Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa
File: f3485625-9688-304a-b7ce-39a5f6982850.roa (raw, json)
Hash identifier: 8isIaIYUEL6QNVnKziL0P+3Ki18McFaOfuP9UTrBxIA=
Subject key identifier: 9A:42:EB:29:98:A3:58:05:E9:2F:A4:CC:86:2B:35:48:D7:8A:07:FC
Certificate issuer: /CN=1dc67402-ba21-48d8-9973-37169338b194
Certificate serial: 010D0C9F4328584835BA9A97CD5E68762FFA82B0
Authority key identifier: CF:E1:95:6F:E0:AD:DE:15:72:C2:1F:CF:03:85:B9:BB:87:08:1D:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa
Signing time: Sun 15 Dec 2024 02:00:39 +0000
ROA not before: Sun 15 Dec 2024 02:00:39 +0000
ROA not after: Sat 15 Mar 2025 01:00:39 +0000
asID: 396982
IP address blocks: 216.114.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:35:ba:9a:97:cd:5e:68:76:2f:fa:82:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dc67402-ba21-48d8-9973-37169338b194
Validity
Not Before: Dec 15 02:00:39 2024 GMT
Not After : Mar 15 01:00:39 2025 GMT
Subject: CN=817f9bc8-e099-4b0c-b1b9-4959cbcbcf9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:6d:67:13:37:8b:12:55:75:a8:38:f5:d4:
26:67:31:9e:ac:c6:87:11:e4:31:17:47:8d:9c:8d:
03:c9:f5:55:bb:76:11:71:60:39:7a:02:e9:20:d4:
60:ad:83:f6:fc:7a:0c:1a:15:8e:46:f0:dc:90:1f:
4a:00:44:e6:02:06:0a:e2:e7:e4:e0:6f:33:13:a6:
23:7f:64:59:12:57:9d:8b:a3:d4:c5:26:6d:77:1b:
90:3f:d3:4c:1e:ae:d5:95:4a:6d:ec:1c:d2:dd:99:
84:ad:75:d2:e8:93:fc:05:67:ed:40:8d:89:e2:0d:
c3:1d:7a:dc:06:27:bc:93:95:60:e3:f5:7f:0c:1a:
45:15:78:c6:78:97:2c:22:47:d3:69:be:0e:50:b3:
f0:ae:6b:11:f4:98:72:e3:de:31:91:d5:1c:9e:7e:
00:e5:59:5a:9f:64:6e:ac:67:c5:a1:a2:de:23:61:
ab:7b:72:93:da:e5:5d:f4:e1:a8:a7:38:f6:25:20:
d0:a5:fc:fa:61:0a:ca:1c:aa:17:bb:d3:ee:ec:13:
e0:2c:21:d9:41:b1:74:4d:fd:52:ce:01:27:57:d4:
75:73:b1:ee:5f:63:b5:f2:0c:56:57:1e:e8:82:f3:
0b:25:15:6d:6c:b5:36:dc:77:69:ff:9b:91:60:81:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:42:EB:29:98:A3:58:05:E9:2F:A4:CC:86:2B:35:48:D7:8A:07:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/f3485625-9688-304a-b7ce-39a5f6982850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194/1dc67402-ba21-48d8-9973-37169338b194.crl
X509v3 Authority Key Identifier:
keyid:CF:E1:95:6F:E0:AD:DE:15:72:C2:1F:CF:03:85:B9:BB:87:08:1D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1dc67402-ba21-48d8-9973-37169338b194.cer
sbgp-ipAddrBlock: critical
IPv4:
216.114.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:1e:92:a3:53:86:9d:da:2e:0d:50:8d:db:f8:9a:75:ec:f7:
34:a9:8b:22:56:18:7d:ee:2c:3d:3b:09:32:2e:03:46:62:da:
0a:43:a2:8d:bf:1e:6b:29:cd:46:ac:48:ba:cf:d9:3e:8e:1c:
38:8c:34:e8:7f:1a:1a:f3:5d:49:d0:5f:d8:45:48:6b:ca:1c:
7e:a2:d0:11:54:36:52:1c:00:99:a0:94:55:2a:31:35:9a:c0:
31:50:ba:4c:0b:16:f1:45:f8:ef:38:92:42:86:b2:85:10:b4:
1d:27:38:e4:48:90:49:ba:4a:60:3d:c1:7a:01:ce:56:7e:2d:
84:39:b8:a8:45:35:ba:65:3b:15:ea:1b:0f:11:ba:1d:c2:a4:
75:7e:90:c1:98:14:53:bb:21:c9:d7:15:10:f9:af:cd:e3:96:
f7:87:64:db:f9:cd:8d:8e:73:58:36:39:fd:b2:75:0d:a9:da:
eb:53:b8:b4:22:1a:55:cc:b8:fe:c7:3e:f0:92:75:f2:90:11:
39:96:82:ea:4e:60:e8:a8:3e:2d:54:fa:04:7a:92:be:ac:a0:
1f:5e:72:5b:f9:a1:69:96:19:63:b7:72:e3:30:08:54:9a:83:
2e:fa:89:73:ea:87:0a:8d:31:ab:2a:bb:6d:bf:d5:08:f3:27:
ed:3e:d1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:50 2025 by rpki-client