Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8908f86c-7de4-37d3-a6b8-1cc5ba9b3e86.roa
File: 8908f86c-7de4-37d3-a6b8-1cc5ba9b3e86.roa (raw, json)
Hash identifier: ccV8Azb8Vb1JpPK91btro5SG+v1qNzuKt6YOLJlVFKk=
Subject key identifier: 12:78:5F:CE:56:15:D1:1C:3D:2B:A9:95:79:15:8C:20:84:5F:7E:64
Certificate issuer: /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial: 010D0C9F4328584826B7CE7394C74EFAE845EB20
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8908f86c-7de4-37d3-a6b8-1cc5ba9b3e86.roa
Signing time: Sun 08 Dec 2024 12:00:00 +0000
ROA not before: Sun 08 Dec 2024 12:00:00 +0000
ROA not after: Mon 10 Mar 2025 04:00:00 +0000
asID: 577
IP address blocks: 216.18.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:26:b7:ce:73:94:c7:4e:fa:e8:45:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
Validity
Not Before: Dec 8 12:00:00 2024 GMT
Not After : Mar 10 04:00:00 2025 GMT
Subject: CN=cfe6e70e-c961-40f4-922b-0d81313fb335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:4a:08:35:29:ae:d5:32:66:d5:54:a3:29:
c1:bc:82:1e:ce:02:bf:18:08:e6:04:98:71:04:6e:
c9:c7:f6:77:83:55:23:92:9c:bd:04:08:70:41:78:
1a:28:c1:cf:f1:77:97:bc:8c:0a:0e:47:55:91:41:
34:50:d8:b8:f8:b1:cd:a0:9a:53:53:a5:a5:18:b3:
70:17:8e:ff:5c:5f:f3:08:b2:05:10:a3:bd:a6:63:
86:d1:a0:9a:7d:ef:2b:47:79:05:6b:3d:21:14:0b:
f2:cc:d3:2d:ed:76:6b:07:9a:80:3d:83:54:55:89:
e1:07:da:e9:7c:e9:47:43:70:c8:67:2d:92:bb:ad:
a1:70:94:db:7d:d6:78:39:0d:40:ad:da:98:40:68:
4a:d8:cd:33:56:46:6f:f2:a4:5c:bb:61:ac:68:8f:
fd:82:65:c7:18:d1:ba:30:09:56:ea:6a:f7:d3:69:
2c:e6:82:54:90:be:2b:5e:a6:e3:ac:53:d3:52:36:
3f:dd:68:d3:34:23:13:f8:af:7a:1f:8e:f1:e3:72:
63:e7:c1:8d:72:a8:b9:e3:7b:04:8d:e7:f4:18:fd:
1c:bf:68:f8:7e:b9:4e:8e:68:cd:99:c7:c6:ca:38:
c9:01:7d:d1:fb:da:3e:86:12:24:b2:ea:1a:06:b9:
24:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:78:5F:CE:56:15:D1:1C:3D:2B:A9:95:79:15:8C:20:84:5F:7E:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8908f86c-7de4-37d3-a6b8-1cc5ba9b3e86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
X509v3 Authority Key Identifier:
keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
sbgp-ipAddrBlock: critical
IPv4:
216.18.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:a2:b6:93:8e:5d:22:0d:6f:9b:8d:ae:4c:cf:84:e8:c1:98:
0a:fa:85:c0:37:28:ed:bd:9c:a5:ac:6f:e4:92:27:3d:76:61:
c6:ef:93:c2:31:f0:2c:bb:2d:33:6b:6d:a7:c2:76:45:fd:89:
71:31:50:fe:8d:53:c8:dd:1e:7d:2e:d6:79:3b:97:d1:a0:1d:
89:8a:ef:c9:01:f3:38:6e:28:53:93:f7:d9:69:26:41:82:c4:
e6:65:4f:d9:bc:f0:3e:02:88:6f:2f:a8:b0:c8:d6:48:12:c7:
9b:76:5a:88:89:de:2f:f9:09:e8:17:55:9a:a7:03:da:02:70:
98:6b:19:26:0f:e8:82:6b:5e:7a:c1:19:ca:11:16:f9:ec:20:
bf:15:3d:51:3f:6e:3e:c5:a0:2e:23:98:48:a8:21:7d:80:a0:
8e:d1:10:f4:c4:9c:ff:02:9f:4a:3b:64:0d:96:7a:e0:79:6b:
d0:50:7e:74:73:48:13:c6:bd:e9:cb:9e:82:aa:72:83:35:3c:
e8:a3:12:b1:7f:98:0d:36:ad:f4:51:2e:b1:10:77:35:a8:3e:
74:bc:c3:48:28:ef:1f:8d:d4:25:08:89:00:9d:5a:4f:94:db:
14:ba:df:b9:a3:1c:90:40:35:ad:85:ad:4e:e5:64:23:50:09:
b5:aa:75:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:40:25 2025 by rpki-client