Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ad88f5d4-90ec-3832-a8a7-1ed75aa8d212.roa
File: ad88f5d4-90ec-3832-a8a7-1ed75aa8d212.roa (raw, json)
Hash identifier: cZ9/pXAEPZtMpgPj+8JLlHvPUdCKRpKd4nwX4uCB5Rw=
Subject key identifier: C2:66:4D:85:98:B9:8D:4E:3C:D5:51:D3:21:91:5C:8C:81:E5:0E:77
Certificate issuer: /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial: 010D0C9F432858489340A6B0A7A531124E2A5F20
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ad88f5d4-90ec-3832-a8a7-1ed75aa8d212.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 15267
IP address blocks: 216.239.0.0/19 maxlen: 19
216.239.0.0/20 maxlen: 20
216.239.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:a6:b0:a7:a5:31:12:4e:2a:5f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=9bf391de-abdf-4f74-804b-599b8574aadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:18:11:80:6f:b5:34:87:08:1b:4a:10:68:
c5:ce:25:76:bc:c2:d2:de:7c:c8:d4:ca:06:3e:3b:
13:db:2b:b0:f1:7e:85:a2:e2:61:8e:ff:a0:12:1f:
c0:77:8c:a9:cb:69:fb:ed:b2:02:8b:0a:f5:78:91:
0f:ec:54:be:8c:60:5f:ef:2a:f8:26:ab:cd:42:df:
60:e4:54:70:2f:4b:78:9b:b4:9e:35:91:13:8b:fa:
1e:77:52:32:71:e6:d6:5e:16:79:2e:ec:ee:a2:ea:
9c:2d:bd:00:b3:86:9f:b4:0d:b9:88:a4:5d:9e:b1:
4b:9e:84:3e:71:8a:c6:9c:3f:20:0a:04:e4:5c:ef:
38:19:3e:57:80:46:1d:9b:f6:cf:c7:14:b9:32:0c:
89:a3:0a:26:05:cd:08:78:ad:ff:52:6d:cd:e2:38:
b5:c0:81:dc:86:34:01:79:9f:d0:51:f7:8f:f0:6a:
ba:e6:a9:1e:59:b6:22:08:56:03:3d:66:47:38:76:
21:89:0a:9b:c5:09:b9:f8:dc:e6:7f:57:db:2b:34:
71:c2:95:00:1c:3f:09:4a:39:c9:a5:a7:f5:64:25:
05:98:0c:90:1f:79:45:6b:05:64:02:b3:bb:1b:77:
fa:e7:19:41:05:cd:24:a1:fb:3d:5a:cd:02:30:64:
90:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:66:4D:85:98:B9:8D:4E:3C:D5:51:D3:21:91:5C:8C:81:E5:0E:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ad88f5d4-90ec-3832-a8a7-1ed75aa8d212.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
X509v3 Authority Key Identifier:
keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.239.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:af:fc:98:e9:66:3e:d5:82:b9:97:54:a0:2a:a6:ef:d9:8e:
33:62:87:1c:99:2d:78:2d:58:a5:43:20:d1:89:22:04:c8:39:
a9:1a:48:0f:71:cf:86:2b:6d:00:7e:23:81:dd:a3:cb:b4:1e:
73:05:dd:25:d6:eb:7d:94:ac:97:5d:dc:2b:87:4b:76:a9:3c:
c0:61:85:a6:3c:a8:52:81:96:b4:9f:e7:e6:93:99:a1:3e:c2:
1d:2f:ec:f3:7d:cc:30:fb:75:50:b5:b2:44:54:31:d1:32:94:
27:56:1c:9e:e1:3d:5a:39:2a:4f:61:40:a1:3d:c3:55:b3:3d:
55:b9:61:0f:f1:50:bc:b7:9b:a4:ec:02:25:12:f3:32:10:0f:
cb:bb:18:3f:07:d8:39:1b:89:9e:b1:da:e5:09:ba:51:7e:7b:
f9:67:78:14:96:9f:1b:80:94:b4:b1:a8:4d:02:a7:f7:5f:05:
0d:82:35:c7:48:7d:d2:05:43:46:0e:15:af:2f:bf:d1:d0:66:
f0:9d:45:04:28:5c:fe:53:a5:fc:98:b8:07:32:7e:e0:da:30:
20:d3:5f:52:6c:7a:79:5a:83:e3:53:ee:31:75:79:6e:65:43:
df:c2:e7:c0:bb:8c:9b:56:18:66:69:cb:ec:50:fc:56:99:0e:
6d:0b:07:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:40:10 2025 by rpki-client