Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa
File: fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa (raw, json)
Hash identifier: EnYAyO73Ggy9rBWDSYRwP2okwBcZ86OuL/JJRVgwfRE=
Subject key identifier: 2A:98:50:07:28:C7:30:52:F0:5F:DC:E7:2B:67:50:D3:CD:6E:14:DA
Certificate issuer: /CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
Certificate serial: 010D0C9F4328584849456B1E25215C99C58D6500
Authority key identifier: 5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa
Signing time: Sun 22 Dec 2024 02:00:39 +0000
ROA not before: Sun 22 Dec 2024 02:00:39 +0000
ROA not after: Sat 22 Mar 2025 01:00:39 +0000
asID: 13959
IP address blocks: 216.150.43.0/24 maxlen: 24
216.150.44.0/24 maxlen: 24
216.150.45.0/24 maxlen: 24
216.150.46.0/24 maxlen: 24
216.150.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:49:45:6b:1e:25:21:5c:99:c5:8d:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
Validity
Not Before: Dec 22 02:00:39 2024 GMT
Not After : Mar 22 01:00:39 2025 GMT
Subject: CN=f9f95a91-9629-44b4-91d6-e1f31dc25372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:bf:ac:4d:86:dd:9a:12:a8:33:ea:a6:39:
3a:bb:16:65:ad:64:5f:af:d2:fd:12:38:8b:03:2c:
d5:13:35:26:3c:d2:f1:53:f2:03:8a:ae:14:f3:c3:
71:c4:40:58:95:cd:60:f1:ac:aa:d4:e0:35:f5:09:
72:85:6b:95:4b:75:eb:c3:ba:80:1d:39:c7:b6:b2:
72:94:3a:75:36:9f:f6:05:3d:8a:70:b5:df:a3:81:
99:dc:6f:dc:1a:b0:a1:e0:29:a5:66:df:2b:a3:88:
5a:ee:22:ac:cc:65:32:39:2b:e6:9d:43:bc:49:4c:
40:3c:81:83:86:05:4b:5f:53:2a:98:b1:57:92:2c:
34:4c:08:eb:5e:c8:b3:4b:7d:e2:26:68:b4:58:f7:
3d:aa:ae:2c:db:20:c2:5c:e3:d6:c9:92:a5:5b:58:
c5:39:cf:e0:04:44:dc:ee:05:50:00:fa:9b:5a:b5:
d1:2b:73:a3:75:99:04:7d:61:1a:58:2e:44:bc:1c:
b7:05:36:bf:01:10:f2:ed:ff:3b:81:6f:28:fc:90:
05:0e:7a:a7:b9:a5:92:3b:93:d6:bb:e2:4d:f1:45:
e1:2b:86:0c:05:a4:6f:25:61:44:1a:95:bb:c2:5f:
05:4b:b0:64:66:3d:61:83:dc:23:43:9d:d4:35:a2:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:98:50:07:28:C7:30:52:F0:5F:DC:E7:2B:67:50:D3:CD:6E:14:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/fcb85f5c-0ac6-3268-92ee-66103eaa048f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl
X509v3 Authority Key Identifier:
keyid:5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
sbgp-ipAddrBlock: critical
IPv4:
216.150.43.0-216.150.47.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:21:42:3d:d7:37:d0:8e:1b:d8:3e:21:ab:b9:6e:9b:2a:23:
42:bc:05:d5:26:4b:07:ea:54:34:76:bf:6b:04:48:8e:8b:2c:
57:66:43:30:44:a5:8a:6c:aa:94:0a:dd:a7:e4:49:b2:eb:fa:
a6:07:de:4d:3c:5f:39:7b:fd:79:2f:4f:0e:e7:56:16:ef:8e:
98:83:96:b2:0a:d7:d5:a3:a5:1b:72:9a:76:39:27:f1:c9:8d:
63:1a:7d:73:b2:96:b8:06:5e:23:00:2a:4f:25:2a:d0:cd:0f:
d9:a3:6c:ea:aa:a1:13:fa:b4:2c:fa:dd:df:7e:17:e6:9c:84:
f4:58:20:8f:52:92:3c:44:c9:6f:27:f8:f7:33:c6:a5:f6:39:
58:e3:67:0d:27:21:7c:52:23:29:46:bd:3b:a6:f5:8e:7d:65:
82:a7:1e:44:1e:ad:f2:2a:7f:54:50:e0:bf:80:20:61:11:17:
51:c5:86:97:f0:c7:4c:b0:e2:42:08:c2:d8:95:24:f8:35:ad:
e9:c3:b4:c3:9d:b6:97:78:27:7c:91:54:b6:b7:c2:85:34:59:
d9:33:d7:d5:3b:1c:37:26:5a:a8:ad:9e:25:f7:05:c3:4c:99:
14:03:43:50:e7:69:4f:a8:9b:c8:85:4d:09:1d:94:b3:0e:9e:
22:2d:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:16 2025 by rpki-client