Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87e947e3-f9b3-3b5e-b615-396f3f4a58a7.roa
File: 87e947e3-f9b3-3b5e-b615-396f3f4a58a7.roa (raw, json)
Hash identifier: ji3fumTXkINjVqUDYTmQ+UFpQqPCmRJFigqqjq3rTvs=
Subject key identifier: 8A:F2:73:45:78:48:78:B2:DE:86:CB:69:15:93:FA:23:43:CE:60:9A
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848345580D7B7FE5E8766F3D508
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87e947e3-f9b3-3b5e-b615-396f3f4a58a7.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 20115
IP address blocks: 16.14.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:80:d7:b7:fe:5e:87:66:f3:d5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=f906876b-41a9-4956-a33f-aa7ce4a1f5bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:0b:47:7a:ca:37:c8:4f:c9:16:ef:5d:17:
9b:d9:92:6a:0e:9a:80:93:7c:d7:dc:42:9f:d4:20:
39:57:f1:b5:4b:8b:fb:d9:bc:09:d3:f4:07:ea:f0:
f5:ef:e3:6d:a8:9e:8a:64:e0:c4:ed:29:fc:59:b2:
a3:05:f7:7b:66:a3:f1:87:98:a8:d4:bf:a0:89:ac:
7a:0e:85:ed:0e:36:2d:e9:63:28:cc:5d:5e:28:d2:
56:73:87:aa:bd:c5:e3:7f:99:02:56:61:c8:69:3a:
95:6a:a7:6f:ac:96:1d:ee:97:fc:c7:37:49:1c:fe:
7b:53:87:a9:5a:5b:8f:37:a4:ce:47:44:2e:18:74:
f3:05:34:cf:70:5e:79:b0:8b:38:4f:59:a4:4e:19:
08:fc:44:a8:78:1f:4e:86:3b:91:e6:18:56:14:c6:
bf:76:f2:8f:46:82:f4:b1:1d:05:5b:68:31:54:5b:
d6:91:cd:de:f1:80:79:26:57:7b:c1:8e:54:db:8b:
cc:79:06:29:50:99:eb:cb:53:f7:ec:1b:c8:54:98:
ab:cf:de:e6:68:09:78:09:bd:22:cf:36:5d:4d:7b:
1f:24:e3:33:86:d1:e3:8f:c2:40:6c:c8:27:03:5d:
91:74:2a:b8:b2:d0:94:8f:3c:42:2c:06:9b:2a:93:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F2:73:45:78:48:78:B2:DE:86:CB:69:15:93:FA:23:43:CE:60:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/87e947e3-f9b3-3b5e-b615-396f3f4a58a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
16.14.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:c8:19:92:1f:e7:67:7b:0a:2a:4f:d1:79:12:a2:fc:da:f9:
81:3c:47:1d:53:73:d3:5d:bb:09:e9:8f:e2:ce:af:1a:2b:97:
1e:59:19:2f:0a:70:64:9e:c3:a3:ed:de:51:e4:72:52:06:2b:
5e:64:a5:15:42:2c:35:c8:86:f9:72:25:9e:a5:48:67:d9:f1:
0b:8d:70:ab:a2:3b:60:57:b4:43:e3:06:0d:f9:db:8f:89:4e:
9f:5f:f2:e5:71:88:f0:d1:fb:c0:3e:8c:60:ce:43:dd:92:09:
33:27:63:51:40:74:93:d4:89:4f:24:b0:02:77:34:ab:69:63:
8c:6d:9b:f0:57:d6:08:ec:73:f3:07:28:7d:d6:a7:7d:a3:fa:
6b:9c:bb:17:13:71:74:d0:52:d8:98:01:ca:aa:62:86:2e:4d:
8f:86:8c:54:3f:2a:e8:06:e3:42:6d:9a:5c:73:36:4e:3c:26:
55:2f:2f:50:d6:d8:29:71:cf:c7:1c:a7:ef:22:fd:1a:db:88:
96:8e:e1:d2:44:ab:8c:f4:e5:33:b6:ca:a1:b6:02:a4:b8:cb:
1e:30:d3:8b:1e:12:53:e6:da:0e:80:b7:4a:3f:a0:a0:35:25:
65:8f:02:dd:84:59:e5:fb:e0:6a:dc:0c:82:1f:22:00:d5:9c:
bd:d3:26:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:23:19 2025 by rpki-client