Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa
File: 002d8448-bfd2-3f15-9758-645ea14a426b.roa (raw, json)
Hash identifier: kP3Qf25X6IkqsKXWIGwUWN948rLS8hjxGaWj4MWPCxg=
Subject key identifier: 0B:9C:78:98:DA:28:EB:54:77:21:8B:53:F0:C0:03:08:03:C2:8C:64
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858488E238F2A548D390C402831BB
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa
Signing time: Wed 15 Jan 2025 18:03:19 +0000
ROA not before: Wed 15 Jan 2025 18:03:19 +0000
ROA not after: Tue 15 Apr 2025 17:03:19 +0000
asID: 18785
IP address blocks: 216.106.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8e:23:8f:2a:54:8d:39:0c:40:28:31:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 15 18:03:19 2025 GMT
Not After : Apr 15 17:03:19 2025 GMT
Subject: CN=c2bf0e69-3c51-4c57-8ae6-c0177f5dfdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:a3:30:f4:3f:49:95:67:41:86:0c:dd:01:
50:7d:02:a6:5f:c8:a4:d4:9f:dc:4a:83:ae:32:44:
62:b5:62:3e:77:ef:52:c1:bd:7f:ac:b3:a3:13:a8:
04:38:63:3d:91:b0:bf:dc:17:b3:5e:e5:65:d7:c2:
63:c4:90:54:be:c2:ad:91:d3:fc:f9:6e:02:e2:0e:
52:21:ca:8f:e0:24:c7:39:68:47:84:0e:a2:6f:e1:
79:4f:c5:b5:cb:aa:98:aa:bf:d0:c8:e5:fd:7a:8d:
8f:32:55:76:ba:6a:7a:d0:95:f9:03:ae:c4:df:29:
75:2b:65:35:cd:a1:84:aa:7a:65:68:3d:1b:1d:d8:
49:f4:a9:f9:c0:ad:cb:af:61:fd:ef:fa:e7:3f:0f:
bb:14:15:df:b5:4a:87:8d:c4:1b:80:a9:33:57:b3:
66:b2:0c:f2:86:17:b1:bf:51:1e:bc:8c:34:df:d7:
5a:57:f7:a8:40:8c:ff:2c:ed:31:bd:c4:25:9a:d5:
23:26:19:95:ad:46:f8:bd:28:80:56:b5:0b:0f:33:
4f:45:49:19:fd:24:4c:27:4d:27:5b:58:49:14:9b:
ea:61:c0:8d:ca:d5:5d:39:09:80:23:c2:dc:a1:22:
04:24:8b:a4:5a:fc:9d:fb:2f:76:9c:e3:d9:f8:ed:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9C:78:98:DA:28:EB:54:77:21:8B:53:F0:C0:03:08:03:C2:8C:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/002d8448-bfd2-3f15-9758-645ea14a426b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:96:4d:fc:01:6e:18:cd:df:2e:d6:05:94:20:14:28:33:c5:
18:59:76:40:a5:0a:c4:53:10:ee:4a:e3:21:f1:45:91:89:8c:
d3:2b:61:82:a7:40:a4:20:a3:bf:a5:27:20:14:dc:32:3c:aa:
50:c0:d1:a8:b0:cd:b1:5a:99:b3:f6:9f:0f:ce:bd:38:76:38:
dc:9c:42:49:e9:52:1a:f1:a1:e5:93:20:ca:c5:22:c9:c2:37:
73:fb:d5:bf:66:23:b6:27:62:02:d6:41:9e:b2:da:2e:a8:33:
78:1d:fe:63:ce:1e:42:9d:d8:4c:72:29:c4:74:ee:e0:c6:32:
14:36:7d:bf:3d:64:55:ff:1f:c4:c3:b0:f6:22:8c:74:b5:19:
32:b6:53:e6:6c:ac:59:53:f4:38:ef:b7:0a:7c:68:00:6b:ae:
d1:d2:e5:e8:7a:c0:0f:6c:4d:28:55:7b:06:33:14:c2:1f:87:
ac:e6:ae:ac:74:aa:51:04:29:0f:e1:af:67:3e:f3:70:51:ad:
08:81:8f:8e:a5:e8:97:3c:d4:89:0d:10:34:38:1e:63:80:3e:
22:16:1e:1f:d2:ce:dc:a7:41:00:3c:a4:cc:d6:22:5f:fe:30:
bf:b3:03:d3:83:28:e4:50:c6:74:64:d6:52:d8:d2:c7:02:34:
a1:85:f5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:03:09 2025 by rpki-client