Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/a06be0f2-43fe-339a-815f-646cd493e84b.roa
File: a06be0f2-43fe-339a-815f-646cd493e84b.roa (raw, json)
Hash identifier: JtC0apcLmcx/1oHh4SwcEmnzemKKHjG0Y0iOGzSXxsY=
Subject key identifier: 2D:5C:C7:35:67:6A:6A:6C:A3:9F:39:9A:C8:2D:37:BF:BF:88:2E:C1
Certificate issuer: /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial: 010D0C9F43285849ADB2F088A7C458B1FCA08900
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/a06be0f2-43fe-339a-815f-646cd493e84b.roa
Signing time: Mon 28 Apr 2025 18:09:13 +0000
ROA not before: Mon 28 Apr 2025 18:09:13 +0000
ROA not after: Sun 27 Jul 2025 18:09:13 +0000
asID: 5065
IP address blocks: 216.132.112.0/24 maxlen: 24
216.132.123.0/24 maxlen: 24
216.132.126.0/24 maxlen: 24
216.132.129.0/24 maxlen: 24
216.132.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:ad:b2:f0:88:a7:c4:58:b1:fc:a0:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Validity
Not Before: Apr 28 18:09:13 2025 GMT
Not After : Jul 27 18:09:13 2025 GMT
Subject: CN=ce991376-8830-40b7-b5e6-5ce9b559b9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c9:d7:f7:1a:2a:68:92:e8:98:e7:2d:b4:ad:
1b:d3:d3:99:b1:b3:49:b3:5c:69:2f:e5:4c:ba:a6:
c2:05:cc:df:19:85:23:80:84:e7:3d:99:5c:cc:f2:
c0:ac:09:a2:0e:ea:03:64:b0:a4:11:f0:da:cd:75:
eb:64:e0:f0:59:b3:3e:32:ac:15:69:68:0c:e7:d8:
3a:f0:6e:6e:c0:69:66:4a:72:cb:27:2e:bd:22:c7:
77:a4:2c:bb:9d:40:3b:4f:ca:d9:bb:61:f7:ec:db:
60:11:e3:cc:7f:61:45:de:6a:20:f6:67:2b:15:8d:
05:f6:5f:02:83:8a:64:65:8d:35:56:9b:30:b0:fb:
2f:6a:6e:2f:d0:8e:03:ae:fc:30:f0:12:dd:9b:a6:
0c:d0:b0:60:f5:5c:0b:16:11:b2:c0:92:11:7b:36:
16:b4:00:0f:52:16:f3:f0:5c:6e:ff:fb:e7:00:79:
fe:12:71:4d:8f:c1:de:e9:dd:57:92:75:c3:a3:6d:
3b:d9:b9:f9:6a:01:ed:3a:9d:f0:54:43:7a:d2:bb:
a1:05:56:9a:a2:15:7d:47:06:6d:23:09:c4:72:b3:
3c:c3:0b:e2:c5:23:f2:d4:b1:51:6a:55:0c:ff:50:
77:bd:2b:81:d8:e4:40:4b:fd:4b:d0:6f:75:50:53:
51:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5C:C7:35:67:6A:6A:6C:A3:9F:39:9A:C8:2D:37:BF:BF:88:2E:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/a06be0f2-43fe-339a-815f-646cd493e84b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
X509v3 Authority Key Identifier:
keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
sbgp-ipAddrBlock: critical
IPv4:
216.132.112.0/24
216.132.123.0/24
216.132.126.0/24
216.132.129.0/24
216.132.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:db:94:86:b3:60:5a:0b:a3:ac:9d:af:4c:83:fd:65:88:19:
76:e1:29:57:a5:29:31:86:98:e9:89:cd:6d:64:cc:68:99:92:
2c:5c:8d:aa:94:3c:04:44:56:5e:f0:db:ff:21:76:20:da:4c:
fe:32:9d:84:d3:d5:83:4e:86:ee:c6:c7:eb:92:10:3f:a3:fc:
6b:8a:58:44:34:96:2c:a5:f2:3e:a1:36:67:41:43:7e:b6:8d:
1e:e3:43:19:77:71:48:8e:b4:c2:e7:da:4d:15:82:1a:6d:64:
cc:d8:4f:e3:ed:d5:7c:30:32:c8:a7:56:6a:d5:c6:22:eb:d2:
b2:92:5b:53:22:77:32:8b:a9:0c:13:f9:40:04:d2:07:f5:ca:
f2:3f:e8:78:77:d9:42:8c:5f:54:36:6c:88:d2:4e:4c:5d:b0:
57:cf:cd:2e:5e:36:77:d3:86:d7:4b:06:b0:df:b9:06:c0:b2:
79:72:a3:c6:54:d0:b4:dc:2e:5f:33:e5:4d:07:79:c3:2d:69:
ee:0b:b4:17:32:18:25:f7:75:b2:0f:33:56:d2:0e:d5:75:cd:
1c:94:b1:5a:50:2e:45:3b:45:2c:c8:c8:c0:e6:68:be:cb:5f:
ab:af:cc:59:ac:e2:db:73:81:d0:4c:7f:22:83:21:93:ea:ed:
20:8c:72:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 19 04:04:24 2025 by rpki-client