Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa
File: 76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa (raw, json)
Hash identifier: gCFLcXzsCnuX6Xzh8i0D9afDvEd0HGo8aPjXdYfGZc4=
Subject key identifier: 4B:AA:D7:DD:80:6A:33:90:F5:10:36:3C:15:99:7E:DC:03:AA:21:45
Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial: 010D0C9F432858481DFFE4222109056D17CF7240
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa
Signing time: Fri 06 Dec 2024 14:00:51 +0000
ROA not before: Fri 06 Dec 2024 14:00:51 +0000
ROA not after: Thu 06 Mar 2025 14:00:51 +0000
asID: 8014
IP address blocks: 216.137.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:1d:ff:e4:22:21:09:05:6d:17:cf:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Validity
Not Before: Dec 6 14:00:51 2024 GMT
Not After : Mar 6 14:00:51 2025 GMT
Subject: CN=b0d90cc6-7e19-4f94-b579-a51ef86b2cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bc:29:bf:58:d8:13:da:48:0a:5a:82:84:a9:
7e:70:fa:32:b5:99:b6:42:b6:cc:6d:43:3c:80:5e:
aa:c8:b7:1a:87:b8:43:02:a7:bb:57:55:24:e7:7b:
4a:3f:e2:e7:52:d9:90:b3:a7:e0:db:9f:f4:1f:44:
12:58:47:52:92:64:e2:0b:a1:20:59:9e:6c:f0:93:
64:df:a2:9a:12:3e:19:27:8f:3b:93:b5:95:b1:57:
71:cf:6f:e8:13:e4:03:43:ca:87:c0:24:ca:10:26:
8b:93:c2:06:62:a6:1e:eb:e6:6c:a3:e7:77:61:ab:
8a:0b:09:cd:c9:ca:05:5b:b1:a4:c5:5a:b4:a2:b1:
41:30:0b:b6:15:09:9c:a2:a3:7c:0d:bd:f2:78:21:
6e:86:12:67:34:3e:5b:3c:fb:b1:f6:c5:dc:9c:04:
2a:55:c5:32:99:34:74:17:12:9d:57:25:2f:7a:ee:
8a:a2:c5:ff:79:55:e4:38:33:ed:38:a5:75:59:77:
59:f2:a6:70:ce:da:26:34:a3:40:a3:f9:c6:77:40:
7a:9c:10:4c:9d:7d:ab:18:20:78:b5:ec:8f:a3:59:
f2:72:10:5d:14:ba:36:7e:0d:1c:0b:46:79:6f:d8:
ab:7e:72:7a:e4:5e:24:92:b7:ce:f4:66:9f:58:02:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AA:D7:DD:80:6A:33:90:F5:10:36:3C:15:99:7E:DC:03:AA:21:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/76d2cadb-68f5-377c-be6e-7992e1e1c0a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
X509v3 Authority Key Identifier:
keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:d5:c0:62:2e:02:70:58:c7:27:24:35:2b:8f:b4:6e:f6:29:
36:cb:b6:56:02:a1:5a:bc:d9:e6:3b:29:ca:a4:0d:68:2b:3f:
be:fc:f1:71:a8:7d:6b:b7:e4:c3:79:a4:8a:ed:62:5c:43:5c:
c7:ae:47:5c:02:1e:df:95:41:c9:33:c2:c3:34:61:a6:18:79:
76:fe:e0:19:c3:fa:89:f7:2c:b6:a4:24:4f:b1:bd:b4:4b:bd:
32:f0:0d:75:6a:fd:e9:a0:47:9b:99:7d:c1:2c:ac:2a:f7:25:
29:36:dd:80:81:58:34:9d:37:e9:1e:dc:12:28:cd:6b:4a:fd:
2b:47:b9:72:51:19:ea:48:bf:f2:e3:56:83:c1:a6:42:cd:3a:
09:88:93:ce:81:60:7f:ea:5d:bc:65:93:28:42:9f:47:b2:ef:
f2:dd:28:7f:ed:81:db:6d:95:04:8d:1a:39:57:8b:88:8c:d4:
c9:cd:df:0a:88:f0:ed:d1:d0:83:ab:be:9f:cd:ad:b4:78:08:
52:74:7f:27:c6:07:99:f9:87:04:fe:63:9c:91:04:98:da:c4:
c8:b1:ab:0c:64:ea:e3:35:db:ee:c8:b4:1d:53:d9:71:d8:af:
bb:cf:af:19:65:01:ce:7f:54:25:f1:51:f8:bc:b6:5a:c2:8a:
7a:a3:16:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:49:26 2025 by rpki-client