Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d51b882c-f28a-3aa6-bded-aa026e9f7829.roa
File: d51b882c-f28a-3aa6-bded-aa026e9f7829.roa (raw, json)
Hash identifier: AmCUaTwyozOaQNmJbmmLOt7upUi8qKh10L7Q0IZsjhA=
Subject key identifier: 11:CE:D0:6E:DA:34:28:AF:48:AA:8B:61:1C:43:53:AA:8A:93:DD:D7
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848573AD4237DA62EC9B77FA200
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d51b882c-f28a-3aa6-bded-aa026e9f7829.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 13576
IP address blocks: 216.249.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d4:23:7d:a6:2e:c9:b7:7f:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=101c4a9b-c9a3-46b1-804e-bff02bf86efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:67:b5:f5:41:0c:86:10:40:36:37:f5:14:
e8:24:12:53:26:0d:d9:87:1a:2e:63:ee:7e:05:e9:
90:2f:e8:6c:e5:56:5f:b4:7c:0c:f6:65:e3:d0:5c:
1e:21:52:4a:6f:4e:cc:f9:7b:b3:d8:f7:c3:0c:cf:
82:c4:b2:54:2a:d6:e8:f9:e5:b4:e8:35:97:a1:59:
91:0f:16:04:98:38:33:1c:03:96:41:02:1b:d7:42:
a5:f4:94:72:32:c4:27:c6:ef:cb:95:ab:83:96:c8:
86:67:46:c8:f5:db:5a:be:03:98:a0:05:42:82:e3:
df:20:40:db:b0:70:12:56:dd:f9:5a:b6:30:ff:36:
f3:72:c5:d6:7f:95:29:9d:f5:2e:d3:85:45:85:00:
1e:8d:7d:3f:0e:b1:79:ae:dc:4e:a1:71:e7:5c:55:
71:bb:1a:f8:cd:6e:68:3b:20:b6:45:13:57:50:e9:
04:fc:da:9f:f2:57:ed:3d:8b:e6:e2:e1:f5:85:8d:
6f:25:ed:53:71:76:b0:9b:47:11:03:fe:ac:5d:fa:
a5:84:3b:d1:50:49:ea:72:07:11:c2:20:5e:b7:f2:
7f:dd:44:db:38:1c:fe:17:0d:f8:fb:19:45:22:84:
bd:76:9d:70:04:4f:4f:7c:81:3e:2b:81:f3:82:cd:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CE:D0:6E:DA:34:28:AF:48:AA:8B:61:1C:43:53:AA:8A:93:DD:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/d51b882c-f28a-3aa6-bded-aa026e9f7829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.227.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:d6:9c:89:09:6d:61:0f:36:22:b0:89:e0:e0:38:83:c6:ed:
8e:fa:b1:b0:2a:f4:2d:fa:90:40:18:b9:01:02:84:9a:6d:80:
be:bf:8d:82:60:0f:3f:07:bf:c2:ba:09:1e:ad:95:cf:6d:64:
8f:c0:64:30:bc:9f:b7:7a:92:fb:88:c0:13:c1:0e:30:2c:28:
17:86:dc:da:2c:f5:36:dd:23:b4:62:45:83:96:5b:c6:cc:95:
48:65:2d:8d:a3:7d:28:7c:8b:2a:f3:30:14:99:93:ef:37:1b:
79:a4:b3:38:37:13:d1:85:3f:9c:4f:83:cc:39:e2:0f:d6:f8:
e3:28:4e:2d:bb:8f:0d:5b:fd:fb:f5:37:19:c8:20:ea:c6:f9:
1b:63:cf:75:a2:c8:b2:61:79:97:ff:ca:1a:c7:0c:42:fd:51:
95:f6:20:f4:41:77:90:62:d7:e3:ee:ec:0f:ff:c5:df:3a:be:
a3:39:7b:b5:81:b1:b0:09:a5:01:a0:7c:f6:10:a8:38:92:c2:
ea:6f:7e:70:15:8a:f8:e9:aa:2d:92:71:52:bb:32:92:9e:4f:
75:fa:33:45:34:fe:cd:38:e9:d8:48:c0:ed:25:f6:63:8a:46:
24:28:9e:16:d8:51:0e:a4:cb:18:72:68:2f:c4:ee:35:52:4c:
43:9b:bc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:13 2025 by rpki-client