Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/9cea23b8-fe07-33f8-88ee-380667682eef.roa
File: 9cea23b8-fe07-33f8-88ee-380667682eef.roa (raw, json)
Hash identifier: CcYUU6zUT8fa+KIBLVEeEWrPQpOU2/MDsEIdbonxKmY=
Subject key identifier: 1A:E9:43:37:DF:12:B4:E6:4C:D6:01:CD:E7:46:D7:D6:AB:31:4B:3C
Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad
Certificate serial: 010D0C9F43285848064501DC5F16006D4EA97CC0
Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/9cea23b8-fe07-33f8-88ee-380667682eef.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 14618
IP address blocks: 67.221.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:01:dc:5f:16:00:6d:4e:a9:7c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=00237c51-913e-4819-b2e7-8d25420107ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0d:03:2f:a6:2c:d8:7e:8e:2c:cb:0d:ed:55:
de:5f:d0:95:fd:0b:24:f8:a9:f0:84:de:c3:b7:c4:
dd:4f:17:74:14:cd:30:bd:f7:ba:3a:1a:ff:68:26:
7a:73:42:ad:94:90:84:29:56:dd:84:60:70:85:58:
bd:7b:4f:f9:a1:7c:c8:06:2d:69:17:ea:83:68:72:
1e:b0:03:b6:34:d1:48:b4:10:8d:2e:12:7d:81:9b:
e1:a2:18:49:4b:a1:0d:8a:cc:1a:b0:74:f0:fe:38:
4d:a9:a5:59:5b:66:9f:c0:69:fb:4c:14:9c:f1:88:
5e:31:b4:40:9f:db:af:d0:01:95:81:6b:12:71:cd:
88:54:97:6e:7d:77:bb:29:20:71:b7:1f:1a:fd:14:
dd:1b:27:f1:e7:44:f6:e1:4b:3e:46:1b:d5:c8:aa:
61:a6:1e:2a:ac:04:ca:54:62:2d:09:47:f5:32:14:
66:7c:28:27:60:3f:1a:8f:ef:59:c5:71:d7:fb:9a:
b8:be:6e:24:a9:03:ad:55:ba:74:d4:4a:be:e2:84:
b4:4e:52:78:a2:02:b4:ea:f4:4f:45:a1:71:4a:15:
c7:e3:70:5b:a0:73:7e:7f:97:31:98:80:3c:ec:77:
fd:c1:94:16:49:bf:18:3e:03:bb:64:51:ae:38:1f:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:43:37:DF:12:B4:E6:4C:D6:01:CD:E7:46:D7:D6:AB:31:4B:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/9cea23b8-fe07-33f8-88ee-380667682eef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl
X509v3 Authority Key Identifier:
keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:59:57:f9:1a:a3:90:cb:8e:e5:7f:e2:cc:2f:b8:37:57:0f:
d1:e4:99:6e:f3:91:eb:11:10:01:b8:e7:59:c9:c9:a2:01:d7:
7b:d8:bc:01:9f:62:cf:37:2e:8b:d8:75:05:20:6c:c1:16:aa:
c9:ca:39:21:e9:e4:c2:42:34:46:de:f7:32:d3:88:bb:23:6c:
f6:56:88:06:fd:2d:79:d9:49:e8:56:ba:d3:36:12:43:99:41:
83:80:ce:87:81:b9:21:87:b7:eb:ac:71:23:da:01:d6:56:65:
44:b2:27:4a:33:bf:56:2c:11:1c:42:ca:dd:f6:63:84:dc:e9:
e9:8f:a7:d3:16:8c:45:8e:08:5d:72:7e:e1:88:3c:84:99:85:
ae:6d:f4:37:26:92:69:b5:1e:1b:f7:f3:53:d8:bb:09:b6:6c:
6e:4e:b6:e0:b2:4e:9d:0f:ec:33:f7:3f:6d:7c:8b:12:e3:e5:
b9:9d:5c:83:7b:3e:59:c5:73:25:96:2f:cb:13:20:c7:d4:05:
01:55:e6:11:c1:7a:49:1b:03:68:e6:a1:7a:03:bb:df:3c:4b:
4a:7e:47:e6:f0:07:45:97:c4:a7:59:4b:cb:86:8b:c2:01:bf:
f1:b2:f1:d8:9c:4f:3b:8d:f0:46:af:76:35:57:b5:b3:f0:6b:
d2:85:3d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:31:03 2025 by rpki-client