Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa
File: 7c9c0f53-d891-3144-bfee-1bcb12654926.roa (raw, json)
Hash identifier: d7aPSZKzGj+FyffeDIqTTTlQsGcSQLbLjXhsSY4vgfk=
Subject key identifier: 65:66:50:72:B6:7D:64:D1:A1:09:29:5A:07:DA:C1:CC:CC:73:97:09
Certificate issuer: /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial: 010D0C9F43285848E59BCF922EB0BCEE93076C17
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa
Signing time: Sun 16 Feb 2025 02:00:40 +0000
ROA not before: Sun 16 Feb 2025 02:00:40 +0000
ROA not after: Sat 17 May 2025 01:00:40 +0000
asID: 16417
IP address blocks: 216.71.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e5:9b:cf:92:2e:b0:bc:ee:93:07:6c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Validity
Not Before: Feb 16 02:00:40 2025 GMT
Not After : May 17 01:00:40 2025 GMT
Subject: CN=02f14639-df9e-4dd1-80a3-5d93fa543474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:2a:ac:5e:67:06:16:3f:3b:5d:cc:a8:55:
64:0b:8a:e8:9c:b5:20:95:e4:23:4a:f4:14:5a:6f:
76:28:ae:2f:00:9f:5c:b9:92:dd:65:8b:9c:63:7d:
3e:27:d6:37:1c:89:d7:cd:ce:b8:8b:31:90:c9:0f:
59:55:b7:ea:d4:57:67:00:c5:37:60:bc:44:a4:87:
5c:6d:9a:d8:53:4e:9c:3b:60:4c:cd:69:c2:72:28:
81:e3:7c:99:4b:e8:cc:62:81:af:75:32:06:04:a9:
9f:4c:ee:c0:b6:f4:41:cd:0e:45:35:2c:5f:3d:77:
c1:ac:5c:6a:a1:75:04:ec:f3:ec:26:dd:d7:7f:67:
09:5a:b9:76:fc:2f:86:b2:75:51:38:c2:2c:9d:c6:
bc:a8:24:b2:7e:07:40:89:0c:28:8b:d0:a6:b6:22:
1b:dc:71:30:82:a1:f1:63:c3:02:65:1a:d9:2d:63:
3a:f7:16:21:4d:6b:09:f1:53:3d:70:a0:34:0e:52:
7a:3e:f9:43:18:3f:b8:5b:88:fe:e0:ca:f8:dc:7b:
21:1d:c6:9b:5e:72:76:17:34:97:d4:e2:21:78:3c:
ac:20:60:ce:64:1f:bb:f1:e5:03:16:c6:8a:6d:93:
9c:08:c3:08:81:62:5e:f4:07:ed:0c:e0:8b:f9:2c:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:66:50:72:B6:7D:64:D1:A1:09:29:5A:07:DA:C1:CC:CC:73:97:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
X509v3 Authority Key Identifier:
keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.71.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:58:e0:a3:db:45:eb:0d:e7:6a:84:31:b4:bf:c1:15:12:6d:
98:97:27:46:84:3f:34:90:87:a2:92:0b:f0:3f:7e:27:7b:04:
d5:fd:c3:4b:29:59:43:b8:32:b5:1f:04:75:22:23:a1:a5:d2:
ee:19:0e:bd:58:b2:20:e7:fd:50:a2:24:dc:bc:f2:40:af:b7:
02:68:2d:35:09:e8:bb:54:d8:13:fe:b2:50:5f:10:93:33:35:
9d:e8:58:6d:95:e0:04:94:85:17:20:e0:a0:d3:77:4d:f0:a6:
92:6a:9c:33:f8:c0:e6:48:8a:e0:d6:ff:79:84:d1:30:ac:5f:
f5:90:e5:51:62:8c:d8:e1:62:bc:d5:68:b8:58:c0:ee:4e:d9:
f1:39:b4:b9:8c:03:9c:72:ad:0d:40:24:90:f1:c8:df:01:7c:
8f:07:63:7e:60:49:f0:a0:c3:49:93:43:71:d7:b1:cd:7b:f5:
09:87:0e:d2:c4:aa:15:2e:f4:65:3e:01:02:60:3d:df:21:74:
22:68:ed:c8:70:25:ee:fd:88:6e:b9:7b:24:36:fb:16:01:21:
b7:f6:bb:90:10:6e:da:da:6a:f7:a0:4d:12:25:82:53:7c:1f:
24:dd:2c:5c:15:f4:fb:dc:d6:51:44:76:59:52:bf:f3:54:a5:
09:ec:e9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:42:14 2025 by rpki-client