Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa
File: c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa (raw, json)
Hash identifier: Mco5kpnN5kmEMH4twk0JqeGtkJ5hoITDFMXUgpZIIqg=
Subject key identifier: E3:57:C9:DE:D3:2E:7B:3D:1C:D0:BC:47:37:9A:55:E7:C0:B0:36:DA
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F432858487AB190E170FA07AA98E55580
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa
Signing time: Wed 08 Jan 2025 18:53:17 +0000
ROA not before: Wed 08 Jan 2025 18:53:17 +0000
ROA not after: Tue 08 Apr 2025 17:53:17 +0000
asID: 14618
IP address blocks: 216.224.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7a:b1:90:e1:70:fa:07:aa:98:e5:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Jan 8 18:53:17 2025 GMT
Not After : Apr 8 17:53:17 2025 GMT
Subject: CN=fd24977e-1b9e-453b-bfb6-459805185658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:b3:4e:aa:2e:50:9a:ef:e4:01:27:9d:74:
ba:25:04:41:df:ab:c0:6d:f0:ef:41:f5:86:42:7b:
67:aa:25:0c:32:8b:a5:a7:88:44:ed:17:78:0c:7d:
a8:30:1d:26:60:5b:f1:5c:7d:b6:c4:05:9f:e2:70:
41:ca:85:d9:da:b0:51:a3:6d:d8:7c:23:d5:2b:dd:
6d:25:13:4f:8e:58:57:ea:15:7b:0c:13:be:e8:83:
45:0e:88:25:2f:2e:8a:92:97:a5:71:dc:e7:56:f0:
ea:f7:70:97:53:02:41:19:84:8d:3d:c9:c1:3f:81:
e4:a8:b5:66:77:10:ee:30:db:dc:d0:33:53:76:11:
21:0c:7c:5d:af:88:eb:93:fe:5e:99:b7:22:66:32:
9d:9b:16:89:9b:4c:7d:cb:06:ec:53:7f:64:4f:51:
b5:10:78:57:b6:15:34:b8:b6:21:98:ba:67:ce:13:
da:34:bd:53:cf:3e:35:2c:c4:9d:7a:02:9f:f3:0e:
1d:b8:41:e3:89:43:81:25:14:88:84:4f:94:da:58:
78:45:5e:e3:01:b4:09:89:a6:19:95:ba:c6:9c:6f:
d2:55:07:5d:5a:88:96:f1:5f:58:49:c1:cb:dc:78:
bc:34:56:5f:f7:1e:33:b7:df:bf:ea:6b:95:45:3e:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:57:C9:DE:D3:2E:7B:3D:1C:D0:BC:47:37:9A:55:E7:C0:B0:36:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.224.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:c3:6c:5b:57:41:f3:e4:d6:22:7b:de:84:49:a7:a2:5b:f5:
c2:31:17:41:66:f5:60:79:ca:46:84:ca:a1:92:f6:76:70:b6:
c3:e4:4b:8e:fa:e9:45:15:a2:9b:e8:87:16:da:45:6b:cf:1e:
03:f5:f6:1e:72:a9:e2:cc:6b:be:3f:00:98:e6:d3:e6:7c:25:
f5:e4:84:1c:50:55:cb:f1:16:fa:67:76:79:d4:07:7b:7c:d5:
5f:a2:bf:2f:7a:60:37:69:75:52:71:30:e0:f0:5d:f2:94:35:
48:c7:af:74:27:b3:20:78:8c:8e:53:29:f5:64:12:74:15:e8:
15:fd:a6:2f:e9:0c:0b:93:4a:8a:3a:2f:e8:c4:b9:45:44:df:
11:e2:6f:8b:5c:da:ef:78:a6:44:d9:df:b9:a3:7a:db:e4:87:
8b:89:02:f1:81:a3:b3:71:48:08:40:26:5e:72:79:7c:76:b5:
64:e3:1a:6a:92:f9:7d:a3:e7:de:33:8c:14:d8:bf:4b:fc:23:
b7:cf:0b:df:c7:8f:82:bf:b6:93:a3:76:95:c5:db:2f:df:ee:
77:04:31:d9:56:13:93:80:4f:69:03:6f:09:4b:00:6d:ce:fc:
bf:60:a2:5f:3a:81:4b:71:8e:a4:04:df:d1:69:41:35:07:56:
67:3c:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:58:20 2025 by rpki-client