Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
File: 1b166864-6f5a-3661-9e33-e8fbcebda55e.roa (raw, json)
Hash identifier: 2LsEDreXvJlyHIIRvIceXWDH1B24sYfRr5JI7uYu3kY=
Subject key identifier: B2:C3:92:DD:CB:AE:B0:B6:E8:08:31:1F:D5:91:15:AA:A2:44:2F:F9
Certificate issuer: /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial: 010D0C9F43285848090FBDF06FCC7D5629D75F00
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 62533
IP address blocks: 216.68.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:bd:f0:6f:cc:7d:56:29:d7:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=0e7450c9-46b1-453b-aef3-6d93fd55db07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:da:13:8b:18:b5:d3:f8:eb:99:41:0f:20:64:
b9:c5:f5:f1:71:ee:37:8c:64:8c:36:a4:91:5f:a3:
93:88:7d:d4:b7:3c:58:47:ff:4f:e3:62:2c:ae:59:
c8:b3:26:68:fc:df:c7:d0:de:b5:8a:13:82:80:d6:
f3:bb:61:e7:70:a7:ec:0c:80:47:1f:8d:10:eb:ec:
27:be:c7:43:5c:15:0f:5f:43:75:d2:75:c8:28:2a:
50:9d:0f:1b:e9:e5:11:1e:3e:6c:3e:b3:fc:b4:fc:
49:b8:b9:69:1f:3b:92:2a:01:c6:93:88:9f:0d:e5:
10:e8:bd:de:e7:c2:c7:a7:78:d8:5c:69:ac:90:e1:
a5:28:bf:f4:ca:eb:b5:8f:fe:78:43:14:00:7f:22:
14:11:b3:6f:fe:57:8d:4b:fd:06:08:46:6f:44:e1:
c5:34:58:77:f8:4b:10:13:dc:3c:a7:e8:1a:0d:9a:
8e:9c:a5:f5:46:81:bd:d4:c7:b2:83:45:d9:70:24:
94:ce:26:16:4f:4e:97:ef:d6:d6:f5:d4:56:6f:4c:
81:c6:50:3b:79:7c:28:c3:e1:39:ee:57:e0:33:5b:
6a:d9:c3:30:2c:2e:9d:16:2d:d2:9f:43:49:e0:4a:
a4:b6:18:0b:e8:ec:97:af:c9:5e:e8:8e:45:87:0b:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C3:92:DD:CB:AE:B0:B6:E8:08:31:1F:D5:91:15:AA:A2:44:2F:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1b166864-6f5a-3661-9e33-e8fbcebda55e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
X509v3 Authority Key Identifier:
keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
sbgp-ipAddrBlock: critical
IPv4:
216.68.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:9d:60:d1:bf:22:ea:9c:1c:d2:fd:00:b5:5a:44:2e:00:dc:
e3:f7:e4:9b:42:d3:cf:a9:69:2d:a7:8c:2b:ef:f9:ec:c7:1e:
d8:58:68:7f:b8:37:df:7f:08:9b:f4:53:02:ae:c3:6b:0a:eb:
21:bf:18:35:2f:0b:72:7d:10:94:e9:c8:57:37:d4:6b:1a:87:
73:b3:c7:33:91:38:19:94:ae:80:f7:37:f1:1c:95:04:89:cd:
40:c8:f0:ad:98:aa:21:8b:7b:c1:fc:ef:56:46:d2:0c:7f:7e:
93:31:07:61:1f:b0:da:29:86:71:cf:04:4a:dd:f9:06:89:ec:
d2:ab:72:ed:63:0f:40:06:fd:f3:9b:94:a6:56:b8:1b:a5:ae:
5b:7b:d1:f2:f0:7d:fe:3c:8f:1f:33:7f:7b:a8:a7:2c:10:3e:
e5:f3:b9:12:bc:07:91:b4:0e:6e:ff:ec:3d:e2:c4:79:d1:17:
22:f9:5f:24:6f:96:8c:09:7f:89:d0:33:e0:f3:4c:a0:c8:e8:
c7:ad:25:9c:24:48:51:d0:e6:1c:42:4a:34:00:96:98:04:b8:
02:ef:a5:40:3c:2c:bf:bb:11:d1:73:38:1e:cb:95:45:f5:6b:
42:bd:d0:64:18:17:de:80:f2:cd:ab:d0:8b:cb:4e:77:d1:03:
44:9e:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:57:38 2025 by rpki-client