Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/12f916a9-148b-3321-8384-93852e2e1748.roa
File: 12f916a9-148b-3321-8384-93852e2e1748.roa (raw, json)
Hash identifier: 89AbHR/ac7N5Yv1IHImIRiAL2cg/aMX3YxHNu5PdAaY=
Subject key identifier: AA:19:FB:7F:9C:EE:38:D7:10:9E:89:DB:AD:88:7B:08:18:EB:38:90
Certificate issuer: /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial: 010D0C9F432858486EF5C2F97EAD99711B746160
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/12f916a9-148b-3321-8384-93852e2e1748.roa
Signing time: Sat 04 Jan 2025 14:00:51 +0000
ROA not before: Sat 04 Jan 2025 14:00:51 +0000
ROA not after: Fri 04 Apr 2025 13:00:51 +0000
asID: 13389
IP address blocks: 216.179.164.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:6e:f5:c2:f9:7e:ad:99:71:1b:74:61:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Validity
Not Before: Jan 4 14:00:51 2025 GMT
Not After : Apr 4 13:00:51 2025 GMT
Subject: CN=4ec8e739-8980-4bae-a723-b16d11af93e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:f4:94:e0:4a:ac:df:e3:a6:c0:f5:98:9b:
02:74:57:59:a5:e7:a4:20:5c:b3:6c:f1:00:e7:d3:
7f:7c:73:72:0b:64:eb:ce:b9:41:1d:83:8f:2d:05:
cb:c6:29:7c:01:6c:d7:6f:db:ee:2c:ab:8d:b1:bf:
77:66:4e:f7:55:1d:2b:ae:1f:f6:93:f4:32:9c:79:
ba:ff:dd:3c:68:ab:95:dc:1b:d0:c0:f6:dd:d3:c4:
c9:da:11:be:55:4d:ce:cc:b8:f5:d0:da:b9:ba:2d:
41:52:72:0d:62:0b:5d:44:ba:0d:31:d7:97:d1:df:
eb:38:31:dd:43:6a:cf:5a:c9:6d:9d:cc:eb:83:46:
2a:33:c4:71:cc:29:b0:d1:b4:b4:cf:b1:5b:17:56:
6b:8b:55:a1:4f:3f:09:ff:1d:61:2e:cf:ab:41:27:
ad:6a:26:e8:14:db:b8:22:a6:e8:92:d5:ec:8f:a5:
12:22:c9:14:24:50:04:05:25:7c:36:13:3f:1f:2f:
dc:46:84:2b:ee:06:94:d0:c7:3e:52:10:04:5a:03:
e9:d2:fc:9d:63:c1:6a:23:f0:18:ac:31:39:be:e4:
7f:94:cf:58:0b:94:10:ba:07:3c:a1:1e:7d:06:38:
d5:2a:e8:62:ec:b3:f6:18:9f:fc:82:ed:06:58:f1:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:19:FB:7F:9C:EE:38:D7:10:9E:89:DB:AD:88:7B:08:18:EB:38:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/12f916a9-148b-3321-8384-93852e2e1748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl
X509v3 Authority Key Identifier:
keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
sbgp-ipAddrBlock: critical
IPv4:
216.179.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:40:19:b5:96:0d:1a:89:88:77:85:3d:47:65:04:97:7b:e5:
d9:da:ad:6c:68:b3:00:b0:b6:0c:fd:a1:72:eb:a4:5e:59:b7:
7c:23:a3:96:25:8e:2b:0d:c9:1e:8e:4a:65:0d:ff:0d:1e:03:
90:0a:86:d0:76:3e:39:e0:9f:0d:f0:88:a9:52:b1:e4:63:db:
93:81:47:29:66:7e:9e:b6:8f:40:9a:c3:ed:0b:cd:9d:29:32:
1b:8d:df:4a:5c:8e:96:52:ad:e1:ab:1d:c2:15:52:f5:8a:72:
c0:54:f7:da:c2:ac:65:35:21:51:0f:61:d6:d3:02:f1:60:a5:
d0:80:d5:58:9a:0f:ae:d8:e6:8b:a8:1e:63:6a:a3:f1:98:56:
92:9f:a9:e9:38:15:a7:95:a6:81:ef:a6:3e:f7:43:8d:ff:b0:
a1:c6:75:4d:cc:e7:e2:9e:5c:48:04:0e:7e:6d:f2:2a:30:bf:
0c:d7:57:95:9e:0d:f8:0f:a0:da:cc:6c:e8:37:81:ee:1d:c0:
76:88:d3:28:3d:18:3a:9c:a1:77:79:cc:c1:58:3a:70:66:4b:
15:cf:fb:ab:f7:0d:5d:27:31:e0:40:9f:1d:ed:44:93:24:8a:
0a:9e:63:d8:da:c0:14:24:6b:c5:c5:b0:ac:9c:a3:cd:23:e7:
94:73:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:50:11 2025 by rpki-client