Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
File: 8fbee004-d77c-3406-a15c-51548b9eb616.roa (raw, json)
Hash identifier: P/g4RQDwkAM1QmYZDr2Drsmdtst8L1bD2fPxgDDeqSs=
Subject key identifier: AF:A2:06:DC:71:A0:9E:6C:D1:69:D6:D0:FC:A7:BC:8B:02:22:62:E6
Certificate issuer: /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial: 010D0C9F432858480214F8A1440E5394C227A080
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
Signing time: Tue 26 Nov 2024 14:00:39 +0000
ROA not before: Tue 26 Nov 2024 14:00:39 +0000
ROA not after: Mon 24 Feb 2025 14:00:39 +0000
asID: 17012
IP address blocks: 64.4.240.0/21 maxlen: 24
64.4.248.0/22 maxlen: 24
66.211.168.0/22 maxlen: 24
173.0.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:14:f8:a1:44:0e:53:94:c2:27:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Validity
Not Before: Nov 26 14:00:39 2024 GMT
Not After : Feb 24 14:00:39 2025 GMT
Subject: CN=bb0cd76f-34da-45bc-98cf-616cb9c039d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:b9:e0:cb:9a:22:39:4b:16:ef:0a:76:15:
d7:33:ff:24:bd:c3:85:f8:a2:8c:9c:7b:9e:ac:a1:
06:8b:d6:6f:60:d1:8c:2a:23:6f:9c:76:c1:ac:2c:
32:9e:48:89:f2:fe:41:40:d4:92:d7:50:af:0b:92:
fd:71:dd:7a:9f:cc:dc:e8:78:27:73:c0:f0:45:bd:
a0:af:2e:ba:c5:49:f1:95:64:c0:8b:ac:d7:12:9c:
5f:74:b7:42:fb:8c:07:00:36:8b:a1:ba:32:2b:b0:
3f:01:c5:f2:06:40:97:1d:31:de:9f:2b:81:dd:8f:
53:ca:8e:90:ea:a2:02:b9:fa:69:5f:57:00:cf:cb:
d5:a0:13:3c:1b:fd:b7:7f:29:db:cc:03:ae:bc:59:
69:fa:8e:b1:20:cb:2c:7d:9d:da:2e:83:00:10:32:
44:d6:dd:fc:89:9a:24:f5:bc:40:65:ae:c8:49:13:
fd:7c:f6:71:f4:4f:90:d4:7d:2b:fd:a8:69:9c:da:
86:07:b3:77:a9:51:fb:c8:c6:5b:b0:ce:13:fa:6f:
84:e1:f8:9d:32:1f:38:d4:d9:fd:a4:59:e9:95:b3:
ef:ab:cc:62:2c:cf:75:ca:ab:48:49:b4:62:a5:1b:
7c:5d:50:6a:3b:ee:d8:e8:c5:60:8a:38:31:6c:69:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A2:06:DC:71:A0:9E:6C:D1:69:D6:D0:FC:A7:BC:8B:02:22:62:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/8fbee004-d77c-3406-a15c-51548b9eb616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
X509v3 Authority Key Identifier:
keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
sbgp-ipAddrBlock: critical
IPv4:
64.4.240.0-64.4.251.255
66.211.168.0/22
173.0.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a5:3f:3c:a5:dd:90:c2:33:d8:60:1d:31:29:cd:98:5f:e1:
91:23:18:d2:f1:31:eb:62:5b:67:d7:2a:65:79:dd:a0:40:f5:
d5:99:29:9f:74:37:4a:bb:44:58:1c:a1:3b:3e:e9:3f:2f:89:
6d:29:5b:2a:f4:27:b9:bb:ff:c4:d8:ce:3e:b1:a7:aa:10:5a:
cd:a3:b8:74:d1:8c:af:e2:6a:de:e2:54:75:e9:91:39:45:85:
b4:24:34:50:41:21:69:d5:bb:71:9d:df:24:94:4f:13:82:e1:
7c:68:60:95:68:d4:a3:6c:45:69:d1:b4:ea:cf:aa:6f:0f:3c:
fe:a7:dd:0f:51:c7:3f:97:d3:f1:59:55:ee:0f:f4:62:b9:ac:
99:26:08:e3:cb:94:e1:b7:cd:87:f4:a4:1e:57:1d:b1:27:f5:
27:23:d8:aa:30:45:69:6c:39:5c:89:70:95:e1:22:60:94:5b:
16:cf:22:21:54:b9:f4:7f:91:26:c9:63:8b:8c:2c:89:00:61:
92:a4:54:ac:56:3d:38:3d:f2:79:d3:d2:79:76:a3:02:7d:65:
7c:6f:5f:06:04:24:2c:2d:13:78:e0:5c:35:6e:67:37:b4:77:
ac:cc:d0:86:c6:9f:a1:b9:da:48:7f:e4:79:e2:95:60:7e:95:
79:60:4f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:52 2025 by rpki-client