Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6dfefdc5-534b-3003-bf6a-145020fb5808.roa
File: 6dfefdc5-534b-3003-bf6a-145020fb5808.roa (raw, json)
Hash identifier: 6LxAKPm1KM9OMiYsnHL43EIgqisdUral0hAGbI/uaXM=
Subject key identifier: 0D:5A:75:17:E6:B5:3A:0D:53:F5:25:54:07:E5:60:FE:76:72:C4:F5
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285847ED24C7ED1C70D98C02955840
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6dfefdc5-534b-3003-bf6a-145020fb5808.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 11090
IP address blocks: 216.137.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:c7:ed:1c:70:d9:8c:02:95:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=8ab0faba-0e8a-4454-878a-724262a57dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4a:66:0c:f5:4d:40:e5:80:d2:0a:35:3d:f8:
d0:2a:1e:94:4a:5f:01:e5:ed:e1:07:a0:0a:a7:a9:
a2:b6:57:8c:58:20:79:3b:d0:db:2c:7f:d4:89:9b:
31:86:34:09:ea:6b:23:a7:6c:3e:e9:85:d7:52:b1:
4b:43:d0:b1:5a:ca:a3:1f:99:72:38:72:81:aa:1d:
1a:bb:d7:e2:51:a7:d9:65:a0:22:88:67:76:eb:fb:
07:41:d8:d0:bf:ee:d5:fb:0f:a6:ad:30:40:f7:bf:
bf:0b:ab:f7:11:ef:81:62:c4:98:6c:d0:68:f1:7b:
c7:00:9f:74:35:b8:1a:04:6e:0c:8e:3e:2f:bc:ef:
34:d6:88:77:07:86:f9:03:d8:91:df:98:47:37:51:
08:96:1e:8a:c0:04:e8:54:c5:5b:72:80:80:6b:f4:
1e:6a:40:31:6b:93:2f:31:5c:3a:23:9e:38:fb:e8:
6d:e9:1c:ae:16:bc:7e:45:63:37:95:c5:3f:95:72:
2b:e2:bb:94:be:00:b3:4f:ae:62:fd:a4:a3:6b:bc:
05:95:0d:ff:31:33:df:17:58:91:fd:d3:3f:8f:13:
1d:db:bd:dd:6d:a5:0b:67:89:1f:86:4f:3d:21:17:
8c:5f:f3:88:d0:c3:07:5b:ea:c3:96:48:44:53:0e:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5A:75:17:E6:B5:3A:0D:53:F5:25:54:07:E5:60:FE:76:72:C4:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6dfefdc5-534b-3003-bf6a-145020fb5808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.192.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:8e:b3:14:0d:d6:20:5b:91:32:9d:95:91:5c:fd:f1:9a:71:
be:53:ee:fa:52:df:87:32:57:6c:0c:41:c3:65:8c:25:d6:21:
05:b7:61:81:4b:f9:86:12:0b:13:fb:f7:74:4d:fa:2c:e2:4c:
71:a6:52:b2:bc:06:42:5f:ce:58:71:bf:12:8c:fa:29:3b:dc:
65:3e:56:2b:e1:74:52:16:88:df:92:de:fe:b3:f7:d4:c5:dc:
99:86:21:8c:a2:c1:af:29:4b:d5:42:f5:c0:13:e2:34:7d:23:
85:f7:18:3a:01:fa:1a:19:cf:75:76:f9:bc:65:f2:a1:d9:2d:
db:6d:2b:b6:56:cd:4e:9d:24:43:45:73:7d:73:1f:b7:e1:9f:
4a:87:d8:3a:db:7c:b3:d8:d6:7e:20:76:b1:76:b5:7b:cd:a7:
a8:11:73:63:cd:e9:28:ec:b3:31:e8:51:9b:9b:94:bc:b8:b9:
04:83:5b:65:a8:7e:3c:da:06:f5:de:a1:02:e7:67:f3:61:9c:
37:a5:7f:3d:0d:87:1b:d9:81:ed:03:20:45:90:43:ab:02:72:
53:e5:29:38:25:56:76:8e:0c:f3:d9:bf:c9:f3:05:65:44:d6:
91:27:70:4f:5e:7c:d9:65:be:30:77:89:53:66:d7:63:59:41:
02:6f:66:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:18:41 2025 by rpki-client