Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa
File: f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa (raw, json)
Hash identifier: iylFt5bZDQYN7GJwqWwQ/3zixHBhgbcbDXwU8ieI9dY=
Subject key identifier: 7F:98:33:0A:A8:B0:EB:02:72:DC:4B:39:82:C0:57:08:EE:99:1F:CD
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848239555A37E66F1D589102980
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa
Signing time: Sun 08 Dec 2024 14:00:51 +0000
ROA not before: Sun 08 Dec 2024 14:00:51 +0000
ROA not after: Sat 08 Mar 2025 14:00:51 +0000
asID: 701
IP address blocks: 216.3.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:23:95:55:a3:7e:66:f1:d5:89:10:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 8 14:00:51 2024 GMT
Not After : Mar 8 14:00:51 2025 GMT
Subject: CN=f90da656-1c43-404d-a54e-0cfb8756f4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:37:c6:4a:35:71:34:4a:2f:dd:05:47:01:
91:d4:98:ba:39:c9:ea:66:a6:b9:35:b1:b3:8e:a7:
ec:d8:c6:79:82:2b:f0:0c:f2:9c:9f:cc:3c:8f:ba:
40:bc:09:5d:ec:0e:45:45:b0:52:19:da:3f:d5:11:
59:68:6b:d5:fb:d7:75:ff:f4:1e:cc:6c:43:38:04:
19:38:f9:d3:3f:2c:67:f7:49:bb:b9:30:28:08:13:
c8:41:2a:20:03:dd:13:7d:74:03:15:fb:24:12:41:
0a:9f:31:22:a6:1f:78:43:5e:da:f4:49:0d:f0:9a:
d6:e3:b5:a2:04:20:a4:5d:59:ac:df:7d:ac:0c:dc:
2a:bc:c5:9c:d1:2f:f3:19:70:c8:31:3e:10:b5:e3:
4b:f7:e3:bd:04:8d:06:53:eb:86:3f:7a:96:59:6b:
c6:f7:6f:04:38:a6:ee:75:af:c2:51:da:59:a3:b9:
41:ee:43:19:5c:da:66:00:99:0e:3d:3c:78:1d:e2:
eb:62:d3:3c:76:cc:b0:0a:7c:d0:5f:01:94:4f:f7:
52:8a:5f:3b:59:27:62:96:c7:4f:ab:b7:68:1c:25:
d8:06:c4:01:a4:81:1d:c9:95:b0:fa:8e:82:ef:66:
4f:bb:ff:45:e0:1b:70:22:4e:4a:f0:48:12:e8:6a:
84:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:98:33:0A:A8:B0:EB:02:72:DC:4B:39:82:C0:57:08:EE:99:1F:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f04f1e20-3dbd-3181-87ea-78aa41e63ee1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
216.3.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:55:ba:ba:67:ec:c5:34:18:fe:27:e8:12:30:ab:c7:8d:87:
77:81:87:57:36:22:45:fc:e8:ee:d9:48:74:f7:d7:29:03:ec:
6e:e5:36:df:a5:85:57:2b:d4:54:50:08:c8:39:bb:2b:10:ec:
2c:a4:57:78:bb:a9:f5:9b:e0:f8:49:46:bb:d4:af:21:87:32:
ef:cc:5c:a6:b1:b6:b5:74:c8:9d:e5:1c:57:d6:9f:33:af:32:
55:6e:15:76:94:fd:01:0c:d4:28:3a:6b:5c:fd:33:c3:a3:0a:
36:fc:1c:53:a6:1b:4b:23:32:30:4e:ed:7d:53:23:34:80:dc:
6c:41:45:76:ec:ba:81:40:13:16:6e:e8:8c:37:06:f3:25:c3:
57:77:8a:f0:a4:ea:0b:38:d4:95:cb:eb:d7:b5:65:65:33:8f:
00:f8:fe:2f:51:d6:b8:81:47:c6:e9:c7:49:ed:df:e4:75:ef:
ad:5f:09:cf:99:d7:86:df:51:42:c9:48:58:7c:12:3a:de:7d:
ac:ba:fa:fc:78:1d:1e:44:f5:61:88:9f:9b:31:d2:ff:cb:f6:
9c:f7:40:4d:35:ca:58:d7:0d:fc:72:1f:f3:05:1b:43:ef:4d:
11:b1:6b:44:ae:e5:52:37:4b:d2:1f:ea:9d:70:25:bd:f4:ea:
2c:77:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:25 2025 by rpki-client