Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5e0f9f66-ff2e-34e7-a568-e277748b2558.roa
File: 5e0f9f66-ff2e-34e7-a568-e277748b2558.roa (raw, json)
Hash identifier: Ep5ET824xJWOMkUvKnsTVQGRNmeXvvdX4KhfH4liMLg=
Subject key identifier: 6B:70:67:B9:33:69:37:14:C6:E0:06:BD:F0:EB:18:59:5D:71:0A:A6
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F4328584854701EE66951BFA0B8A59FC0
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5e0f9f66-ff2e-34e7-a568-e277748b2558.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 198949
IP address blocks: 216.99.216.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:1e:e6:69:51:bf:a0:b8:a5:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=13d132c2-d71e-4e56-a9d9-3d4bd1a7a032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8e:19:12:8a:2a:0c:75:9b:4c:f0:43:db:9c:
e4:da:8a:d1:0a:92:91:dc:46:31:da:db:ed:1f:df:
89:c5:30:09:00:0f:ec:db:b9:d4:e8:51:22:66:a6:
8f:05:20:f3:28:56:b6:ba:27:68:65:dc:86:70:34:
a4:c3:ec:89:3b:89:e1:30:b7:0b:84:c0:67:9b:17:
3f:2e:73:51:68:75:0f:b2:5a:34:9e:57:1c:01:30:
70:a0:c5:ea:0b:9d:44:a5:bc:0f:96:ac:26:3a:d6:
e4:1c:68:45:91:08:59:64:1a:5d:0b:07:63:7a:14:
f1:f2:92:ce:94:fc:4f:08:27:a8:46:2a:cd:17:11:
75:ee:70:e3:cc:8f:99:dd:f6:0b:5a:15:8a:41:2c:
df:73:9b:18:a0:9c:0f:43:36:f7:ba:98:70:00:d3:
5a:ae:fa:9c:e5:c2:97:e7:46:c2:5a:ee:c4:36:b8:
6b:55:1b:ab:f3:98:3f:ae:71:e5:b9:e8:a8:42:5f:
d5:8b:04:d6:17:73:d5:5a:1c:79:d6:76:a5:45:2d:
19:8d:3a:0a:f6:2f:13:26:79:a0:f5:55:1d:72:c7:
ed:df:77:f6:47:88:be:a1:fd:69:9b:06:ce:47:f8:
f8:5e:aa:1f:da:29:b4:4d:ec:ab:0a:47:fd:4e:20:
42:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:70:67:B9:33:69:37:14:C6:E0:06:BD:F0:EB:18:59:5D:71:0A:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/5e0f9f66-ff2e-34e7-a568-e277748b2558.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
216.99.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:60:f3:00:9a:cb:4d:1c:06:8a:cb:5f:a4:ea:e3:86:0f:93:
e9:63:c2:3d:57:3e:98:c0:f2:b8:11:6e:b4:c3:bb:9c:4d:2c:
0b:56:ad:de:86:db:07:ce:b0:7e:6c:fd:f5:00:68:bb:fc:40:
73:14:3b:26:2b:ec:e2:18:ba:80:fd:42:68:06:1f:bb:6b:f4:
4b:9c:ed:7d:b5:30:a8:d0:ae:36:b7:d5:f9:bd:d9:2d:db:9d:
46:04:dd:e4:5a:db:68:8a:40:e9:10:d0:38:97:a7:a3:d6:fb:
fb:76:43:79:df:78:89:a6:ce:d0:7e:0f:1e:8e:3b:ec:ba:80:
e3:cf:56:e5:35:5a:0e:3b:f3:f4:d5:96:4f:1f:bc:bb:12:06:
8d:26:8d:3a:50:d6:10:14:b8:c3:53:37:b5:53:62:18:db:a8:
9b:b9:11:b3:d9:65:89:7a:80:2f:bd:63:f8:39:2b:ea:a4:70:
ad:ed:0a:df:56:b5:ef:32:26:6c:f3:10:f9:0e:b5:09:8a:45:
04:40:76:7d:c3:29:5b:c1:e6:bb:5f:a9:04:df:a9:55:28:ea:
93:49:84:ee:d5:a9:7e:d7:ce:ac:60:5d:61:e5:95:d2:26:d5:
7e:6b:55:7b:84:da:3a:38:34:6b:37:e4:3c:cd:ae:8a:24:83:
08:53:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:49:01 2025 by rpki-client