Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa
File: 3401e74f-a936-383a-95be-c5719615d9b9.roa (raw, json)
Hash identifier: DYuOT8j6GqJIce9DAQrY0KUqBJOVfsrD6ozsWtSCclo=
Subject key identifier: E3:91:85:8E:9E:95:27:DF:E3:8F:69:D9:17:B0:5F:EE:DC:70:AE:9B
Certificate issuer: /CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
Certificate serial: 010D0C9F43285848494564CC02C1C483E01CC880
Authority key identifier: 5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 13959
IP address blocks: 216.150.32.0/24 maxlen: 24
216.150.33.0/24 maxlen: 24
216.150.34.0/24 maxlen: 24
216.150.35.0/24 maxlen: 24
216.150.36.0/24 maxlen: 24
216.150.37.0/24 maxlen: 24
216.150.38.0/24 maxlen: 24
216.150.39.0/24 maxlen: 24
216.150.40.0/24 maxlen: 24
216.150.41.0/24 maxlen: 24
216.150.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:64:cc:02:c1:c4:83:e0:1c:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=4eec2957-b886-4145-8f5f-936f95383e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:05:b8:6d:5c:60:04:2a:0d:f8:46:10:09:
87:4e:c6:93:c6:b3:46:a6:09:64:ad:30:33:49:3c:
b3:b2:f7:51:a2:cd:d5:72:a3:9d:92:fd:28:2b:0a:
74:5f:ba:3d:c5:97:07:79:0c:d5:1c:50:7d:37:e3:
89:ec:fc:e1:ef:2b:84:34:51:48:4a:aa:32:70:60:
01:f1:7d:a5:4f:6b:bf:ac:e8:d1:24:4c:ae:21:b4:
a9:97:57:4a:e9:9e:49:52:2e:19:9f:f7:13:96:f2:
03:52:8e:37:c6:7d:87:47:60:63:9f:c6:c0:e0:a9:
36:93:c9:7b:17:02:97:90:86:02:6e:c2:9e:92:a2:
c1:76:b6:57:ee:61:c4:09:be:f8:55:df:30:45:25:
49:d8:04:c4:2c:6f:3e:66:c4:32:1c:93:56:20:2b:
2a:3a:83:76:d6:f1:31:30:f9:51:cf:ea:de:47:7e:
d5:74:d9:e9:bf:6b:7b:e9:3f:e8:9a:72:24:9f:dc:
18:b6:fd:4f:57:d8:82:95:42:fd:6d:da:0c:76:23:
93:34:3b:09:4d:be:77:df:2c:08:b5:23:e3:9b:d6:
a7:2c:6d:3b:91:69:08:0a:5f:73:ab:33:2a:e6:13:
4a:55:69:5a:92:70:7d:4a:c3:be:41:d8:6e:c2:6f:
7c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:91:85:8E:9E:95:27:DF:E3:8F:69:D9:17:B0:5F:EE:DC:70:AE:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl
X509v3 Authority Key Identifier:
keyid:5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
sbgp-ipAddrBlock: critical
IPv4:
216.150.32.0-216.150.42.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:4e:69:70:f5:84:03:e9:92:27:4b:e2:f5:88:f7:41:d6:0b:
70:82:41:58:c2:96:9d:e8:1f:1d:86:43:b3:7a:2b:f9:fe:d2:
9a:fc:5e:32:92:b5:9a:a0:2e:5a:73:20:60:64:22:78:71:f9:
4f:2e:d4:3c:71:2f:20:2d:88:74:3b:df:56:c6:9a:c7:94:2b:
af:cf:6c:ba:2f:b3:8f:53:b6:6f:89:f8:67:b9:66:de:52:bf:
36:48:05:db:e9:81:5b:56:8d:58:ad:a8:97:e3:c0:0d:ea:7f:
60:42:fc:cd:51:8f:83:c9:3b:8f:57:fd:86:a7:d6:48:c7:3d:
5f:06:34:a3:58:44:45:3e:10:03:cb:ed:ed:6b:ec:5c:c8:ca:
35:d7:68:39:7a:6d:47:b2:7b:25:b9:f5:c8:a7:6b:95:56:a2:
e9:cd:7f:11:26:25:23:d5:bf:9a:08:b7:50:be:cb:9e:bd:41:
de:33:41:4b:a1:46:7e:de:6a:e0:a5:92:17:a7:54:aa:df:c0:
c9:3c:ef:ed:45:c2:2b:a3:5c:23:9b:df:30:d9:ce:c4:8c:d9:
60:bd:99:0c:da:8b:bd:21:d4:72:7e:c6:94:14:75:57:6b:ba:
ad:88:6d:b5:d1:73:bb:eb:2e:b5:ee:d3:5b:fd:4b:7d:08:b1:
46:43:08:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:11 2025 by rpki-client