Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa
File: 34a15df3-ae78-372e-8160-e71d118b8d2e.roa (raw, json)
Hash identifier: 9EHLkhyWPXzMbexpkcE3nlEm/gbWuQG7YAtncK8gpFk=
Subject key identifier: C7:38:63:4A:4D:71:95:E3:CA:C1:C2:CE:43:B2:DF:2F:87:62:4E:1C
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584807AA6A90B5AEB28F61956E00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa
Signing time: Thu 28 Nov 2024 14:00:52 +0000
ROA not before: Thu 28 Nov 2024 14:00:52 +0000
ROA not after: Wed 26 Feb 2025 14:00:52 +0000
asID: 3356
IP address blocks: 209.224.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:07:aa:6a:90:b5:ae:b2:8f:61:95:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Nov 28 14:00:52 2024 GMT
Not After : Feb 26 14:00:52 2025 GMT
Subject: CN=abb9cd9e-649c-43b3-855a-237ee442c5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:c8:1b:95:35:f2:94:12:40:cf:11:4a:77:
d3:b6:18:2a:9f:4b:51:1b:9d:49:85:a5:b2:b7:6f:
ab:80:08:4f:0d:e8:8b:a6:54:5f:c2:db:ce:c7:0e:
3f:6d:99:f5:3f:8a:e5:8c:21:fd:a5:85:a0:c9:8c:
68:77:8d:27:61:ef:b7:8c:5e:42:28:d7:01:6e:53:
e1:5a:a8:a9:db:cd:31:b0:a7:0d:47:b4:64:e8:6b:
b4:99:af:c8:af:3f:3f:37:0a:5e:ef:2c:31:31:3e:
4a:71:cf:55:0f:c4:fc:40:63:db:c2:4f:18:7c:61:
9e:d8:55:e4:a5:68:3f:cb:13:e1:76:23:a0:64:10:
16:1a:1a:75:2e:b3:c6:4b:02:e9:c9:68:a9:e3:ec:
46:9a:2e:55:9a:8b:91:e4:3f:0e:41:23:64:85:bc:
4e:f4:cf:1d:3a:2b:1d:bc:55:f6:ea:f7:71:05:50:
a4:07:de:91:d4:39:28:fb:37:c2:e0:08:b8:50:02:
d7:46:89:61:65:c6:9f:e6:e4:b3:61:5a:4e:c8:68:
a7:26:8b:96:e2:a6:ae:cc:50:39:da:81:7a:af:29:
d5:ad:ce:a1:0d:2f:e6:01:14:36:e0:c3:12:85:4b:
ca:4b:36:b1:b9:c4:4b:28:1d:0b:92:c1:fc:2e:9f:
ff:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:38:63:4A:4D:71:95:E3:CA:C1:C2:CE:43:B2:DF:2F:87:62:4E:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.224.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:c4:02:e1:4c:8c:05:fe:97:65:25:55:36:a0:9e:6a:5d:ea:
8a:e1:a8:18:7b:5b:8d:09:b2:02:4b:76:b2:2a:c9:61:1c:08:
07:8a:ae:66:9c:f0:3b:6e:44:ae:0f:b9:43:61:98:3d:ed:38:
b0:36:47:39:fa:5e:bc:6b:4f:5d:9a:7c:6d:59:1d:66:f5:56:
f6:39:63:b4:18:68:66:31:55:b7:53:13:8b:d0:ad:fa:da:85:
df:db:98:47:9a:ee:ea:fd:24:51:57:be:51:86:c9:75:29:cc:
92:d1:cc:49:9f:73:26:d7:5b:1e:00:2d:a0:71:4a:08:b3:35:
36:a1:2a:67:c7:05:48:6c:b5:c6:01:18:ab:95:9e:82:f9:81:
26:af:f1:30:5b:d8:31:a3:db:14:f6:7a:a7:b5:7d:f9:f4:42:
f7:0b:ee:bd:3b:70:19:2f:0f:27:0f:d6:50:19:b0:bb:76:e6:
58:39:01:60:fc:2a:2d:1e:ea:58:54:aa:4f:af:65:00:cb:d6:
47:5b:7c:51:36:e6:f4:44:4a:5b:12:6a:f9:d3:b7:88:26:69:
90:11:45:48:6e:27:86:b0:8d:8a:4b:97:55:4d:97:8c:e3:67:
d6:19:15:47:68:39:55:37:de:6c:c0:93:96:17:77:d1:c4:25:
e0:8d:ad:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:49:05 2025 by rpki-client