Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/eb81d8e8-a132-32c2-bc7d-376e5450e238.roa
File: eb81d8e8-a132-32c2-bc7d-376e5450e238.roa (raw, json)
Hash identifier: MR29H23gG/K1KLTY92rTNUmP1q45do6AlSGV+JkPh8M=
Subject key identifier: 6B:C4:79:BA:3F:F6:D0:B3:DF:6B:7E:62:17:41:AE:E4:C7:15:29:0D
Certificate issuer: /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial: 010D0C9F432858483F8028ACEEAD0808DECCAF80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/eb81d8e8-a132-32c2-bc7d-376e5450e238.roa
Signing time: Wed 18 Dec 2024 14:00:52 +0000
ROA not before: Wed 18 Dec 2024 14:00:52 +0000
ROA not after: Tue 18 Mar 2025 13:00:52 +0000
asID: 12216
IP address blocks: 65.51.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3f:80:28:ac:ee:ad:08:08:de:cc:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Validity
Not Before: Dec 18 14:00:52 2024 GMT
Not After : Mar 18 13:00:52 2025 GMT
Subject: CN=d6841eb3-cadf-4817-9781-4872fe46a66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:25:5f:cc:5c:06:18:42:85:5b:65:72:1d:12:
79:d9:c5:8f:48:0b:93:a8:80:81:43:d8:09:c7:fa:
30:65:d6:c7:9f:8c:69:0b:54:54:2b:5d:dd:ee:3e:
41:ae:ba:98:9f:6b:6a:eb:ea:5f:e2:74:b2:5c:bc:
62:a2:5e:a9:f5:71:e6:38:56:64:4f:96:cf:ae:95:
90:69:10:8e:1d:ff:cc:83:ea:74:5c:a5:d8:a3:73:
35:64:c9:9c:66:47:18:7f:35:1f:53:a0:67:4d:df:
68:47:84:0f:5c:0a:b1:a3:57:6b:97:a1:06:dc:ec:
fe:18:f4:dd:6d:79:f2:1a:16:38:a5:fe:27:d4:b1:
d0:90:a2:17:c3:28:fd:80:db:b0:ab:9e:02:de:90:
31:e4:bf:15:68:7c:6a:34:b3:9d:0a:2f:41:ce:66:
8c:ce:46:9b:c9:85:fd:91:be:2f:31:af:85:2c:8b:
14:9b:3b:df:3a:c8:c8:4b:d1:ca:7b:5a:ee:58:0f:
ee:1b:50:16:33:03:05:81:c9:12:75:89:26:91:bf:
69:47:bd:c3:9a:a4:2d:f3:43:f2:20:75:0f:c6:64:
f8:20:16:cc:91:3c:d0:1e:b5:dd:cd:97:80:01:67:
46:f4:72:b4:bb:43:89:d5:b7:d5:ef:f8:3e:36:71:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C4:79:BA:3F:F6:D0:B3:DF:6B:7E:62:17:41:AE:E4:C7:15:29:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/eb81d8e8-a132-32c2-bc7d-376e5450e238.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
X509v3 Authority Key Identifier:
keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
sbgp-ipAddrBlock: critical
IPv4:
65.51.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:85:56:6e:7c:aa:06:48:80:63:0e:8b:5c:84:8d:18:a3:1f:
f6:fc:3b:2b:d0:6e:db:24:d7:a1:19:5f:78:46:91:18:98:38:
68:3f:1e:d3:ae:27:a6:43:3b:db:98:44:ff:4e:10:12:36:1a:
26:22:23:dd:38:4e:6d:7f:7c:c6:f9:8d:73:92:d2:51:51:4a:
a7:f0:0a:49:86:5f:55:ef:66:e1:7f:2e:39:05:18:35:11:a5:
19:33:99:4c:fb:e7:5f:a8:48:c2:d5:6e:16:6e:ea:bc:31:81:
85:55:45:30:62:08:a0:9a:10:54:32:dc:ca:b4:97:cf:8d:e3:
d1:f8:d7:48:1c:2c:b4:10:01:a7:ab:92:24:cc:12:73:e2:0c:
5a:3a:3d:69:82:54:98:33:f7:ba:21:b1:97:a0:fa:d6:f8:75:
4d:52:46:da:f0:cc:bb:cb:e4:86:63:53:8b:55:4d:c3:26:56:
52:ba:20:17:d9:06:3d:50:18:9d:01:da:c9:69:13:29:de:b4:
08:dc:17:4a:56:ad:76:1a:9e:3b:38:de:2a:7e:40:32:f2:79:
1c:00:fd:eb:9a:d7:d3:17:dc:e4:c4:23:06:27:04:3a:27:5c:
1d:02:de:5a:a1:19:44:90:c2:30:dc:4d:23:f6:5f:2e:cc:9b:
46:9d:15:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:23:23 2025 by rpki-client