Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa
File: 5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa (raw, json)
Hash identifier: cwoPhnV5RBvvH6rQ9CmrWe68kdgC9agC6pCNRCqF8zw=
Subject key identifier: C4:2D:F2:E9:9F:34:7F:79:C9:A4:C0:F2:34:59:50:B4:91:D7:98:EB
Certificate issuer: /CN=904d8b40-9ccb-4af8-bb7d-f36a96a343c8
Certificate serial: 010D0C9F432858489340A880B138769340789BF0
Authority key identifier: 45:EB:72:23:96:2A:E5:43:8C:E4:23:D5:E6:58:4C:3E:D2:9E:7F:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa
Signing time: Fri 17 Jan 2025 14:00:53 +0000
ROA not before: Fri 17 Jan 2025 14:00:53 +0000
ROA not after: Thu 17 Apr 2025 13:00:53 +0000
asID: 400362
IP address blocks: 216.181.108.0/24 maxlen: 24
2606:a5c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:93:40:a8:80:b1:38:76:93:40:78:9b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=904d8b40-9ccb-4af8-bb7d-f36a96a343c8
Validity
Not Before: Jan 17 14:00:53 2025 GMT
Not After : Apr 17 13:00:53 2025 GMT
Subject: CN=619046c4-6dc7-4ba4-924b-dfe7805cc77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e0:45:0c:26:34:fe:c0:a8:74:49:e4:48:20:
86:3c:32:1d:2e:7f:6d:69:af:e7:93:45:2e:fd:12:
cb:5d:aa:8a:ab:6a:37:20:86:0c:65:09:b5:d0:62:
8a:ca:a8:42:8e:6a:56:af:bc:74:66:bc:45:ad:4e:
c3:a6:f5:61:06:41:15:13:8d:f2:85:47:0a:ff:48:
65:90:5f:5b:4b:c0:b5:e6:16:39:1c:1c:8c:d7:94:
0c:c0:77:54:2c:d4:b6:4a:36:0d:3e:7b:e0:81:c3:
1b:ce:54:96:65:a8:72:b6:19:52:ac:bd:03:1c:11:
c5:e3:4f:99:5e:3a:b3:58:a7:00:56:21:c3:f2:0f:
dd:a8:d3:74:35:a0:56:72:0c:54:8a:c5:5b:4d:ec:
55:dd:36:1b:07:d8:c2:9e:a4:22:78:6e:71:34:8a:
0f:58:26:31:a3:a8:fb:37:76:e3:26:57:d8:88:a7:
d2:d3:62:85:03:c6:89:91:93:ad:d2:9d:44:63:89:
f9:0a:17:f9:00:b0:cb:0f:fa:77:72:9f:3f:b1:02:
eb:f4:04:c0:8e:f0:a3:39:de:03:03:13:9c:39:ee:
2d:e0:76:74:de:62:4e:b1:37:b8:c3:a3:89:76:25:
85:41:14:55:10:ae:1e:8d:b1:38:5a:b7:34:93:ce:
f9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2D:F2:E9:9F:34:7F:79:C9:A4:C0:F2:34:59:50:B4:91:D7:98:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/5bc53f1b-becc-3c12-ba26-a5810462a8f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.crl
X509v3 Authority Key Identifier:
keyid:45:EB:72:23:96:2A:E5:43:8C:E4:23:D5:E6:58:4C:3E:D2:9E:7F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/904d8b40-9ccb-4af8-bb7d-f36a96a343c8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.181.108.0/24
IPv6:
2606:a5c0::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:47:6c:66:d1:25:df:d4:ea:10:c8:da:4f:90:0d:21:03:3e:
0f:06:b6:5c:ca:ac:8b:d6:e0:64:a1:54:d9:04:c4:9e:dc:4c:
66:0c:50:9c:2e:7c:04:79:4d:4d:3a:f4:9b:f3:46:ff:00:bb:
d6:4b:a4:dc:53:6d:12:e5:67:c5:4c:7e:dd:ce:75:1f:58:98:
2f:dd:d1:e1:3e:5b:94:44:ee:de:d7:6f:73:5e:41:40:3d:df:
04:77:d4:ea:3d:0f:2d:33:a2:5c:e8:8c:ec:04:6b:e4:10:ed:
7e:1a:3d:25:3c:8c:77:92:dc:f0:18:80:21:86:31:9b:9a:35:
87:ba:a6:7a:5d:ff:d7:e5:60:50:cd:c4:7b:3d:31:d2:40:2b:
b0:3e:f0:4d:08:01:e5:48:6c:44:ea:fa:fc:c7:4d:fa:cc:6f:
c9:92:dc:bb:44:50:2b:79:25:a3:fa:2d:f1:6c:50:d2:0f:c9:
40:8b:b9:ff:69:83:12:4b:3b:00:a3:36:1d:13:dd:49:4d:42:
27:f1:04:47:de:24:4c:a8:e5:a4:f4:0c:cc:b9:a6:7d:bd:26:
6a:cf:91:af:b7:b4:86:88:dc:b0:03:f3:68:a5:59:25:6e:f0:
d1:55:b5:f9:36:38:40:ba:91:0c:3f:ff:04:2e:10:55:ca:86:
46:a4:8d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:33:21 2025 by rpki-client