39:c0:4e:90:ac:09:41:c9:b8:1c:22:24:
c6:33:ea:4c:aa:6e:0b:8e:08:52:00:3d:fe:9d:a0:4e:c2:e5:
f0:8d:eb:ec:7f:94:13:b2:e2:15:25:8e:6a:82:0b:06:f9:34:
ae:c1:04:84:20:ce:ed:b5:df:8b:35:f8:ce:0f:36:6c:fa:e2:
97:cc:91:b6:5f:75:2f:9f:09:88:0a:1b:77:20:a8:e9:94:4e:
17:e0:4c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:36:45 2025 by rpki-client