Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa
File: af8f6829-25f2-342c-8e95-5e209025a010.roa (raw, json)
Hash identifier: bYIGFSf7rbqStulTsnHrqjNZw05UtDBsQHwyga4rOK0=
Subject key identifier: 14:41:91:98:30:94:C1:97:21:A1:4B:33:D6:F5:38:14:10:18:AE:9D
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F43285847EE7D4F621E7D1CFC3A82620C
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa
Signing time: Tue 19 Nov 2024 13:34:49 +0000
ROA not before: Tue 19 Nov 2024 13:34:49 +0000
ROA not after: Mon 17 Feb 2025 13:34:49 +0000
asID: 20431
IP address blocks: 216.168.228.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:7d:4f:62:1e:7d:1c:fc:3a:82:62:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 19 13:34:49 2024 GMT
Not After : Feb 17 13:34:49 2025 GMT
Subject: CN=e2c6f3d5-a493-4002-99ab-0f40c88b8696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:df:12:6e:08:ef:4f:a3:8e:6b:25:65:f7:
0b:f2:c7:d0:ce:1a:44:37:82:ed:17:14:20:b2:f2:
fe:ff:98:71:ed:6f:4b:48:72:77:49:67:38:dd:ab:
04:87:52:b4:2d:0a:22:6d:ab:6e:46:29:5a:94:c9:
db:e2:f5:4e:29:1d:24:3c:42:0a:1f:45:fe:d3:7c:
cc:2a:0d:7f:a1:85:ca:45:2c:16:42:8c:47:d8:26:
9c:2f:cf:c2:57:a3:e8:cc:1f:fb:0e:22:80:67:01:
a7:f9:d1:2a:39:6f:9d:00:c1:76:2a:79:bb:e4:db:
79:93:82:0f:66:a1:53:51:f9:54:91:65:f9:6c:2c:
3d:32:3b:e3:23:e4:bc:e2:90:47:50:e9:d0:da:18:
66:fe:4b:57:61:87:0b:b6:5f:83:f2:14:23:aa:e5:
c1:9c:a9:d4:62:97:1e:68:5e:36:f5:5d:a2:f7:3f:
24:b7:c5:eb:33:e3:ed:4c:e2:92:c6:56:2b:69:9e:
34:26:b0:03:cd:b1:16:03:f9:48:7c:53:0b:6c:66:
cd:ea:fd:53:52:f7:17:2f:7f:cf:1a:d9:d0:d0:2d:
f1:5e:9e:f2:37:a7:28:20:4a:01:3c:3e:91:c7:58:
20:4e:5b:c4:79:e9:53:8b:40:2a:61:5a:b4:6f:ec:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:41:91:98:30:94:C1:97:21:A1:4B:33:D6:F5:38:14:10:18:AE:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/af8f6829-25f2-342c-8e95-5e209025a010.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.168.228.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:c6:c5:fb:1d:a9:88:7d:c6:25:68:9b:bf:db:89:33:20:4e:
e8:89:4e:b8:b5:8c:e4:99:f0:00:33:21:a7:53:7b:3b:d4:e8:
52:c8:10:6a:9e:9b:a6:21:bd:fa:e1:d3:2e:de:8d:17:66:33:
e1:b8:12:ab:22:ad:13:cf:dd:8b:0f:47:ca:71:47:16:c3:f7:
83:a6:ad:a4:14:ee:c3:3d:61:9e:a2:5c:ff:a9:69:35:b0:da:
4a:01:8d:53:98:28:a4:ac:75:4b:40:d9:f3:d9:d3:8d:18:b9:
b1:e1:94:fe:b9:9f:ee:8d:b7:cc:09:90:32:29:b9:d5:df:7b:
64:f5:3a:0d:e1:db:f9:63:ca:29:27:24:46:70:d2:1e:13:55:
9a:e9:63:93:58:36:5a:ce:90:38:0b:eb:69:a5:26:ce:7c:e0:
4d:25:44:48:3c:5b:99:61:20:0d:c8:81:db:5a:c5:94:4b:ff:
af:9d:9e:81:95:50:7c:ce:49:da:2f:45:2a:3a:93:cd:71:09:
df:9e:84:dc:15:6b:0c:21:86:02:eb:10:5c:63:ea:04:7a:6f:
7e:90:fe:58:de:20:f4:6a:11:3f:63:92:d0:35:c4:86:e1:46:
dd:63:13:93:be:48:26:b2:fc:b3:03:48:4a:6c:c3:4b:60:77:
70:17:09:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:26:59 2025 by rpki-client