Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a854a339-946b-37a9-aece-f00e7f2492da.roa
File: a854a339-946b-37a9-aece-f00e7f2492da.roa (raw, json)
Hash identifier: vUJETa9GI8RgTaxH9m0MPO5YBEkc6tKmAgfD3LCreo0=
Subject key identifier: E4:CA:76:69:3E:6F:1E:CF:C1:E6:47:FE:24:ED:1B:B6:B9:C8:01:81
Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial: 010D0C9F43285847FC7F9E43728EF635C7307F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a854a339-946b-37a9-aece-f00e7f2492da.roa
Signing time: Sun 24 Nov 2024 14:00:39 +0000
ROA not before: Sun 24 Nov 2024 14:00:39 +0000
ROA not after: Sat 22 Feb 2025 14:00:39 +0000
asID: 214315
IP address blocks: 216.66.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:fc:7f:9e:43:72:8e:f6:35:c7:30:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Validity
Not Before: Nov 24 14:00:39 2024 GMT
Not After : Feb 22 14:00:39 2025 GMT
Subject: CN=7a4764b2-afb4-4e77-bfa5-a12f2e4176d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:76:6b:cf:09:f8:e6:c8:0d:9a:ac:a6:30:
d0:02:8e:6d:ec:11:a5:1c:be:f4:0e:a6:88:a7:55:
e1:bf:66:18:5f:39:eb:17:e5:fe:83:d5:38:7b:cf:
8b:fe:84:a7:af:b9:2a:6b:7d:a0:d2:51:f6:df:68:
4f:07:3e:cb:7f:af:b8:b9:dd:7f:95:e7:0a:b6:db:
48:ed:cd:1a:bb:8d:3d:1a:8e:a4:0b:41:af:9a:85:
aa:6f:2f:54:5a:40:42:ae:c7:19:e5:e4:25:ca:4a:
b1:fd:e3:28:b8:4d:d7:3b:79:fb:d8:dd:09:28:10:
4c:c6:82:f9:f0:c5:0c:a1:e1:1a:df:27:bd:ee:7b:
4a:f2:b6:65:7d:66:12:74:bb:68:58:e2:70:84:11:
16:54:d8:8a:77:d6:37:67:62:ef:ac:d7:a7:17:f9:
4b:8a:46:f8:47:d0:f7:0f:c6:f3:23:f3:bc:4b:96:
d4:2c:94:bd:e7:81:32:1c:aa:4c:ee:a3:55:cc:2e:
06:8e:2f:1c:f6:c9:f0:3f:a7:d7:07:2c:87:78:74:
91:46:e6:33:da:f4:93:ee:6b:82:eb:6d:50:2b:48:
4e:89:a2:b7:07:48:03:f8:14:4a:71:73:a0:c8:c8:
52:6d:c7:7f:e9:22:e5:65:7f:d8:48:bd:69:1f:3b:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CA:76:69:3E:6F:1E:CF:C1:E6:47:FE:24:ED:1B:B6:B9:C8:01:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a854a339-946b-37a9-aece-f00e7f2492da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
X509v3 Authority Key Identifier:
keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
sbgp-ipAddrBlock: critical
IPv4:
216.66.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:fe:e1:98:9f:0f:5b:d0:3f:d6:7a:9b:0d:8a:09:0d:3b:69:
2c:2c:75:50:b7:d3:9e:a6:5f:b7:5d:a9:ec:f7:1a:9e:31:58:
42:8e:af:c4:af:48:fd:a7:a8:4c:a2:80:d2:20:a8:60:d2:76:
75:41:28:b7:d0:05:73:7c:d1:a2:d9:22:ad:98:6d:55:3b:ae:
3a:4f:fb:21:2b:22:a3:50:52:b6:92:0a:28:5c:ed:8c:da:72:
e5:c2:5d:65:f8:0b:33:0e:85:d4:5f:e4:ae:73:4d:5a:d6:1d:
44:90:d9:80:fc:0b:9b:77:d6:74:13:dc:ff:68:78:c6:19:dd:
59:d6:ce:45:42:4b:b5:b4:f9:5b:da:b6:6d:2c:85:06:4f:2b:
7d:84:d3:7c:e9:ba:d5:0e:ad:60:b3:43:f0:c8:41:b2:8d:7c:
c3:fc:45:70:56:3d:10:ee:e9:bc:17:82:9f:6b:ff:7e:8f:86:
84:17:75:31:14:fe:f8:dd:73:b3:6b:a0:63:a3:15:91:c8:07:
df:79:b1:a2:da:fc:a5:12:34:ec:0c:a0:20:eb:d3:00:ad:71:
ef:6b:81:39:ef:8c:b2:9a:0a:33:be:d8:27:f2:b8:08:a8:8a:
04:5a:c5:f4:83:21:a6:07:ca:f3:ee:d5:f6:e0:b8:f9:7e:8a:
ef:15:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:44:09 2025 by rpki-client