Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2ca4807f-f8f6-3640-8ef3-356b0a165378.roa
File: 2ca4807f-f8f6-3640-8ef3-356b0a165378.roa (raw, json)
Hash identifier: L2RB0zK5AV3NtTNCopL3WRKdqiWcuciBYWiYNW4gj9o=
Subject key identifier: 21:83:2A:E7:73:10:94:E2:B9:29:EC:D7:69:99:2C:83:68:57:3B:88
Certificate issuer: /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial: 010D0C9F43285848222FCDF66E60D2AD52969900
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2ca4807f-f8f6-3640-8ef3-356b0a165378.roa
Signing time: Sun 08 Dec 2024 02:00:39 +0000
ROA not before: Sun 08 Dec 2024 02:00:39 +0000
ROA not after: Sat 08 Mar 2025 02:00:39 +0000
asID: 16509
IP address blocks: 216.198.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:22:2f:cd:f6:6e:60:d2:ad:52:96:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Validity
Not Before: Dec 8 02:00:39 2024 GMT
Not After : Mar 8 02:00:39 2025 GMT
Subject: CN=f3a61ffb-e6a1-430b-ac32-93540abf1c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d6:15:af:3a:83:21:d5:c5:54:4b:e5:9e:3c:
e2:f3:a4:34:87:df:62:53:7f:dd:5f:76:bd:21:3c:
83:36:3c:ad:01:3d:13:55:a6:a8:ad:df:6f:1d:fb:
25:37:09:2b:75:3f:09:3e:34:61:b6:d7:73:fa:2f:
fd:11:73:b3:ff:40:5b:6e:91:70:cd:d3:53:f4:d3:
6e:d3:dc:a5:ac:a8:d6:42:f9:a8:8f:1c:7a:01:d8:
11:6a:5e:d2:8c:c4:35:78:41:bc:6a:83:04:67:2d:
a5:47:05:f6:d3:3a:ba:10:9b:03:e2:1c:6d:5b:9b:
1d:9a:da:24:66:e0:46:df:49:19:5f:a9:c4:01:ce:
2a:39:22:35:10:1d:6e:1e:90:72:16:d2:b0:2f:92:
3e:22:bc:27:ed:fa:7d:15:77:7f:5f:a0:a3:03:04:
79:0f:ca:92:ee:42:cd:93:f7:5a:02:40:81:05:47:
f8:79:47:35:c1:84:b7:bc:db:9c:2d:20:be:4e:dd:
0e:c8:a6:c3:3f:d6:b1:bb:1a:fb:3c:a2:91:f9:bf:
6d:1c:9f:6a:2a:ba:61:2a:b1:23:be:e5:5a:53:f5:
31:70:25:4a:64:48:6b:70:f0:20:d2:55:7f:3c:ec:
f1:8b:04:e7:46:43:6d:c5:36:68:64:20:e9:30:f6:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:83:2A:E7:73:10:94:E2:B9:29:EC:D7:69:99:2C:83:68:57:3B:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/2ca4807f-f8f6-3640-8ef3-356b0a165378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
X509v3 Authority Key Identifier:
keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
sbgp-ipAddrBlock: critical
IPv4:
216.198.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:36:c2:7a:e5:60:f5:9b:24:1c:07:55:24:61:9c:cb:3b:a0:
7a:ee:9a:62:d4:67:f7:5b:5e:98:7c:0d:37:ab:2d:57:ca:ca:
6d:6b:97:ef:02:73:4e:dd:cf:a0:11:fa:6d:92:5f:0c:21:67:
0c:2f:88:4a:d6:75:e0:ef:d4:04:cc:24:86:b0:00:24:00:fd:
09:90:78:f1:5b:7f:da:e5:de:dc:d7:87:08:75:55:53:66:e5:
55:49:23:08:91:de:ba:67:21:de:52:e9:b1:aa:1e:c8:5c:bc:
15:05:18:6a:08:b3:f3:5d:2e:21:e1:7e:58:88:85:74:63:8c:
cc:53:9b:3b:1e:e0:b0:f2:bc:cb:de:d4:a0:67:11:17:8c:e2:
46:30:14:be:f1:28:9d:b7:f1:7e:f3:27:23:57:83:5d:5a:ef:
9c:54:be:eb:b5:37:24:07:98:32:8f:68:63:44:f8:8b:43:41:
8e:83:4d:c0:87:20:7d:f7:42:22:cf:d8:1b:6c:33:a0:43:9c:
87:5f:04:ee:f7:70:98:9b:0b:db:e6:3e:e1:43:8c:6b:9f:e6:
ea:3d:26:93:22:47:50:96:7c:57:a1:bf:9c:93:33:2b:8c:2d:
48:86:35:a2:12:5c:e9:ec:36:da:c4:17:6a:10:b7:55:15:4f:
33:3f:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:20 2025 by rpki-client