Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa
File: 767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa (raw, json)
Hash identifier: 66p1le+Oi+/mbqXtsUCYZSlb+p5G73Z5/QvCKp20eAQ=
Subject key identifier: BB:33:3B:0B:5F:CF:87:9C:8A:51:06:B1:05:7C:05:C7:2E:E0:21:0A
Certificate issuer: /CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Certificate serial: 010D0C9F4328584832F02AA936200091334C7A00
Authority key identifier: D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 40501
IP address blocks: 216.235.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:2a:a9:36:20:00:91:33:4c:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d34411-235d-4dbe-8a9c-f2dc11d75566
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=72e30e56-4395-453f-86a0-111e196eda2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:bb:32:fd:4d:ee:37:89:3d:52:b8:e1:8c:
d3:c7:b6:bf:1f:82:5e:76:af:c1:5f:3d:1e:7c:78:
31:68:c2:9b:d0:a7:dd:66:c5:24:80:c2:65:7f:27:
e2:5f:d6:f8:d9:68:58:05:e5:01:31:db:7e:92:09:
b7:ff:aa:70:58:49:a2:e4:d3:00:6c:b3:fa:99:aa:
9b:8d:2d:56:79:0d:15:ca:28:90:61:7b:ae:51:cf:
da:2e:1e:22:f7:2b:51:bd:36:31:f9:8c:0f:b8:38:
67:a3:b9:af:aa:93:4f:fc:8d:1d:44:9f:17:50:28:
5f:66:59:94:55:80:4c:91:1d:b7:9a:a6:36:d6:00:
8a:ce:f6:30:19:bc:08:51:9f:03:46:d1:4f:1c:41:
7c:bc:9f:d4:bf:a3:70:e9:81:c7:37:f6:0a:a6:f4:
f8:fa:06:eb:d9:b8:a2:86:78:55:b5:6e:2a:68:64:
d9:e7:2e:77:23:c6:8e:55:49:51:a8:f8:01:53:b7:
58:f1:22:e3:c8:85:0a:65:1b:55:ab:12:4b:05:c2:
2c:21:5f:31:7b:c8:7b:71:b9:8a:95:f0:81:d7:e4:
55:bf:2f:7b:d2:62:33:48:8d:75:11:5b:c2:13:f7:
36:e2:53:b8:bf:ed:f4:26:b9:ce:e5:73:11:9d:c6:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:33:3B:0B:5F:CF:87:9C:8A:51:06:B1:05:7C:05:C7:2E:E0:21:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/767a0d36-7270-3c3b-a716-5ca4aba1e19f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566/f4d34411-235d-4dbe-8a9c-f2dc11d75566.crl
X509v3 Authority Key Identifier:
keyid:D6:09:32:F4:12:95:F8:84:97:0B:EE:6E:CA:AF:BC:72:47:AC:DD:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f4d34411-235d-4dbe-8a9c-f2dc11d75566.cer
sbgp-ipAddrBlock: critical
IPv4:
216.235.81.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:b1:41:73:13:7f:38:37:eb:26:dc:84:77:c4:01:8b:08:df:
5b:06:b2:9e:4c:3e:ba:72:15:62:34:8b:17:32:a2:9f:c8:1b:
cf:9a:78:12:0e:10:4f:a3:5a:3d:ba:f7:74:e7:6a:90:90:ae:
48:37:7e:77:85:04:2d:48:e4:45:24:89:64:c0:19:2c:46:06:
af:57:41:cb:fd:06:6d:34:66:fb:ff:eb:9d:d7:17:f7:39:82:
4f:80:cf:d1:a3:3a:aa:51:1b:5f:b8:4f:29:20:c6:c5:48:8d:
3e:ba:aa:fa:4c:95:d1:96:69:69:c4:89:1a:ec:af:54:36:31:
72:13:1d:2a:ec:77:d8:f0:94:bd:d7:8e:05:a5:19:1a:69:06:
32:8b:ad:e0:9f:45:bd:f2:aa:3f:90:67:e6:01:5b:c0:08:f5:
83:51:03:f0:a3:9c:33:64:2e:de:70:74:c3:e3:4e:54:ee:2b:
f1:2f:9c:50:32:7a:f5:01:9f:03:ee:73:ce:c8:f0:6c:d9:76:
81:30:9e:74:c0:cd:fb:c8:06:19:40:81:49:25:e2:dc:30:a5:
a9:58:3f:11:64:6a:70:b8:dc:59:4c:0b:23:11:02:70:3c:f0:
5f:eb:4e:b9:b7:61:23:80:56:5d:3a:5d:6c:10:9a:20:d9:61:
e3:e2:c5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 19:37:47 2025 by rpki-client