Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8be7d6b5-2a08-3651-af35-9b4259b08ee0.roa
File: 8be7d6b5-2a08-3651-af35-9b4259b08ee0.roa (raw, json)
Hash identifier: cuppl9zzvsbWps29eAo2N2WPx2duCGe7/f2MXEXlRrk=
Subject key identifier: C3:AA:45:E0:7E:E9:08:B1:E0:8F:0E:51:DD:07:CF:61:50:86:6B:0E
Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial: 010D0C9F43285848424AD6E9CFED522E65B04B00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8be7d6b5-2a08-3651-af35-9b4259b08ee0.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 3561
IP address blocks: 216.88.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:d6:e9:cf:ed:52:2e:65:b0:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=d652627e-26e3-4cc6-af69-93a6a7cbd619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:63:31:9f:66:36:34:61:f5:da:86:56:f0:78:
f2:c2:d2:5f:a4:0b:38:b5:de:b0:66:3c:e5:1a:a4:
b5:c4:8c:a1:31:4d:58:23:f3:ef:c2:49:f5:48:31:
82:c8:1c:32:e3:d6:70:65:f1:8d:45:55:39:78:ab:
ca:2a:6f:99:96:d8:8c:f6:27:6b:7f:32:e1:5b:d4:
d1:e4:03:b1:7f:d6:89:32:26:4e:38:af:ab:e7:cc:
6b:cc:c6:6d:6a:75:05:55:44:21:0f:79:bc:eb:08:
cc:54:99:f2:1f:46:3f:b7:5f:d7:31:7f:84:8b:32:
71:44:5e:9c:b6:84:9c:ff:d4:a9:eb:74:00:4b:7e:
58:f0:bb:ee:3a:75:8e:d2:00:63:27:48:46:d2:56:
77:34:ca:d1:c2:a7:7d:85:24:c9:aa:64:1a:e5:88:
89:12:6d:77:9b:63:18:f8:17:90:87:4f:30:e2:16:
3e:5f:d0:20:d8:29:ea:05:35:c7:d4:7b:95:41:b0:
bc:af:07:41:bc:dd:9f:af:71:12:8d:93:55:2f:07:
4c:e0:33:a9:27:f1:b8:a3:dc:36:88:b4:9c:33:ed:
a0:ca:a5:4c:41:18:fe:c5:70:79:52:31:53:a6:df:
df:7b:e7:3f:c2:dc:e2:29:74:ed:bb:74:cb:ba:16:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AA:45:E0:7E:E9:08:B1:E0:8F:0E:51:DD:07:CF:61:50:86:6B:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8be7d6b5-2a08-3651-af35-9b4259b08ee0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
X509v3 Authority Key Identifier:
keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
sbgp-ipAddrBlock: critical
IPv4:
216.88.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:b7:d0:c5:18:0c:7a:b9:7f:70:69:d5:71:e4:65:6e:9a:ff:
92:10:d7:9c:7d:07:e0:0b:4b:13:e4:cf:87:e4:2b:89:22:2e:
4c:d5:3c:75:f7:de:a9:13:32:23:11:47:b0:07:10:22:2e:dd:
e6:4b:55:37:71:99:fe:98:0f:93:e6:9a:a2:1b:05:42:68:75:
32:7f:c1:af:56:4d:0c:3d:85:b1:e9:9a:de:3d:89:ac:d7:f6:
2c:20:35:c3:fe:0a:50:2c:00:bc:92:21:9a:75:c3:a1:6f:b7:
c8:85:46:27:60:67:2b:2e:db:30:94:d5:11:ef:b2:9b:f2:f4:
dc:c4:f2:7e:21:ad:ff:fd:04:fa:98:89:e8:1a:99:d8:71:ae:
b0:d5:28:a2:d3:a1:b1:85:c5:3d:cf:df:59:93:09:cf:ae:4a:
59:18:ba:fa:85:c1:a7:a4:77:92:b7:15:54:2b:fa:4c:5c:1c:
2c:ea:0b:1a:c4:f3:a5:6e:6a:0d:cf:df:71:91:02:04:31:36:
a7:4b:f5:29:c3:cb:38:b5:78:db:7c:72:bf:bd:01:58:dd:cb:
14:1a:85:2a:e2:c6:2c:14:11:3e:54:3b:95:ad:27:b7:e2:90:
a6:b1:c6:dc:a5:12:a3:6f:69:1c:b8:ad:4d:e3:ad:d0:1d:b5:
c2:78:72:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:49:23 2025 by rpki-client