Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa
File: bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa (raw, json)
Hash identifier: /38a1Mfxp6mOypLVttc+iU7tSIPuSMMm4Gsz65gXHgQ=
Subject key identifier: F5:A0:69:1F:E4:1C:95:78:27:BC:4A:A0:9B:29:35:A8:F3:B6:C6:0F
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858480EA51E23BC01C399E6049CC0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa
Signing time: Sun 01 Dec 2024 02:00:39 +0000
ROA not before: Sun 01 Dec 2024 02:00:39 +0000
ROA not after: Sat 01 Mar 2025 02:00:39 +0000
asID: 7342
IP address blocks: 216.87.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0e:a5:1e:23:bc:01:c3:99:e6:04:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Dec 1 02:00:39 2024 GMT
Not After : Mar 1 02:00:39 2025 GMT
Subject: CN=89fc0729-f526-4118-b932-cd43661fec92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:4f:1e:ea:d8:68:a4:6b:18:2c:05:f6:1c:
5a:ee:bc:93:23:96:98:56:64:38:ee:2e:35:6e:4d:
22:d1:51:ae:7d:ef:46:37:d8:63:95:51:b6:30:6a:
df:ff:79:47:33:9c:86:29:e6:5f:06:b0:43:44:e9:
e9:23:43:92:7c:e7:7e:08:eb:34:b4:f0:15:ce:2b:
c2:e8:59:f9:62:bc:dd:6b:8a:5b:bb:4f:dc:62:21:
87:22:f3:c9:55:72:62:61:a7:65:a7:fd:96:6d:5f:
23:08:30:7a:aa:ef:5e:fc:2e:56:33:85:c8:60:e1:
37:3e:3c:2c:21:3b:d1:d6:7f:52:bd:9b:08:8a:68:
46:23:b5:a7:7e:19:0d:1d:d8:97:06:7e:f4:64:20:
c9:93:dd:19:5c:3d:6b:7b:3d:11:05:cb:ff:ee:23:
a4:b9:71:48:74:a2:79:72:86:ba:dc:22:58:c0:cd:
e1:c1:76:af:7c:35:11:20:99:6b:16:8b:70:1a:20:
43:d5:9d:c9:24:f0:7f:35:7a:d5:bd:4f:92:92:ad:
63:20:7d:d1:4d:ad:3d:88:1f:8c:67:4b:7b:17:a8:
cf:1a:df:f1:e3:c5:b2:36:0a:29:c2:e7:75:b5:e6:
17:e6:7e:95:4c:7b:9f:b2:1e:17:5a:90:51:fd:c2:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A0:69:1F:E4:1C:95:78:27:BC:4A:A0:9B:29:35:A8:F3:B6:C6:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/bb5c2efc-e021-3217-80e8-26fe6b2974ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:05:a3:5a:d3:00:a9:f7:1d:54:8d:e6:12:69:69:4e:d3:c2:
9f:38:8b:56:fa:b8:b2:7b:e8:b7:1b:46:12:07:3d:26:34:e2:
d5:4a:0c:e8:5b:e2:67:46:ff:6f:3d:82:c5:5c:c1:18:fb:e2:
d0:c5:0f:a9:72:29:30:de:88:95:79:1a:fb:4c:a1:df:69:20:
a6:ab:10:cb:93:66:52:51:a4:35:35:4d:9c:17:8e:3c:95:a0:
5e:e4:78:67:44:57:ba:12:d1:e0:11:b8:fd:2b:3a:f2:2f:79:
7b:fe:78:82:5e:06:2e:e3:d8:1b:c8:6b:a2:14:93:9a:48:99:
d5:0f:ce:65:ff:74:2d:0a:92:5b:54:25:c6:44:9f:74:50:99:
44:39:00:24:05:06:cd:db:29:b0:ba:f3:cb:01:cd:35:51:1a:
2a:6c:1a:a0:7c:1c:f5:45:30:9f:4b:db:ad:7b:fb:2f:79:af:
87:88:88:11:d5:c3:98:a7:2a:0a:63:0d:44:be:fa:81:7d:25:
07:b4:96:55:cf:c2:cd:c6:3e:8d:ab:34:e3:42:1e:72:17:f1:
6f:f8:f8:f6:9f:4e:b9:f4:a4:fa:a4:93:4b:c1:c9:78:67:20:
3e:43:17:6b:d7:18:c0:8e:e3:3d:38:a3:e6:d7:97:c3:78:4c:
a8:4f:3a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:04:27 2025 by rpki-client