Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/443219a0-efe0-327e-b60e-0844a2070c85.roa
File: 443219a0-efe0-327e-b60e-0844a2070c85.roa (raw, json)
Hash identifier: WjiUK0vch9T0QGgYr/lIIuQe4MBObttpY3tFhmgEi8g=
Subject key identifier: B8:CA:58:99:52:3A:C3:41:DE:67:E3:14:16:FE:C0:D3:80:7D:50:49
Certificate issuer: /CN=60853e5b-d7a9-4bc8-8250-635257ad49bd
Certificate serial: 010D0C9F4328584845158B57C36B6F4688BEA1E0
Authority key identifier: 4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/443219a0-efe0-327e-b60e-0844a2070c85.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 11996
IP address blocks: 192.189.147.0/24 maxlen: 24
207.251.48.0/20 maxlen: 24
208.64.92.0/22 maxlen: 24
216.243.96.0/20 maxlen: 24
2605:6800::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:8b:57:c3:6b:6f:46:88:be:a1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60853e5b-d7a9-4bc8-8250-635257ad49bd
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=dad0406f-0021-4f22-95cf-c3945fcf3bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:fe:b7:8f:30:15:4c:2f:52:2f:cc:e3:7c:
cd:aa:bf:15:b7:92:f7:2f:a1:0a:17:82:74:28:94:
88:a8:0d:91:59:c7:85:92:57:3d:96:bc:de:f3:e6:
38:94:fc:e2:b0:95:a3:3d:22:25:a5:b7:df:cd:1a:
3f:68:7e:e8:99:1a:ba:e1:ee:1c:5a:aa:ad:36:9d:
29:2c:6b:9f:fa:08:74:19:38:38:0b:42:df:e8:5b:
ae:73:29:3f:dc:9d:d2:ff:92:7b:74:82:c0:f7:84:
7a:9f:3d:23:83:23:53:ba:ce:68:36:55:5c:15:74:
de:c9:82:1b:8a:8d:16:1f:77:38:b7:f8:7d:db:82:
fa:6f:33:50:8c:3f:e8:69:22:a4:5b:57:85:c5:90:
ea:4b:77:52:a7:0e:b7:10:86:89:9d:64:20:b7:32:
30:2e:26:23:3f:06:4b:83:2c:8a:07:86:2b:e4:71:
28:e0:5e:e7:8b:22:23:71:bc:b3:13:ee:a8:59:6f:
46:ec:47:c8:b8:f5:51:c9:6e:e1:0c:78:53:26:58:
f5:d5:76:69:a4:f9:be:5c:e1:25:14:97:e3:65:87:
46:f8:b1:ef:07:55:50:2d:7f:7d:c4:0f:a4:20:85:
b1:e4:91:dc:08:60:88:66:10:44:08:65:c6:21:1c:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:58:99:52:3A:C3:41:DE:67:E3:14:16:FE:C0:D3:80:7D:50:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/443219a0-efe0-327e-b60e-0844a2070c85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.crl
X509v3 Authority Key Identifier:
keyid:4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.147.0/24
207.251.48.0/20
208.64.92.0/22
216.243.96.0/20
IPv6:
2605:6800::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:d2:9d:e7:60:b6:bd:61:e6:32:f5:24:42:5e:96:92:a3:0e:
16:38:f2:da:5b:58:99:b0:5e:80:ff:93:8c:7a:a1:a7:ab:75:
e2:75:97:c4:7d:9a:73:9c:c0:5f:8b:77:15:43:20:f4:b7:55:
82:32:f8:13:9c:e3:7a:c0:81:9d:71:b9:c8:fc:cb:b8:ff:6d:
75:40:78:d9:4a:99:2d:49:d7:39:11:08:98:7a:2f:ab:0c:3e:
20:a6:a5:48:21:d8:08:bf:0d:e5:f2:a9:ad:89:cd:d6:2b:03:
9f:a8:75:e6:b1:d5:90:54:a8:9d:42:be:01:59:70:c1:3d:16:
e5:ea:6d:52:9e:21:35:12:52:fa:e4:ec:f2:47:c0:2d:d5:f0:
62:ce:fe:50:99:bf:69:8c:76:77:13:d3:d4:f1:b1:8b:05:f0:
88:83:01:16:89:9f:b4:6a:57:95:2a:20:bb:7b:41:83:fa:42:
09:38:18:a3:de:f2:4f:0c:10:97:9f:75:83:74:19:54:1a:04:
37:0a:cb:ec:1a:de:f2:64:8c:d5:05:a2:30:b9:5b:17:44:31:
45:c6:7d:4c:eb:3d:89:82:ed:95:53:72:bb:4f:52:77:5a:b5:
17:9f:9b:90:97:c7:00:a3:cf:08:db:c5:d3:80:28:cc:fa:7e:
08:42:cd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:56:14 2025 by rpki-client