Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/8091efe8-79f3-3f71-b06c-f8011ffc4c4e.roa
File: 8091efe8-79f3-3f71-b06c-f8011ffc4c4e.roa (raw, json)
Hash identifier: 6R3/Knw1SGKBk6z0vrNkEikb3kz4uLgnxGwbpXASGtU=
Subject key identifier: D8:34:B0:B8:EB:4B:31:39:E5:31:76:D3:16:F6:26:DF:35:82:78:4E
Certificate issuer: /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
Certificate serial: 010D0C9F43285848037B647BE85F5BC8E9A51A68
Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/8091efe8-79f3-3f71-b06c-f8011ffc4c4e.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 14618
IP address blocks: 216.99.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:64:7b:e8:5f:5b:c8:e9:a5:1a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=1d530b18-90d7-46ce-b64a-6f1a779b57be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:9e:25:4f:dc:99:da:2a:f3:db:2c:89:ea:
f1:1f:83:2c:39:15:0a:d9:04:59:47:c4:c5:0e:02:
ae:e5:ae:c8:09:41:1e:bd:13:56:1b:ce:0e:74:d6:
a7:30:6c:db:9e:59:52:44:78:94:ab:65:2c:8f:66:
0f:74:74:9e:6e:35:fb:5c:93:74:49:27:92:ae:a7:
98:77:72:7b:e6:e2:5d:1d:10:3d:fd:9d:c2:13:23:
b5:a5:39:07:06:9d:4b:db:42:82:27:b0:51:c8:e5:
f1:77:03:7e:37:d5:71:1d:e3:6e:79:08:3c:a7:9c:
11:e1:a8:7f:52:6d:cf:43:fd:da:ca:b2:4f:35:c5:
93:f9:38:1b:f9:40:69:36:32:d4:32:34:d7:c2:10:
24:4a:07:ea:2e:68:44:c0:79:55:5b:cb:19:cf:10:
de:bd:8a:14:b1:8f:3f:e8:47:8c:42:e9:f0:7a:99:
79:07:73:80:9c:52:47:65:88:48:5c:12:8e:b5:5a:
e3:ce:1e:9d:27:50:6b:64:e0:2f:82:b2:96:d6:4e:
cd:34:f2:0c:41:1c:c0:ae:1e:c5:65:9b:14:e3:41:
92:38:03:bf:2c:d6:ca:84:20:cf:74:d6:5f:45:51:
29:46:08:d2:40:72:6e:f6:63:1c:45:34:5a:52:71:
2b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:34:B0:B8:EB:4B:31:39:E5:31:76:D3:16:F6:26:DF:35:82:78:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/8091efe8-79f3-3f71-b06c-f8011ffc4c4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl
X509v3 Authority Key Identifier:
keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
sbgp-ipAddrBlock: critical
IPv4:
216.99.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:0b:85:e4:2b:67:26:52:ee:27:1c:4d:bb:f5:4b:ad:e8:7b:
14:a3:fb:d3:7f:e6:e0:7c:ee:fe:12:76:f1:ce:ae:bf:3c:af:
2c:b1:8c:8a:0b:2e:d0:fe:94:bd:3d:4e:99:ce:db:b9:c1:17:
d0:db:67:ff:24:48:d8:57:e3:71:5d:4b:52:2d:bf:5e:7e:4d:
72:b3:4a:09:39:a0:9f:56:71:7c:f3:93:9f:c8:6e:3f:a8:87:
c4:ed:0c:03:2c:16:67:8c:51:ab:6f:42:fb:f5:9b:0d:3e:22:
4c:60:70:f1:cb:ed:05:b3:84:d6:7d:85:2b:49:e0:fa:c8:07:
92:8c:72:22:48:ff:a2:cd:df:53:c6:c9:6d:fd:42:34:e0:c8:
14:57:a8:7c:f5:dd:a2:18:c5:7c:48:f5:09:b6:ab:fa:f6:ec:
2d:69:fd:a1:79:84:e3:85:12:60:df:45:ce:cd:55:ea:f9:3c:
0c:ee:0e:8b:68:eb:3e:75:81:29:6e:5a:af:09:a0:fa:9d:e2:
e0:23:b8:1e:80:52:bd:b2:96:cf:15:0e:bc:5c:8d:e5:0b:e7:
2c:4f:82:a9:7b:42:f2:7e:50:a0:d1:ad:61:cb:00:ca:4b:88:
e6:ff:8e:88:ee:33:21:cc:24:ab:08:97:6b:3d:b0:6a:56:ea:
32:ca:2b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:24:33 2025 by rpki-client