Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4780f2b1-b3c0-3f5f-8bc8-c16b9cebce59.roa
File: 4780f2b1-b3c0-3f5f-8bc8-c16b9cebce59.roa (raw, json)
Hash identifier: 8Yu0P5RP0bCGHTt1J9hnDppG8rci0JNw8oGeTxeihBs=
Subject key identifier: FA:14:02:02:26:25:DE:7C:AC:16:43:24:23:89:68:A2:3A:71:29:1A
Certificate issuer: /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial: 010D0C9F43285848345568F8A907830158D7F280
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4780f2b1-b3c0-3f5f-8bc8-c16b9cebce59.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 3356
IP address blocks: 216.158.207.0/24 maxlen: 24
216.158.211.0/24 maxlen: 24
216.158.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:68:f8:a9:07:83:01:58:d7:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=aa9f10d8-46aa-40ec-9fee-84d636a84722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:50:01:02:3c:25:3b:88:95:a0:2c:4b:58:cc:
01:1c:10:a3:09:77:03:1c:63:cd:81:22:f3:d2:ee:
c3:11:dd:ba:da:23:d8:56:92:1d:45:9c:52:b4:c8:
5f:1a:d3:d5:a0:25:f1:75:99:77:71:e1:5f:ea:64:
75:69:91:d3:a5:73:5b:16:9b:ca:26:b4:a8:76:9d:
af:88:47:5b:61:da:cc:f0:0a:3b:7c:c1:a9:97:7d:
3e:04:59:b7:c5:4a:a3:ac:16:7a:1e:25:48:58:e4:
47:9e:07:a7:77:a3:00:3f:df:67:6d:3e:8d:8e:85:
05:3c:d3:b5:33:0d:66:1e:03:12:c0:cd:7c:aa:a0:
0d:a4:f9:0c:cf:ac:79:c0:99:35:02:d0:04:b0:ab:
9e:ce:97:49:5b:fc:2a:71:77:48:7c:09:a2:8a:a5:
a8:44:4b:0a:4b:0b:c3:9a:7d:61:a8:03:9e:7e:20:
85:9d:3a:ee:6c:66:31:12:ba:dd:9c:52:f0:a9:75:
81:8e:15:f1:40:e4:b7:6c:61:e9:91:6f:87:e6:14:
4d:08:0f:c0:5a:a4:42:e3:14:66:bf:a4:e5:bb:c4:
6d:d7:af:6c:9d:70:89:3f:76:f5:48:e9:67:e1:6e:
91:ab:0a:99:af:36:99:0d:08:30:e6:f1:19:a9:f9:
c2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:14:02:02:26:25:DE:7C:AC:16:43:24:23:89:68:A2:3A:71:29:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4780f2b1-b3c0-3f5f-8bc8-c16b9cebce59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
X509v3 Authority Key Identifier:
keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
sbgp-ipAddrBlock: critical
IPv4:
216.158.207.0/24
216.158.211.0/24
216.158.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:27:53:5b:c8:79:2d:a0:fc:71:45:2c:7d:4a:ff:3f:05:c5:
93:69:42:c6:07:8e:7c:a7:c6:9c:04:dc:51:38:a6:bd:4a:11:
77:ae:58:24:35:ee:45:9a:c9:db:9c:67:37:d2:93:83:5a:f9:
77:d2:9d:c3:fa:cb:c8:2c:48:b4:ed:7b:e3:9f:5a:90:89:3d:
b3:19:b9:1a:01:ce:48:e8:c0:6f:b9:b7:3b:80:1e:17:e4:f6:
c9:26:a3:11:c8:ca:ba:b0:f6:4e:0c:62:5f:e1:c1:3e:9e:bf:
d9:38:13:32:f8:77:f7:a7:c6:e5:65:e9:c5:56:01:47:a6:9e:
05:f1:f6:69:87:9a:d3:71:05:f2:ae:dd:43:dd:63:03:2a:92:
5e:65:f9:94:82:42:66:f5:05:51:43:77:32:73:35:2f:a0:90:
a8:0f:ca:75:bd:83:88:59:70:00:00:b2:c7:7a:6d:24:6a:5d:
0e:4e:52:5b:ef:13:5e:63:d2:54:72:38:8d:b8:8e:c8:5e:a5:
42:9b:f4:64:11:bc:80:dd:39:34:66:46:7d:70:3a:b9:ac:0b:
c5:29:ee:b2:85:ec:5a:20:e8:dc:ab:31:a1:47:27:8b:c9:27:
18:ce:fb:0e:0d:33:81:25:58:39:b6:7e:20:3b:5a:4f:fe:25:
d0:84:61:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:26:34 2025 by rpki-client