Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/9f1eeb7e-60bb-352f-aa40-5017d5bd2437.roa
File: 9f1eeb7e-60bb-352f-aa40-5017d5bd2437.roa (raw, json)
Hash identifier: 1RYWgbo4m6QNAOC729Q3Jf4tfuSrzZrkPdpdwheu4zU=
Subject key identifier: 9D:41:F8:B6:05:40:70:A2:B5:31:AD:AE:80:F0:CC:18:0D:22:0A:A0
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858483B500B7F3F1EF080205DB400
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/9f1eeb7e-60bb-352f-aa40-5017d5bd2437.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 394708
IP address blocks: 216.255.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:0b:7f:3f:1e:f0:80:20:5d:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=21f82c77-cc61-4c7e-9829-704c68e8d1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:21:e8:97:90:70:28:6a:fb:94:7a:db:1d:
6f:cf:26:1d:17:01:08:e0:3f:54:1c:fd:8f:e2:11:
c1:29:be:86:25:ee:07:e6:03:04:f5:a2:a0:6b:ed:
10:9a:d6:ec:df:db:2a:10:a2:21:1c:ef:ed:de:e1:
67:f0:35:47:fc:a2:a8:f9:79:41:e1:50:6d:49:fc:
08:3b:c3:54:4f:8f:61:2f:43:75:04:a0:07:1d:72:
8b:06:ed:ac:24:70:69:20:ed:4d:88:df:66:df:12:
cd:68:e7:52:d1:d2:74:3d:61:7e:e0:47:18:f4:b7:
46:b3:83:6e:97:76:e1:a2:2e:a0:ef:09:00:62:83:
95:44:91:3b:6b:50:8f:7c:26:1c:58:f3:da:dd:6f:
9d:a3:4d:6e:f2:ba:d9:34:ab:b5:e3:35:d5:8d:9f:
01:fd:d1:4e:31:82:60:40:47:ec:5b:62:98:66:12:
8f:e8:a9:3b:30:d4:1d:ef:83:7e:22:be:7d:ab:c9:
a5:14:b5:cb:2c:11:a0:fd:8b:97:88:f4:5b:ea:7a:
aa:0c:7e:24:19:82:f4:05:ac:bf:7c:ac:58:aa:dc:
ea:2e:50:fd:fa:73:81:04:22:b4:4e:e5:51:10:e5:
ac:cf:e4:dc:85:0d:76:f8:2d:2f:5c:db:0b:64:be:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:41:F8:B6:05:40:70:A2:B5:31:AD:AE:80:F0:CC:18:0D:22:0A:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/9f1eeb7e-60bb-352f-aa40-5017d5bd2437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.255.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:b6:10:75:0a:3e:a8:55:e5:26:71:66:33:69:88:24:32:81:
ef:49:68:bd:5c:45:be:db:55:7a:4c:68:af:46:7d:3d:07:c5:
54:69:0d:06:ee:a8:a7:a7:99:c3:aa:d3:82:79:5e:87:4b:5e:
79:91:cd:b0:b3:d7:97:a4:15:b7:af:7a:f4:b5:ef:60:1c:c8:
f7:f6:67:d2:d1:16:f2:de:8f:fb:dd:cd:c7:74:f4:2b:d7:8c:
6f:69:8a:b5:fe:27:45:0b:d1:27:bb:f3:9f:06:48:dc:c4:50:
d9:cf:01:9c:40:47:4b:13:47:f7:c6:53:33:61:43:b1:1a:74:
08:fc:74:b7:bd:aa:df:6d:d6:73:c8:a2:4d:50:ba:01:dd:be:
2b:3d:f2:5a:01:36:3f:b4:46:4f:8a:55:f1:e6:31:99:b7:c4:
f5:09:66:9c:52:5a:7a:5a:63:ac:49:f9:ca:45:ec:b6:ed:71:
c8:76:56:c3:85:6e:83:d2:51:ca:6a:36:d6:4d:15:85:3d:01:
1a:22:82:2e:4f:4e:53:b0:56:8e:47:36:eb:8b:14:5c:6c:bc:
bf:ca:4e:fa:8d:c2:b0:ab:5b:b8:21:3a:90:40:6a:33:aa:4a:
9a:bd:b7:b9:08:d5:be:1a:8c:01:ea:ce:dd:27:bc:98:24:b7:
97:67:09:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:56:50 2025 by rpki-client