Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8e3e6b2-d1dc-33be-bcd5-e0733b001b4a.roa
File: a8e3e6b2-d1dc-33be-bcd5-e0733b001b4a.roa (raw, json)
Hash identifier: E28LP1cRdaHLB41nlrkZ+V4CgedaPRQOlz+GqAEjPbk=
Subject key identifier: 3D:64:36:1D:9E:0B:F0:2F:AD:6D:56:BB:BA:46:D3:FF:72:E4:6D:76
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486D90564870D298C08CEDA880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8e3e6b2-d1dc-33be-bcd5-e0733b001b4a.roa
Signing time: Sat 04 Jan 2025 02:00:39 +0000
ROA not before: Sat 04 Jan 2025 02:00:39 +0000
ROA not after: Fri 04 Apr 2025 01:00:39 +0000
asID: 0
IP address blocks: 199.16.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6d:90:56:48:70:d2:98:c0:8c:ed:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 4 02:00:39 2025 GMT
Not After : Apr 4 01:00:39 2025 GMT
Subject: CN=8956df95-01bb-4f79-8ed9-e5d6d304af00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6c:31:36:f0:0f:ef:2a:88:2d:43:5c:41:b7:
f8:b2:f3:c4:76:1d:ae:83:73:39:7d:ff:ca:4e:d2:
8b:b8:d1:31:e1:0f:ff:87:31:b9:fc:16:fa:9b:ac:
e2:62:51:63:a8:96:ac:6c:c0:1a:f7:c9:04:fd:2e:
48:28:a1:85:be:a3:df:98:37:64:b8:f9:d6:1b:db:
78:ab:22:7c:3e:e6:bb:4e:ce:4d:36:c4:80:5d:ff:
02:1b:b6:9c:14:bb:c5:e4:f2:d2:da:9e:84:49:69:
80:00:c5:43:69:75:23:ac:e3:c6:04:c8:fb:16:a6:
d1:76:03:87:7c:1f:fd:32:f6:10:5e:a1:b6:83:3c:
7a:31:87:9d:4f:55:df:57:79:d5:c3:a2:63:2a:b5:
2f:5d:0b:49:b0:ff:e4:d3:f5:d9:c2:7c:25:93:15:
f6:32:ac:35:33:63:dc:11:c7:e9:9c:30:6b:9c:87:
c8:23:1d:7a:2e:13:66:d1:6e:55:4e:e2:17:c7:70:
ea:35:56:94:a0:ec:8f:2b:10:0a:98:6b:cc:83:5d:
79:88:33:66:7d:d6:d8:5d:53:03:95:d4:24:06:66:
39:f0:04:e5:33:29:d3:a3:50:7b:78:57:5b:0c:da:
cf:64:16:94:d8:1e:57:4b:a4:44:68:3e:ec:e8:1d:
02:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:64:36:1D:9E:0B:F0:2F:AD:6D:56:BB:BA:46:D3:FF:72:E4:6D:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8e3e6b2-d1dc-33be-bcd5-e0733b001b4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.16.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:03:06:7e:f8:1c:22:2e:39:32:34:2c:aa:94:17:3f:68:27:
e1:86:c3:43:60:f7:c1:79:e7:eb:bd:00:8f:5b:d4:3f:97:3f:
73:7d:b9:0a:a0:37:5f:46:66:9b:be:5d:bf:1e:d9:a1:ab:df:
69:84:e5:90:51:fc:d8:cc:81:2c:4a:c9:bf:1a:de:5e:80:39:
25:86:27:64:1e:a0:11:70:d8:a4:e2:29:4b:17:c3:42:ef:f8:
7c:b8:c3:11:aa:f9:d5:b6:f8:11:97:30:35:ab:cf:e7:5d:e0:
dc:ec:78:58:86:53:b5:a6:a0:53:59:36:45:21:e5:8c:30:71:
8b:4d:18:46:37:b3:15:8e:64:88:4f:af:f3:d3:70:32:30:f3:
5a:a3:07:fc:8f:40:34:90:49:fc:ce:14:ee:12:cf:33:56:1e:
17:74:0d:8c:c3:23:dd:09:99:ea:a0:08:e6:ab:01:dc:17:46:
45:db:f5:a8:53:34:ac:87:cb:a8:91:1d:2d:00:f2:aa:ec:7d:
58:97:a7:1b:3e:84:34:a5:3c:40:fd:43:18:d5:93:85:52:ab:
8c:cb:ba:af:c8:f9:23:1a:cd:cb:f4:13:d1:78:2d:1c:56:9d:
e5:64:01:a2:b2:0f:a6:bc:bb:08:bb:10:c4:4b:03:ff:27:f6:
ad:f3:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:29:54 2025 by rpki-client