Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa
File: b6e14efa-29c2-321e-91ea-20c36382b1b0.roa (raw, json)
Hash identifier: N/YftnklpgnHpirlAEiBbWk1Vskb4+EgP//a3FKKiAs=
Subject key identifier: E6:9E:E7:B0:AB:C8:43:54:06:AA:C9:8C:FE:C2:30:FE:D5:1C:B8:26
Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial: 010D0C9F43285848090FBA65830BBE6AFF2C3500
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa
Signing time: Fri 29 Nov 2024 02:00:39 +0000
ROA not before: Fri 29 Nov 2024 02:00:39 +0000
ROA not after: Thu 27 Feb 2025 02:00:39 +0000
asID: 46632
IP address blocks: 216.238.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:09:0f:ba:65:83:0b:be:6a:ff:2c:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Validity
Not Before: Nov 29 02:00:39 2024 GMT
Not After : Feb 27 02:00:39 2025 GMT
Subject: CN=ca3c5d96-b3ce-441e-b2c4-68265755061a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b5:95:b7:ff:5c:dd:0b:4e:fe:54:e8:5a:f8:
59:70:7a:7d:a8:e4:cc:8b:4a:e8:93:9c:4e:3e:23:
26:01:3c:09:a6:4b:99:f9:ac:ca:d7:bf:4f:7d:65:
d9:dc:d8:6e:2b:bd:e5:b4:75:e2:c0:e8:a6:93:18:
6b:8f:2e:ec:4b:b4:b2:0a:06:df:17:59:26:91:ef:
35:1d:bf:02:c5:28:0a:d2:52:c9:11:b2:99:27:b4:
8d:9b:dc:29:80:bf:ec:d6:ff:f7:41:25:52:39:36:
e0:fd:9d:5d:5b:9e:98:60:68:fd:5c:83:56:7f:c5:
da:d7:0c:34:b8:80:a9:a4:fd:84:8c:da:81:19:05:
9e:14:d9:ac:8e:6f:c7:de:76:27:89:69:9b:fd:40:
e5:07:df:2a:07:38:1b:54:18:cc:8a:9c:da:03:bd:
0a:69:b4:b4:f4:cc:bb:bf:49:c1:3c:a1:e0:f1:bf:
9f:6c:a7:42:a4:f7:91:de:25:4e:64:4e:65:9f:51:
ae:e9:00:9d:d4:a0:df:0a:a6:7c:a0:78:4f:2e:0e:
58:de:6c:20:2a:2a:8a:ac:0f:93:cd:a1:64:92:bc:
1b:06:8e:f2:fa:07:38:76:63:8b:02:af:c2:0e:e9:
e9:fb:d3:0b:ec:eb:e6:4a:b9:7a:0a:b7:01:61:45:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9E:E7:B0:AB:C8:43:54:06:AA:C9:8C:FE:C2:30:FE:D5:1C:B8:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/b6e14efa-29c2-321e-91ea-20c36382b1b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
X509v3 Authority Key Identifier:
keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.238.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:f4:77:f0:09:58:7e:19:6c:14:85:18:a8:7f:71:77:42:78:
4c:2c:02:a4:2b:67:38:bb:10:96:31:66:3b:6a:0c:51:74:43:
9f:40:5f:73:cb:73:6a:4e:04:c0:a6:99:6e:36:82:3f:e9:46:
cf:c8:68:54:9f:b4:ed:a6:18:c5:ab:6d:69:1a:ab:e1:80:77:
b4:15:76:0b:8e:6f:de:47:cf:80:e9:78:97:5d:9e:c5:64:50:
0b:4a:1a:c3:33:64:88:9e:3c:bf:f0:6a:38:ab:d4:59:b7:e3:
1f:c5:66:64:16:38:e2:d9:b2:1d:c4:b8:c3:48:60:ce:c3:48:
fa:47:87:92:97:97:0b:7b:bb:29:d6:78:95:1a:f7:13:7f:f4:
17:7f:87:df:1e:4a:67:df:23:c1:d7:0e:92:38:3b:c9:79:ca:
18:50:a1:3e:1a:92:cd:45:4f:32:3f:fb:fa:f6:0c:b3:a0:72:
45:dc:76:01:b5:a1:7f:ba:c1:df:a0:6b:80:6e:9c:95:5d:36:
78:ac:b9:1d:be:01:93:26:c4:0d:b6:10:cc:84:16:c7:37:43:
c5:c3:41:1d:b6:32:12:e2:4f:4d:4c:f8:91:2b:a5:f8:76:41:
38:49:3c:2c:cf:9f:1a:f3:4f:26:fd:44:17:c6:1e:c4:96:22:
f1:fc:fb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:09:14 2025 by rpki-client