Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/3658ab1e-d316-33ee-91c7-ed6a278b34ae.roa
File: 3658ab1e-d316-33ee-91c7-ed6a278b34ae.roa (raw, json)
Hash identifier: 1193rH3rZ2rq0g7e2EFpNg7HJbd7hJ9mfH43OQYAuss=
Subject key identifier: 5B:DB:FB:AA:E1:05:98:CB:A7:CE:15:F2:60:51:08:0E:94:5A:8F:13
Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial: 010D0C9F4328584800AF7EAF30B5243FAB9B1E80
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/3658ab1e-d316-33ee-91c7-ed6a278b34ae.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 16509
IP address blocks: 216.24.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:7e:af:30:b5:24:3f:ab:9b:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=49fc7c9f-bc45-4978-9555-9fbe72b1b945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:20:b0:4c:8e:26:8c:f5:2c:10:0f:98:40:
b9:d0:c7:ac:c9:46:5b:c5:46:4f:44:69:1c:7b:ce:
ee:a5:2a:eb:1c:27:61:d7:cb:be:5b:ea:9c:d2:a3:
af:53:a2:37:6c:82:30:92:be:bc:ea:16:de:04:1d:
c7:c6:4a:59:91:d0:45:87:5d:ec:e3:55:9d:3b:dc:
6a:d6:4b:d9:72:3d:e7:b0:a4:8d:b8:b2:cb:94:83:
64:85:17:60:04:47:c4:3d:a0:8c:e9:3e:9e:de:29:
4c:f9:d5:19:51:31:b2:56:ff:74:2d:a9:0f:fd:74:
5d:b9:f6:09:a0:1a:58:9d:a5:50:42:13:ac:b5:b1:
32:e1:9b:5f:26:2b:04:b9:a1:1a:ad:78:b5:7f:d6:
c3:33:cb:a9:48:56:eb:44:0f:1e:54:bd:e2:78:18:
2b:ee:ed:4c:99:56:44:9f:bd:b5:e9:c7:3e:db:73:
98:89:67:88:20:1c:0a:0c:b5:dd:97:38:6f:10:93:
69:57:9c:91:e0:f3:6a:bf:07:a3:52:b9:fb:f4:24:
84:ac:e5:fb:12:86:3b:4c:ab:4d:1e:48:2c:ba:86:
52:49:bf:cf:06:4c:fe:e8:41:95:c0:a4:34:42:23:
e1:d9:3b:3d:c6:49:78:60:e8:e0:f8:67:a7:45:32:
4e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DB:FB:AA:E1:05:98:CB:A7:CE:15:F2:60:51:08:0E:94:5A:8F:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/3658ab1e-d316-33ee-91c7-ed6a278b34ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
X509v3 Authority Key Identifier:
keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:0c:61:e2:32:4b:d3:18:7d:41:67:f9:2d:69:ca:37:d1:9a:
b5:53:d3:96:9c:17:99:8b:f2:93:f2:e0:d4:bf:e6:60:5c:7e:
70:73:91:e7:51:56:7f:6d:9c:a4:38:f2:58:fa:79:5a:1f:1a:
49:f0:30:22:2c:dd:a3:78:b7:21:19:d4:81:5c:3e:22:f5:86:
57:46:86:c2:7d:3c:a8:09:fc:c3:75:ac:39:96:d9:c1:a4:d5:
42:c5:2f:c9:38:d7:2d:fa:0b:13:a3:e2:6a:d3:89:a1:05:9e:
14:c8:34:30:90:77:90:f3:3a:10:9f:23:0b:ae:85:72:b0:e0:
94:de:5b:f3:c7:25:1c:cb:85:ae:58:46:26:ab:d1:4c:b8:c8:
e6:7a:39:fa:e0:99:10:23:f3:27:56:0d:7e:c6:eb:24:2e:5a:
09:3f:b0:fb:57:18:29:9d:41:ae:54:23:fe:ca:cb:c3:d6:0f:
1a:68:d1:ae:a2:df:31:35:30:41:20:99:b9:22:0a:a4:cd:2d:
ff:ec:f4:2b:f1:43:6e:f2:ef:6d:81:25:fa:f7:ab:96:23:8d:
87:f2:12:53:19:bd:e6:af:89:ab:65:39:cd:a2:96:b2:fa:3b:
e8:59:e4:67:52:26:3f:04:1e:cf:3d:44:94:af:31:b7:34:85:
48:12:4f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:44 2025 by rpki-client