Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/5a606c85-561e-306f-971c-7cb0a887d723.roa
File: 5a606c85-561e-306f-971c-7cb0a887d723.roa (raw, json)
Hash identifier: 66F4vKLbAvQHQj+CF1jU+nYn6gf+EU2S5Wk18VftYd0=
Subject key identifier: 6B:EF:DD:79:C0:20:6E:2C:2D:A2:FD:7A:D2:FA:93:3D:DC:28:2F:4A
Certificate issuer: /CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b
Certificate serial: 010D0C9F432858489A3B36FD67570597A010C580
Authority key identifier: 19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/5a606c85-561e-306f-971c-7cb0a887d723.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 5377
IP address blocks: 216.9.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:36:fd:67:57:05:97:a0:10:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=d445a0fd-6faf-4bc4-9bea-0e5af01f2211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:c4:29:90:fb:74:6f:9b:00:74:8b:71:8d:
2c:7b:8a:2c:4a:4b:3b:94:26:ea:17:5f:32:40:cd:
ce:1e:0a:10:96:6e:64:fd:b7:0e:4d:87:f7:7b:01:
ff:51:8d:3b:8f:fd:b8:b0:e7:f1:c8:2d:fc:29:63:
1e:6d:c1:cd:dd:5f:83:58:d3:c9:3f:ba:3f:3b:bc:
70:6a:32:89:3d:7e:65:e9:df:9b:64:10:a4:71:0c:
7e:76:e6:e9:f3:8d:1c:c0:8d:be:58:99:d4:93:e8:
c3:00:3a:28:97:ce:5c:e1:68:e6:ed:06:cf:6c:26:
04:83:ff:a8:2e:9d:fc:e7:bf:70:f0:5c:22:a5:f0:
b3:94:14:e4:c9:ca:8e:74:2e:be:d8:15:56:29:5b:
aa:3d:4a:a2:5a:d4:e0:6e:83:1d:db:7a:98:99:87:
89:5b:7a:bd:af:5f:da:6f:71:65:f7:5a:19:aa:eb:
d9:2d:18:b3:60:99:05:b7:d5:23:4e:20:c8:11:75:
c0:fd:ee:f0:c7:81:28:68:8c:b9:b3:23:c0:7b:f8:
4e:2c:a5:94:da:b8:6b:54:0a:5e:c4:9a:ca:bd:81:
63:b6:11:99:38:fb:25:73:be:32:3e:72:69:b5:c5:
0e:4f:4f:33:40:61:1d:39:9d:7f:e1:f5:17:15:0b:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EF:DD:79:C0:20:6E:2C:2D:A2:FD:7A:D2:FA:93:3D:DC:28:2F:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/5a606c85-561e-306f-971c-7cb0a887d723.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.crl
X509v3 Authority Key Identifier:
keyid:19:3F:7A:B0:F9:BA:D3:20:3A:17:05:95:07:CF:93:2A:4E:92:70:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c34f68b-2f7f-4ef3-bdee-5a0e2d68a03b.cer
sbgp-ipAddrBlock: critical
IPv4:
216.9.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:fd:b9:a3:c0:ee:de:6d:d1:a0:19:23:48:6d:c8:a2:4c:6c:
5f:df:c2:b3:be:8f:00:4e:90:90:e0:e1:f0:b2:aa:40:68:5e:
36:d2:3f:93:4a:2c:98:94:85:00:3c:78:dc:8c:e8:a3:99:b7:
42:b4:a2:38:6c:93:39:c1:d5:ed:b8:1c:e7:de:ec:2b:83:7e:
e4:f5:50:c7:bf:99:0f:f3:97:d1:5a:75:43:78:7c:37:73:ec:
58:db:8c:4a:c6:fd:dc:25:6f:60:3d:e9:18:93:d0:c7:5d:5b:
be:52:ac:5c:ba:cd:d5:51:2b:87:a8:95:c0:50:b3:ba:8e:77:
d8:1c:96:fb:3a:d0:e1:c4:5d:73:78:4d:aa:44:5e:04:20:83:
06:29:87:73:1a:ba:f7:29:ed:40:0b:41:9a:56:bc:e7:ef:65:
e7:fd:02:e0:30:90:14:db:34:74:df:dd:ff:62:04:44:e9:e7:
a5:6e:7b:c8:f4:ae:0f:a7:93:27:86:54:84:fc:0a:0c:a0:cd:
20:9b:ed:62:e6:d6:b1:b8:74:12:20:0f:81:30:43:95:21:20:
e5:27:21:eb:aa:d5:aa:f5:2f:a2:e8:20:a9:bd:78:e4:1f:3c:
72:bb:ba:0d:92:b3:fa:98:cf:59:df:90:fb:bd:6c:a3:e6:a0:
9e:be:e9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:59:06 2025 by rpki-client