Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa
File: 0baf61e0-eead-323c-b72c-efaab2756610.roa (raw, json)
Hash identifier: 0B97CKmRJU7proRad+LEiGk4xdJkq+6KPExdXrk+PDE=
Subject key identifier: 46:16:7F:8D:BF:65:26:E2:90:C0:38:28:BE:D7:7D:C5:81:BC:EB:AA
Certificate issuer: /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial: 010D0C9F43285847E78F629ECDC5AC172A4BE300
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa
Signing time: Sun 17 Nov 2024 02:00:28 +0000
ROA not before: Sun 17 Nov 2024 02:00:28 +0000
ROA not after: Sat 15 Feb 2025 02:00:28 +0000
asID: 16433
IP address blocks: 216.20.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e7:8f:62:9e:cd:c5:ac:17:2a:4b:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Validity
Not Before: Nov 17 02:00:28 2024 GMT
Not After : Feb 15 02:00:28 2025 GMT
Subject: CN=91291deb-ed77-4817-bf0b-c069ca3548e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:76:d3:7c:23:f9:a2:e1:9e:5a:27:c9:59:
f4:ab:32:27:1a:88:4a:b1:e1:04:71:58:58:cd:1f:
37:ec:39:eb:cb:c2:15:9a:4c:5b:58:8f:2c:e7:51:
df:43:b7:41:a5:af:b9:8f:36:f8:13:06:df:bb:76:
80:9f:8e:4a:46:bf:e6:74:1b:b9:b8:10:75:b9:a6:
28:f3:55:c2:ab:0e:f9:9e:79:cb:fc:f5:4b:28:14:
a8:b9:26:c2:af:8e:ae:89:89:35:7b:dc:c5:e9:ed:
4a:ce:43:c5:8d:0d:5c:77:c6:68:48:6d:03:c8:c4:
f8:8e:94:d4:bd:24:52:0c:2b:89:35:b7:69:db:98:
ed:53:59:ca:36:70:e6:70:5c:bb:a6:3c:d5:96:ca:
90:ce:dd:a6:f9:39:46:52:70:84:be:5a:79:e3:d8:
d1:e7:b9:ad:20:18:51:96:d4:4e:f1:aa:12:94:d5:
48:c0:f4:02:b0:f1:5b:e0:f4:15:fa:79:b5:c6:2a:
21:ed:8e:69:e7:ee:4a:31:16:05:69:d9:4a:3d:6b:
fa:05:a0:f5:d1:45:97:36:49:f1:c2:06:7f:d1:5e:
ca:0d:66:bc:be:be:5f:91:7c:52:ea:4a:49:7c:0d:
35:70:0b:5d:57:ec:eb:c7:fa:ff:6d:1a:2a:ee:69:
58:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:16:7F:8D:BF:65:26:E2:90:C0:38:28:BE:D7:7D:C5:81:BC:EB:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
X509v3 Authority Key Identifier:
keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
sbgp-ipAddrBlock: critical
IPv4:
216.20.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:40:67:ab:87:bb:f4:19:f8:86:3f:65:2e:ae:4d:8d:43:0f:
21:00:b1:a3:76:ca:9f:c8:83:a5:ba:de:49:3e:3f:47:c5:17:
48:78:ce:c7:c5:39:6d:19:32:1b:12:33:99:4f:ec:c6:ca:b7:
5d:11:df:16:8b:a5:e3:1f:f9:6f:a7:85:af:48:85:5d:44:fe:
72:52:b5:0e:3d:0f:1d:9e:72:ab:9d:ea:9f:2d:81:ec:76:04:
5b:79:61:15:ce:14:cc:20:40:db:ce:da:d8:1e:9c:2f:f4:e2:
17:68:7e:76:cd:6c:cd:ba:7e:2a:f7:1b:8b:1c:4f:53:dc:da:
4b:ca:fb:fa:d5:76:ff:5b:f4:6b:78:f2:ab:cd:cc:8f:87:39:
5e:25:04:13:06:6d:ce:ec:a5:cb:ab:e5:5a:0d:d5:ca:b7:27:
8c:fb:14:88:00:6f:53:bc:6b:96:b4:2f:7f:87:c5:ea:a3:7d:
6b:09:06:d0:77:4e:07:e6:a6:86:62:63:64:fc:57:e6:fb:58:
21:8c:7d:be:e4:5c:a3:92:23:fc:e3:04:81:a3:7d:38:7a:b5:
4e:98:82:44:56:b1:5c:f2:d7:c4:69:d6:00:3b:13:ad:4b:a1:
0c:84:72:41:db:c6:88:c6:14:db:41:e6:a8:98:0c:b8:80:0f:
9f:2a:dc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:49:21 2025 by rpki-client