Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b082e97-5fef-3aa2-b9b3-ea56f7581900.roa
File: 3b082e97-5fef-3aa2-b9b3-ea56f7581900.roa (raw, json)
Hash identifier: cnyrLrHoFnss+DnhvCkvdktjgCy+LOJxICsQc/scpV4=
Subject key identifier: 86:44:96:F9:30:AA:CD:04:0B:21:A1:A3:EF:2C:AF:63:6B:53:6D:74
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F4328584819D00261738A0C66C7280E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b082e97-5fef-3aa2-b9b3-ea56f7581900.roa
Signing time: Thu 05 Dec 2024 02:00:39 +0000
ROA not before: Thu 05 Dec 2024 02:00:39 +0000
ROA not after: Wed 05 Mar 2025 02:00:39 +0000
asID: 27424
IP address blocks: 216.66.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:19:d0:02:61:73:8a:0c:66:c7:28:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Dec 5 02:00:39 2024 GMT
Not After : Mar 5 02:00:39 2025 GMT
Subject: CN=fc13f05b-9ee0-48fe-a5ca-8976a2b43e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:32:23:bb:13:58:d5:5d:99:cb:53:5f:cf:
75:5b:28:25:ba:c5:9c:35:90:d9:be:85:05:1f:58:
67:91:1d:1b:a0:12:50:4f:43:e5:9c:46:e4:f1:f7:
b7:8b:d5:56:82:da:06:30:53:1b:e2:8d:ed:2f:97:
0a:20:59:c6:00:82:2a:87:50:7f:75:70:1f:d7:b0:
bd:14:80:d5:c6:22:1c:27:76:4b:29:e7:4e:94:c1:
7d:e4:76:73:10:12:e8:53:18:29:fe:34:3f:4d:71:
d7:0d:a4:9d:8d:ef:07:96:48:d3:2b:af:16:53:25:
7b:0c:ad:0b:2b:f4:a3:36:db:c9:d1:ca:9c:ea:eb:
6f:b7:aa:1b:19:85:c4:d6:f9:ce:b1:f1:fe:08:76:
c5:0a:06:ea:0b:04:07:2f:01:d7:45:e3:1c:b0:4a:
54:55:ab:05:a5:3c:58:6d:6b:eb:5c:93:73:e7:b8:
82:63:45:44:95:20:81:72:ad:d9:6a:6f:92:e1:20:
05:71:d5:8e:73:d5:5f:8e:ab:0d:1f:72:6f:ed:86:
ee:69:e4:de:bf:c8:ce:9f:55:fb:9f:95:f8:ca:b6:
fe:9f:30:79:75:2f:10:dd:bb:1f:9d:92:68:16:59:
34:fd:0c:8a:3a:0a:e8:0b:33:10:4e:27:11:7a:9e:
19:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:44:96:F9:30:AA:CD:04:0B:21:A1:A3:EF:2C:AF:63:6B:53:6D:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3b082e97-5fef-3aa2-b9b3-ea56f7581900.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:25:80:b7:42:f8:b8:33:c6:65:b4:2a:d1:6b:e4:4f:e7:42:
ae:62:7c:e7:55:57:25:93:1f:cb:77:d3:2b:5c:e8:bd:f2:6f:
7e:31:e3:da:a0:f9:17:e3:42:0d:cb:49:17:a1:c2:67:7d:51:
bf:67:e7:5f:d8:2f:20:e6:01:58:07:d4:10:cf:79:6b:81:78:
82:77:7a:31:e1:a7:d5:7c:60:6c:99:34:ca:c0:ed:73:07:71:
c0:67:3a:52:83:cf:43:26:8a:ed:46:02:b1:c7:cb:c6:20:e7:
41:2e:e8:65:50:64:89:79:66:c7:3c:38:27:ad:f6:3f:f3:89:
02:76:b2:59:37:90:60:ae:5c:77:c0:1e:7b:22:69:b9:e7:6a:
4b:10:91:ad:8e:4e:73:f2:d4:f6:2b:a3:72:3f:ca:37:da:98:
4c:40:85:bf:ce:a4:fa:b3:33:56:ad:af:cd:9a:b3:f6:b1:68:
95:1d:1a:d8:2a:23:a9:33:34:f1:c3:3d:71:f3:bc:02:77:87:
a6:38:f7:81:79:80:11:f9:95:23:d8:b7:9f:10:5b:bf:16:9c:
f0:e9:57:cf:b1:72:26:84:3a:d9:65:b7:4a:e4:2a:6a:c2:47:
59:dd:a2:f6:ec:63:2b:d2:be:4e:7e:46:50:7a:d5:c7:c4:b7:
4b:2a:0c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:49:48 2025 by rpki-client