Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa
File: 77ff4321-a6aa-3770-a76f-656f4a193421.roa (raw, json)
Hash identifier: KhR8Z2j+LYF/DxxdatLTHzm0Ap26Y56feljgXQOZnSI=
Subject key identifier: 23:07:A7:8B:6F:BF:3C:87:99:6D:2E:2B:01:24:87:0A:43:E0:05:80
Certificate issuer: /CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
Certificate serial: 010D0C9F4328584878BB01489B462581A7352580
Authority key identifier: A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa
Signing time: Wed 08 Jan 2025 02:00:39 +0000
ROA not before: Wed 08 Jan 2025 02:00:39 +0000
ROA not after: Tue 08 Apr 2025 01:00:39 +0000
asID: 6939
IP address blocks: 173.249.160.0/22 maxlen: 24
2602:fb15::/36 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:78:bb:01:48:9b:46:25:81:a7:35:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
Validity
Not Before: Jan 8 02:00:39 2025 GMT
Not After : Apr 8 01:00:39 2025 GMT
Subject: CN=887cf3ea-ab05-4fc4-b47b-6b55bd99ff7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:3a:c9:7f:48:d5:f8:3d:c4:8e:95:95:ec:
72:a0:5a:31:63:f0:9f:7f:72:55:7a:da:68:0d:ee:
9d:66:f8:94:ff:66:18:42:b0:f9:c5:a8:bd:9a:32:
83:72:74:5e:26:82:ea:ca:47:d2:ae:a1:46:d0:54:
25:1a:f9:87:f3:62:51:54:8b:b7:2c:9c:59:3b:a9:
3b:11:40:53:34:68:d0:8a:8f:9e:6c:c5:b7:88:5c:
98:85:2a:df:3c:ca:da:57:d7:c2:0f:79:38:f1:88:
d7:2c:28:13:f8:aa:8f:21:2f:7b:e3:87:92:cb:52:
18:89:3f:8f:27:9b:ca:f6:7e:25:49:e4:e5:4a:1c:
e6:ef:a7:d4:e7:ee:ce:88:57:8e:b9:20:84:a2:b1:
37:2d:04:a3:84:de:71:7f:bf:eb:9b:5c:ab:2f:dc:
95:e3:79:a0:ad:35:c2:0f:af:3c:62:a2:1b:63:7e:
6d:4c:fc:91:2b:a3:e0:a4:51:be:e7:ba:ce:4c:ee:
44:78:75:fa:6e:ed:43:ca:b2:04:b2:cb:3e:96:c5:
a6:34:13:8f:7a:3b:26:cc:1f:68:a0:69:7d:25:e9:
df:53:ca:c5:83:1f:e9:8e:09:a4:28:f9:d3:fa:74:
5c:74:ac:70:74:e2:50:cd:48:36:e3:8c:d7:68:f5:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:07:A7:8B:6F:BF:3C:87:99:6D:2E:2B:01:24:87:0A:43:E0:05:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl
X509v3 Authority Key Identifier:
keyid:A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
sbgp-ipAddrBlock: critical
IPv4:
173.249.160.0/22
IPv6:
2602:fb15::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:13:40:33:c8:43:cb:bc:8f:fc:86:80:5d:0a:5b:3c:bb:ef:
c1:4b:6f:bd:f6:cc:e1:25:4a:a0:3e:d8:8c:d4:43:1d:c4:1b:
1f:7c:11:ee:71:65:87:ed:aa:f3:72:21:25:0e:0a:13:dd:91:
6f:93:b2:82:fe:53:11:18:c4:f0:7a:41:e8:3d:c3:10:22:51:
61:cc:09:66:1f:11:90:3f:44:f7:78:52:50:0e:50:aa:7d:aa:
67:9e:de:61:96:80:8e:d3:91:ac:29:7a:b1:7a:f4:51:0a:77:
25:4c:a7:8a:eb:8c:0e:1f:a7:63:84:a8:63:39:f1:29:a4:61:
99:cd:d1:df:c0:f7:a8:cf:0f:bd:98:05:00:be:c6:83:7c:4c:
a4:eb:96:a1:6b:7d:63:3c:b8:58:80:bb:0c:ac:28:70:75:5b:
36:a4:ac:00:c5:cd:c0:fc:04:27:09:09:57:88:a6:8b:b7:33:
37:28:bd:15:db:8a:c1:38:43:ae:95:2a:44:d0:a9:fa:68:b3:
d2:88:4d:dd:73:c0:ec:a3:51:d0:19:1a:ae:05:41:9b:de:26:
c7:ec:af:8a:55:1f:5c:f3:88:b2:5f:96:07:87:c7:26:6a:0e:
8f:71:46:40:3a:35:dd:b3:0e:14:56:05:aa:29:4b:c6:15:ce:
14:b5:1f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:33:52 2025 by rpki-client