Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/35a50b61-1260-30d1-b52a-b4b9b574110d.roa
File: 35a50b61-1260-30d1-b52a-b4b9b574110d.roa (raw, json)
Hash identifier: Sv5sdc5RqknY+RQqQ44aCAsDZdsKjK69D7GWP/1Fg3Q=
Subject key identifier: 7E:00:E2:96:A7:50:CA:A9:D3:34:A2:A6:3E:F8:C8:50:18:0C:07:56
Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial: 010D0C9F4328584867FAE85A1D6B7575AF0C5FC0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/35a50b61-1260-30d1-b52a-b4b9b574110d.roa
Signing time: Thu 02 Jan 2025 02:00:39 +0000
ROA not before: Thu 02 Jan 2025 02:00:39 +0000
ROA not after: Wed 02 Apr 2025 01:00:39 +0000
asID: 16696
IP address blocks: 216.181.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:67:fa:e8:5a:1d:6b:75:75:af:0c:5f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Validity
Not Before: Jan 2 02:00:39 2025 GMT
Not After : Apr 2 01:00:39 2025 GMT
Subject: CN=269cb50e-178b-4cb4-988a-ddd593b8388f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:8c:c8:a8:f2:91:cb:23:0d:cb:75:24:4e:
53:83:17:b0:5e:71:9a:2d:18:47:6e:fe:7c:77:32:
c6:94:48:a4:66:a6:04:ad:09:d6:8e:80:04:e8:ec:
fc:44:a8:98:1d:64:74:de:3a:03:bb:c1:c6:b8:c1:
0c:16:cc:af:a8:8f:85:f5:4a:8a:a9:17:1d:5d:6c:
e9:65:21:7b:94:ae:e5:d8:03:e7:56:4a:31:83:5a:
cd:65:7e:c0:e2:cd:f7:4b:bc:2b:67:1d:5f:10:b9:
93:b1:20:7c:9a:72:30:ae:6a:a0:a7:88:aa:fa:bd:
d6:c9:de:ed:69:8f:8b:32:f7:24:a7:90:88:f2:4e:
7c:98:a6:e0:94:85:3e:0a:a6:a5:4d:30:47:fa:75:
44:55:d0:5c:29:67:1b:a8:42:4e:8e:15:b2:c9:e2:
c0:d1:49:f8:59:1f:4b:11:62:4e:3d:69:fa:fb:6f:
0a:2e:42:e0:73:2d:80:28:73:6a:fc:ac:46:da:05:
f3:9f:e3:6e:fa:94:1e:dd:c6:9f:e9:59:22:ea:75:
64:7d:9c:e0:8d:e2:c0:aa:af:11:9e:3b:42:ff:58:
8f:65:67:74:d1:1e:60:00:c2:bb:86:df:8c:f1:38:
b3:84:d9:26:03:52:14:dd:1c:4b:b7:9d:08:75:e7:
53:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:00:E2:96:A7:50:CA:A9:D3:34:A2:A6:3E:F8:C8:50:18:0C:07:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/35a50b61-1260-30d1-b52a-b4b9b574110d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
X509v3 Authority Key Identifier:
keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
sbgp-ipAddrBlock: critical
IPv4:
216.181.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:e1:ff:06:16:11:8f:bd:7c:7c:01:b2:79:f4:95:0d:f6:e4:
72:a3:34:3a:e6:cc:e6:f4:a0:a2:49:be:e2:8e:f7:6d:f8:1d:
05:a3:d8:e5:57:c1:a5:c9:68:28:80:d2:4c:09:29:f8:9f:40:
68:14:82:96:57:f6:46:63:f6:a0:b1:03:64:88:44:a3:46:cd:
4f:4b:08:64:67:77:4d:18:43:a3:2a:4d:a7:74:06:f3:5e:38:
39:4d:8a:05:4c:72:e6:8d:60:e7:ab:53:ce:fc:11:c3:73:36:
64:cc:52:ee:03:5f:ad:cf:f7:b0:5d:3c:90:01:aa:6e:70:81:
c4:43:5c:5c:75:cb:22:e1:cd:91:fa:52:be:28:dc:54:dd:5a:
fa:c5:7b:e7:a5:07:ea:9c:e4:ab:bd:1c:b8:57:20:6c:b4:8d:
c5:0d:3f:23:32:cc:6d:b7:e5:8c:11:65:d2:d6:51:72:90:cd:
9e:0d:81:34:53:da:5e:9c:40:56:1f:90:2b:2c:ee:74:da:4e:
4d:cb:3a:17:36:b3:db:ec:7f:72:a6:44:67:f0:5a:38:9b:7c:
70:75:f2:8a:84:17:dd:bd:0f:df:27:e9:5f:3b:82:0e:81:2a:
5c:6d:92:17:61:1b:2a:0e:a5:10:14:7c:ed:bd:4f:08:b6:74:
78:1d:1a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:31:09 2025 by rpki-client