Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ae620bfa-78a7-3a5f-81dc-363d02245b93.roa
File: ae620bfa-78a7-3a5f-81dc-363d02245b93.roa (raw, json)
Hash identifier: XdjJwog1YsUA0a17XfhfBMmkBPwu44lqT7sZQKjNlc8=
Subject key identifier: DC:EF:87:93:29:29:F9:77:04:79:78:23:31:26:97:CE:1F:1F:E3:18
Certificate issuer: /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial: 010D0C9F4328584827C53C6E6BF5E78C088E9C00
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ae620bfa-78a7-3a5f-81dc-363d02245b93.roa
Signing time: Tue 10 Dec 2024 02:00:40 +0000
ROA not before: Tue 10 Dec 2024 02:00:40 +0000
ROA not after: Mon 10 Mar 2025 01:00:40 +0000
asID: 53766
IP address blocks: 216.221.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:27:c5:3c:6e:6b:f5:e7:8c:08:8e:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Validity
Not Before: Dec 10 02:00:40 2024 GMT
Not After : Mar 10 01:00:40 2025 GMT
Subject: CN=c9dcd48a-b073-4d80-961a-64e318bb3f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:fe:4a:16:d7:ca:29:77:93:97:97:fb:56:
08:2c:1e:2a:a6:d2:b9:10:8d:e6:b1:76:88:22:37:
03:7c:be:eb:b7:1c:5f:de:0a:4f:cb:e0:db:46:49:
91:2e:11:a7:71:f3:90:25:0d:22:8f:66:71:cc:18:
67:bb:a3:d6:66:f4:a1:68:3e:74:2c:1d:a9:a0:4d:
da:9f:c2:4f:bb:9d:b6:47:13:a2:54:dc:c5:8c:0b:
86:19:12:66:d7:a3:64:3f:43:55:2d:b7:16:5e:2e:
0e:8b:0a:ed:31:a8:d1:1e:77:b9:a8:cb:b4:a1:95:
a5:9a:a8:56:af:39:bf:16:85:ef:57:22:a7:d3:57:
9c:6e:c8:34:71:61:2f:32:1f:fe:e8:41:1f:f8:b0:
1c:a3:ba:21:f2:ca:91:be:cb:16:ce:e3:62:fa:e4:
d9:68:46:fd:d1:c8:50:b7:10:c2:cb:5c:f1:cd:46:
03:7e:45:33:f3:81:df:a2:0a:f7:32:a1:e2:44:78:
f9:b8:48:dd:10:fe:36:46:5d:73:af:5c:58:e2:e2:
52:75:b9:1f:3e:94:96:56:36:28:34:3d:ef:ad:07:
d9:2e:d2:1f:22:69:01:a8:de:07:0a:4f:df:ef:ec:
a2:02:de:06:d4:65:28:a0:b7:85:5c:10:6a:4c:ae:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EF:87:93:29:29:F9:77:04:79:78:23:31:26:97:CE:1F:1F:E3:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/ae620bfa-78a7-3a5f-81dc-363d02245b93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
X509v3 Authority Key Identifier:
keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
sbgp-ipAddrBlock: critical
IPv4:
216.221.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:29:bd:6d:f9:3d:7a:a0:e6:6a:8a:55:1b:2e:35:79:47:e6:
e2:f5:f9:da:5f:53:d2:cd:f0:10:9c:7b:91:3f:ae:90:2e:b6:
e5:2f:85:da:56:4a:1b:87:40:67:b4:02:8a:91:d9:fc:d1:6a:
e0:68:2f:86:08:24:65:e0:b7:0b:af:a7:94:1e:bc:11:e6:7a:
d8:04:9e:4b:d8:a0:da:92:9b:cb:61:dd:99:54:eb:a1:d6:65:
06:bc:a2:63:57:66:76:5c:72:ca:47:e2:f2:5d:de:13:a9:b1:
d2:cf:b3:bb:74:ea:b4:5f:b9:64:4a:2e:0b:e5:69:cd:7c:4c:
8d:7f:46:3e:45:30:ff:0d:c6:4b:91:50:56:27:60:08:0d:56:
01:4b:14:1a:ef:ef:29:b8:be:28:6f:a7:c2:0a:af:6b:2d:97:
34:e3:11:31:ee:6b:26:77:bb:64:b1:16:93:92:84:a6:7c:8e:
de:14:99:bf:dd:62:7d:91:85:e0:89:c1:77:b9:3f:47:f4:01:
85:0e:f4:11:40:28:73:71:88:9f:6a:da:98:7d:a2:1a:c8:a2:
a3:2a:d4:3b:74:18:bf:8f:47:49:2f:62:24:3b:76:6f:f3:1b:
d3:35:5d:a7:63:ea:51:b1:8f:41:3b:79:91:a5:e8:4b:28:60:
91:1c:8c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:20:09 2025 by rpki-client