Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa
File: ee02f89e-d151-39e0-a655-f74770f9addd.roa (raw, json)
Hash identifier: LSVREyxChm3iraosOxRe+7brRn5Bsl+fwA786ysxDmw=
Subject key identifier: F1:CD:35:2A:71:93:E9:BE:25:41:81:DF:0A:46:E6:99:8B:15:E2:19
Certificate issuer: /CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Certificate serial: 010D0C9F432858483E1AAAA8E6D123805E4A4780
Authority key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa
Signing time: Wed 18 Dec 2024 02:00:39 +0000
ROA not before: Wed 18 Dec 2024 02:00:39 +0000
ROA not after: Tue 18 Mar 2025 01:00:39 +0000
asID: 31875
IP address blocks: 216.21.216.0/21 maxlen: 24
2604:ebc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3e:1a:aa:a8:e6:d1:23:80:5e:4a:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d
Validity
Not Before: Dec 18 02:00:39 2024 GMT
Not After : Mar 18 01:00:39 2025 GMT
Subject: CN=9837bb3d-77c6-4a9b-bc05-3566ad217c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:b3:52:a8:3f:5e:70:3c:5d:12:dd:61:63:
12:0e:4e:d8:08:56:54:b6:0a:fe:57:b7:5d:3e:42:
d1:af:2b:b7:8a:91:bd:98:53:a2:a3:c6:7c:55:c3:
b1:ed:b8:5a:ea:5f:c2:93:4f:05:84:89:86:39:66:
40:e0:5f:7f:ff:d6:30:d7:c1:68:75:14:bf:4e:2f:
b6:12:b8:b2:5c:bf:bd:57:bd:f8:50:f7:dd:0a:f3:
e5:59:1a:c8:af:68:16:4c:42:be:6b:41:47:48:b3:
b1:c2:a8:2f:4b:aa:5b:8e:64:99:ea:80:cf:96:df:
a4:67:a7:f9:87:f6:21:e4:ee:8d:fb:f7:75:b2:bf:
cd:30:62:a8:16:b0:4f:da:7f:eb:87:2a:e4:70:c5:
d9:cd:db:a6:ad:f8:29:e0:3e:38:6f:f1:79:39:67:
35:40:33:89:ac:a3:54:2a:cd:e1:4d:ab:c6:9e:12:
bf:96:4b:d4:b6:f1:72:4a:98:6a:7c:22:98:dd:30:
66:24:bc:19:15:25:9e:84:96:ee:d6:ee:9e:db:5c:
a9:f8:f9:ac:ce:78:b8:09:4a:17:4c:1d:77:d0:dc:
71:0b:98:ff:8d:92:ea:5f:16:f5:58:52:f7:04:84:
24:b7:4d:e1:2f:32:e5:32:11:80:4d:1e:bb:6c:14:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CD:35:2A:71:93:E9:BE:25:41:81:DF:0A:46:E6:99:8B:15:E2:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ee02f89e-d151-39e0-a655-f74770f9addd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.crl
X509v3 Authority Key Identifier:
keyid:4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.21.216.0/21
IPv6:
2604:ebc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:24:68:4e:74:d3:69:13:3b:9f:4d:17:3e:b2:5c:e8:50:99:
d1:c0:ae:00:17:8b:51:23:f8:0f:47:c7:c6:3a:e6:70:22:04:
77:00:3e:52:94:a2:77:39:a5:fd:fc:e8:43:6c:00:df:94:a5:
88:f9:d3:fb:4c:87:39:4e:cf:b5:fc:3a:c4:11:81:4b:f2:9a:
a5:ca:26:27:e4:b5:32:2d:d9:68:7a:81:c5:27:f3:03:78:55:
de:d7:e7:73:4f:6d:7c:9b:a9:12:b4:1d:49:db:f7:1c:17:66:
40:3d:97:fc:50:25:c9:e0:7c:91:01:f8:e7:2c:72:d7:d6:83:
f6:b1:47:d6:b7:c8:68:1b:4f:c4:11:03:49:a9:85:a2:d1:a4:
dd:a8:49:a7:b0:49:7a:78:30:d2:8e:1d:50:b7:43:d6:83:96:
b3:8c:f4:0a:45:aa:fe:77:65:2f:18:ff:30:b6:58:46:4a:a7:
93:cc:a8:6c:a4:57:a1:32:62:dc:e0:18:12:0b:5a:6d:42:b3:
18:99:b1:a7:d6:ca:03:25:df:c9:c6:91:06:1e:aa:9d:97:c4:
c7:2c:6c:0e:42:85:81:90:ce:1d:38:aa:bd:0c:f8:00:cf:2b:
28:dc:49:7c:db:d9:72:fe:7a:c1:d0:e0:43:93:c3:91:06:02:
90:ec:09:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:51 2025 by rpki-client