Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa
File: 17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa (raw, json)
Hash identifier: KPowk/NumJhgRkLBX4PoC1U4SI6/1v/vg0QcEDNqyog=
Subject key identifier: A5:3C:52:1C:F8:3F:1A:41:79:BC:3D:06:D0:FF:31:39:3A:42:DA:83
Certificate issuer: /CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Certificate serial: 010D0C9F4328584812D538E914D433FE430DF800
Authority key identifier: BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa
Signing time: Mon 02 Dec 2024 14:00:51 +0000
ROA not before: Mon 02 Dec 2024 14:00:51 +0000
ROA not after: Sun 02 Mar 2025 14:00:51 +0000
asID: 16880
IP address blocks: 216.99.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:12:d5:38:e9:14:d4:33:fe:43:0d:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c672a798-a979-4f51-85ae-e0eec3dcb9f7
Validity
Not Before: Dec 2 14:00:51 2024 GMT
Not After : Mar 2 14:00:51 2025 GMT
Subject: CN=50ff5f84-76cb-49db-9fb0-9c9efd090734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:00:94:39:16:71:af:b7:1c:16:41:fa:4a:
f0:83:bb:2b:3b:42:2f:d2:dd:eb:03:b3:5e:dd:95:
7a:31:81:6d:dc:c8:71:92:00:f6:50:cc:e7:50:ff:
1e:33:cd:78:60:f5:73:61:61:9f:7d:f6:5c:6e:3a:
e9:48:f6:d8:17:10:e3:46:f5:46:1d:7e:43:e6:e7:
38:58:40:96:2a:48:0c:76:36:bb:da:79:c1:c1:33:
b7:55:e4:42:06:6c:6a:90:e1:05:51:dc:61:f5:d2:
c2:50:6f:f8:c5:8d:59:7b:ef:41:79:55:d3:31:9f:
5e:9c:0a:65:ac:76:80:5c:bc:10:4e:6d:46:2c:42:
32:5c:ce:29:2f:07:c4:02:c9:50:37:39:9f:29:c1:
04:0a:d8:8a:c8:bf:d0:b7:cb:d6:33:50:fb:72:ea:
41:53:55:d4:47:d2:4b:10:b8:de:b9:b7:d3:d2:22:
05:a0:b9:9a:13:16:cd:8a:b8:8d:43:25:ec:1a:ca:
32:0d:13:6e:cb:dc:c4:ae:46:a0:ca:46:ba:11:95:
0a:7f:0e:5b:d0:08:04:ba:3e:ed:3f:f8:f6:ec:3f:
29:da:cf:aa:55:b7:29:c2:03:70:f1:8e:9d:ac:30:
b2:86:8a:54:82:54:9c:b7:a9:8b:ce:54:8f:12:f8:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3C:52:1C:F8:3F:1A:41:79:BC:3D:06:D0:FF:31:39:3A:42:DA:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/17d58398-4ac1-3bdc-956f-c5d4d3463e85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7/c672a798-a979-4f51-85ae-e0eec3dcb9f7.crl
X509v3 Authority Key Identifier:
keyid:BA:29:28:35:60:B0:C0:7C:AA:CE:F6:9E:9E:BA:AD:B0:A2:20:36:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c672a798-a979-4f51-85ae-e0eec3dcb9f7.cer
sbgp-ipAddrBlock: critical
IPv4:
216.99.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:dd:03:4b:10:68:6e:83:6b:e6:65:45:09:20:82:5a:30:55:
e6:04:9b:d3:cd:9f:f6:f8:6c:eb:81:a0:f2:16:bc:5a:1e:98:
27:a8:e8:53:9c:35:21:4e:f2:56:47:d7:fb:3e:25:ff:15:8b:
db:dc:a2:9d:64:15:d6:1f:b7:68:58:63:9c:4f:c3:0c:95:07:
da:3e:6d:68:5a:93:30:31:4c:91:03:58:6c:32:d3:51:68:48:
68:1a:09:05:17:eb:5f:89:7b:60:77:94:8d:66:ab:21:41:7c:
d9:6f:d7:2b:91:3b:ed:55:e9:bb:4e:e9:80:d8:8a:8d:1d:8b:
88:23:b5:b2:e3:f0:67:66:1c:ee:92:4e:c7:29:86:11:61:6d:
67:9f:5f:a4:47:ca:c5:a1:7b:91:45:f8:af:d0:45:3a:47:d3:
d0:51:33:b7:23:a8:fe:0a:88:78:50:2d:ff:1a:58:1d:2b:e1:
37:c0:ac:ee:58:bd:1d:7e:2f:ec:c1:40:d9:68:30:fc:4c:3f:
c8:6e:a0:82:d3:3d:5f:af:3c:b1:da:bb:ec:e2:fe:30:87:be:
43:2d:ee:1d:9f:f5:1c:56:0e:20:bf:9b:a6:99:9a:32:0f:1c:
be:1e:bb:9e:19:c3:26:71:ac:9d:7b:83:9a:1f:e6:a9:6d:ae:
32:55:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:12:04 2025 by rpki-client