Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa
File: 0436a35f-9148-3f28-8e51-98ce1b0011b0.roa (raw, json)
Hash identifier: SFZrjbtCJxtyRtj/fmwGbHJ1KOHaZ4TiVHuVC2/4Ols=
Subject key identifier: AB:C0:8A:AD:CF:34:DE:1E:86:AD:CC:AA:A3:0D:2B:F8:C3:FD:C6:67
Certificate issuer: /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial: 010D0C9F432858484C10223B8022577527891B50
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 13335
IP address blocks: 67.231.0.0/20 maxlen: 24
208.94.156.0/22 maxlen: 24
216.82.224.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:22:3b:80:22:57:75:27:89:1b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=3c49f1a0-100d-43ec-babb-603a6c6c56bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:16:69:8c:13:5e:a0:da:3a:10:91:7c:69:
06:57:fc:5d:8d:21:3c:5e:95:76:bc:c0:97:76:bd:
36:8f:b1:ab:95:fb:dd:f2:7f:ce:47:f2:d2:5e:4e:
f3:53:a9:42:63:29:ce:9d:2d:66:d3:69:4a:f9:5f:
0d:1d:56:9f:3d:3c:5d:b3:08:10:1e:9f:a8:d0:69:
b4:d5:e4:47:57:f1:b7:16:24:f3:be:2c:b5:a7:af:
3f:73:89:98:96:fd:bf:3b:d6:ce:36:58:40:b2:d1:
25:46:a9:80:9d:82:fd:5a:ba:92:50:75:8d:5c:75:
07:72:ef:58:f9:eb:53:bb:e8:30:ed:23:6a:b5:5a:
f0:b6:9c:b4:03:00:7d:7a:49:2b:9b:72:fc:f1:d4:
f0:7d:1a:a4:8c:b5:7f:90:f0:dc:95:20:05:97:5c:
f0:f1:58:3c:e4:4d:90:25:c1:de:c5:bf:7e:39:d3:
a0:0c:cf:be:ec:1e:bc:60:ec:a5:27:ba:d1:e0:0d:
b2:a7:9d:97:6c:33:29:8b:f3:25:80:22:05:4a:b6:
0b:81:4b:50:8b:8c:83:56:09:59:61:98:df:5d:e1:
e1:0d:d0:1f:bd:23:e2:35:b5:30:16:50:b7:e7:53:
d8:03:f5:61:e2:03:19:da:41:28:c9:5f:0f:d3:68:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C0:8A:AD:CF:34:DE:1E:86:AD:CC:AA:A3:0D:2B:F8:C3:FD:C6:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0436a35f-9148-3f28-8e51-98ce1b0011b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
X509v3 Authority Key Identifier:
keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
sbgp-ipAddrBlock: critical
IPv4:
67.231.0.0/20
208.94.156.0/22
216.82.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:70:bd:8c:41:0b:51:db:f8:dd:40:8c:33:73:4a:5f:33:17:
1e:35:f0:b0:75:b3:83:5b:53:c5:4b:fd:ac:63:ec:49:bd:2d:
5c:b7:d9:32:8e:2a:f4:62:cb:7c:21:b9:25:ab:3f:51:c8:7b:
4b:9b:ad:53:b0:b3:a9:4e:fe:76:cc:23:ca:32:08:04:81:bc:
16:74:c9:a1:d3:0d:0c:45:5e:bb:3a:f5:25:4d:85:64:a0:74:
f2:d8:3c:7c:cd:6c:47:16:18:f4:44:51:b0:b4:0b:8a:ae:d1:
7f:0b:c7:9f:49:e0:8f:9f:c1:92:c0:75:0c:a2:ca:ef:e8:74:
34:f0:c5:9b:dd:c7:63:00:ea:6e:24:38:0e:7f:21:36:c0:db:
91:fd:c7:23:dc:e0:74:9d:d6:c2:80:12:38:75:c5:02:b0:c1:
35:a2:58:6b:67:e8:d9:c2:3a:9f:18:e4:4d:8e:b2:5e:29:81:
04:73:cc:78:ae:f9:51:20:09:07:9f:da:c5:90:7c:53:39:b2:
f6:65:c3:56:48:8f:c2:e6:b1:bb:2c:b2:c8:0a:f3:40:10:08:
b5:65:21:55:82:d1:49:b4:17:e6:3e:e3:ec:5e:89:8c:59:0d:
90:92:e3:ea:83:7b:7c:7b:82:fd:15:19:53:07:01:45:ac:e0:
45:bc:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:38:53 2025 by rpki-client