Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3ffe720f-9c01-3f65-95fd-5cd5f1e3d800.roa
File: 3ffe720f-9c01-3f65-95fd-5cd5f1e3d800.roa (raw, json)
Hash identifier: IP/QTy+a+nNx/ZhU+uQ4UpxRy7Gl+6f9H7gYDDlm5/Q=
Subject key identifier: 68:68:45:82:ED:A2:01:6C:49:67:6F:4B:5F:11:D8:13:A2:5C:18:9B
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F4328584882809C1955B19FE0C6AD7300
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3ffe720f-9c01-3f65-95fd-5cd5f1e3d800.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 12083
IP address blocks: 216.186.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:9c:19:55:b1:9f:e0:c6:ad:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=af8604c4-e1ab-4fed-bca0-69166d7084b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5a:29:3f:a9:2c:26:35:ee:bc:07:38:a6:a0:
06:0d:ba:17:c1:78:23:24:e3:3d:4b:81:6b:3f:43:
e1:0e:b1:5c:7d:b6:ac:22:aa:5d:68:5c:71:ed:9e:
54:ae:31:d8:04:30:cc:a6:2c:59:a8:bd:20:01:7d:
9e:89:b1:fb:f9:8e:fd:04:16:98:c4:08:86:33:84:
35:99:88:d7:c7:9a:04:c8:ff:58:3b:40:8e:d2:da:
50:e8:e1:24:ab:01:97:2e:2c:31:bd:03:80:19:b8:
87:1d:57:0a:3c:a8:22:26:7e:d3:f1:cf:74:b0:f0:
90:35:2d:e6:3a:7d:ff:bd:4f:52:fd:af:37:70:e4:
29:94:bb:ce:95:de:c2:42:52:33:fc:27:53:15:29:
73:8a:9f:e1:45:91:09:72:a4:c5:85:8f:6b:d4:0b:
84:1d:8c:db:80:ee:fe:2d:02:e7:75:4f:02:9a:49:
92:72:e8:ad:d7:91:bb:27:aa:f3:90:77:0a:86:c4:
33:73:4f:2e:aa:bd:e5:90:78:fd:c3:f5:c9:c3:3f:
4e:c0:03:d7:21:28:cf:83:47:16:5c:34:9c:45:56:
34:50:b3:54:32:e2:eb:67:fd:1f:c5:9b:2d:05:5d:
1d:49:5e:c6:c6:9c:2f:aa:b8:eb:c1:37:f0:da:11:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:68:45:82:ED:A2:01:6C:49:67:6F:4B:5F:11:D8:13:A2:5C:18:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/3ffe720f-9c01-3f65-95fd-5cd5f1e3d800.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
216.186.180.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:58:33:de:03:e3:36:06:86:aa:43:b6:a4:f5:31:2f:76:0c:
e6:67:91:ef:23:5d:ea:e0:f5:d2:7e:51:9b:3c:7d:84:86:d6:
55:f9:b4:04:9b:56:da:97:bc:31:55:5d:2c:e3:57:17:dc:e3:
25:0a:77:cc:db:93:9c:89:10:8d:b6:09:79:a4:47:66:1b:03:
e8:f6:51:8c:be:b9:ad:de:e5:dd:8f:e3:0a:cc:ae:34:f2:05:
0d:99:c9:e1:22:59:2c:8b:ea:14:90:a2:65:b0:f0:a7:d3:18:
60:cf:47:02:5f:94:77:e0:61:dd:c2:a4:b2:87:e8:fb:95:ee:
95:40:83:ac:c9:eb:a9:85:ef:e0:52:ac:bd:c4:6b:b0:13:29:
71:10:09:5f:e5:ef:bb:17:7d:d1:a3:fd:fb:37:1a:5f:a7:69:
57:54:ab:7d:98:fa:a0:7b:c4:5a:d1:6e:c5:4d:3b:72:54:29:
58:e4:1d:88:71:1e:8c:14:d2:43:42:f5:96:9f:b8:4f:d7:80:
f5:05:3e:90:2f:a8:5c:84:79:bb:78:5a:84:05:4f:d0:f1:53:
51:44:35:87:0d:1b:72:c2:06:a1:8b:33:e9:01:1c:1d:7c:37:
89:33:a2:ee:02:ff:94:68:ad:24:6c:5d:bd:d8:17:d5:18:5e:
0f:38:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:02:18 2025 by rpki-client