Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5aeb754-a939-33de-86fc-861b89527e34.roa
File: c5aeb754-a939-33de-86fc-861b89527e34.roa (raw, json)
Hash identifier: oSPQ5CitDnwFcQE5mMnXmltzIvVr8SH1sjGG0NFkX2U=
Subject key identifier: 9B:CA:93:62:41:20:8A:0D:07:47:49:67:59:73:78:3C:20:7A:1F:83
Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial: 010D0C9F4328584819CFE030AAAA3A1FDC572E40
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5aeb754-a939-33de-86fc-861b89527e34.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 25899
IP address blocks: 216.110.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:cf:e0:30:aa:aa:3a:1f:dc:57:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=eb7eac49-9e76-4061-9ccd-94ba1c45ae89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ce:d8:c5:b9:bf:ea:e1:c3:ee:c3:ba:90:c0:
00:aa:b9:97:2c:14:31:a3:cc:94:53:30:c4:4c:ae:
17:13:f3:8f:98:01:c1:1e:03:4a:2e:26:ff:be:99:
75:7d:29:98:f2:73:4d:b1:0e:30:4d:a2:6e:23:c2:
e6:32:69:1a:81:47:b8:65:9b:bf:5e:03:8f:87:0d:
e1:b0:15:fb:4a:3c:32:fe:bd:15:71:72:73:39:35:
4e:fa:40:5c:2f:9a:fd:7c:1c:f5:c5:37:ec:64:49:
34:05:7f:a0:b5:65:95:25:94:07:9b:7b:f9:a2:c0:
50:a9:49:40:71:fa:3d:e5:da:cd:0a:e9:df:fd:4f:
eb:e6:e9:0e:96:7a:af:03:9e:36:e4:9c:ac:67:1c:
d1:6f:10:02:96:12:46:87:8b:0a:7e:f5:27:b8:19:
c7:3d:48:ab:c9:13:50:45:29:c5:42:81:23:32:99:
e1:3a:9c:c4:d8:f5:60:41:05:b2:fc:79:bc:fd:3b:
b5:da:39:bd:c2:be:d7:cd:41:dd:b7:eb:c5:7b:89:
34:7f:22:e4:c0:97:b8:fe:10:e1:be:fb:ed:70:76:
05:78:43:0b:b4:67:82:74:7e:c4:22:64:2f:2d:c8:
ad:72:59:a7:c3:6a:37:ae:39:4d:d7:d3:2b:ab:f3:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CA:93:62:41:20:8A:0D:07:47:49:67:59:73:78:3C:20:7A:1F:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c5aeb754-a939-33de-86fc-861b89527e34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
X509v3 Authority Key Identifier:
keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
sbgp-ipAddrBlock: critical
IPv4:
216.110.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:5b:37:aa:23:78:b6:e5:6a:92:a2:09:b9:ef:ea:ba:08:11:
09:da:94:10:41:40:7d:06:59:3f:76:ac:a6:11:b3:9e:8f:74:
14:9e:fc:38:77:b3:20:bc:ed:27:0f:77:51:cf:2f:46:74:59:
ec:a3:5d:e6:33:c6:4c:68:a1:35:c4:1e:2a:a1:98:42:fa:83:
bb:d0:a1:03:73:42:e4:c7:6d:f0:75:e8:54:fe:41:bc:5f:c7:
b9:f2:4b:96:34:54:33:b7:66:65:3f:56:85:53:e0:65:88:60:
f8:1f:9e:c2:87:41:8f:d5:36:72:ba:db:d2:20:c0:32:8e:55:
ab:0a:b4:08:b1:c5:1b:d7:11:00:52:b5:b2:43:18:e2:6a:72:
b0:c5:d2:6f:2d:b6:da:d0:20:c4:5f:92:93:26:87:c0:af:6a:
b1:45:6a:24:72:a0:cc:a2:61:d2:a1:9b:38:4e:1f:4b:ae:fd:
86:e5:d3:ff:4e:66:35:55:a0:0b:6c:b2:44:5f:22:3f:cc:61:
19:3c:f7:ea:d1:72:11:ad:b3:a9:76:ca:de:0e:e1:a9:8b:84:
47:c0:cf:7e:b6:3f:3d:2e:8c:53:f6:69:c0:5f:d0:ba:c2:2f:
45:15:4c:65:31:b6:ed:61:87:cf:40:fe:8d:43:03:e8:4d:1d:
73:1c:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:06:41 2025 by rpki-client