Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa
File: 4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa (raw, json)
Hash identifier: TrOEOHv3kvve/QNSKLiTJgiuxTLLKovkw+eYl1TzX1E=
Subject key identifier: 5D:4F:89:40:0E:FF:D2:B4:48:DC:37:56:97:A1:6D:14:E2:63:AF:80
Certificate issuer: /CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
Certificate serial: 010D0C9F43285848037B6A05873AC12270060180
Authority key identifier: 1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 16509
IP address blocks: 216.99.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:6a:05:87:3a:c1:22:70:06:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d0730c-5dbd-466b-a70c-5267ec1b7359
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=99127bce-7f8e-4ffa-8ebf-9a3758548f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0c:ca:1e:06:24:30:78:a9:c1:ff:cb:a7:0d:
06:bb:6f:23:db:c2:ff:ea:35:45:02:2b:1c:1d:87:
bf:26:61:b6:29:a6:06:60:33:6b:66:92:5a:6a:e5:
27:9a:d2:8f:cf:55:23:72:58:24:3f:54:a2:26:72:
d3:a1:b9:fa:ea:4e:f4:40:d0:7f:a4:e9:bf:8e:b3:
78:79:83:8c:3b:89:95:5b:73:42:71:0f:34:14:7e:
9c:44:ef:a0:91:83:b2:1f:29:8c:05:55:b8:94:ae:
23:73:26:7d:58:f3:30:67:30:86:f2:59:8b:8d:63:
50:ea:d9:ef:2a:8c:db:e0:9d:60:08:92:c9:32:01:
3d:99:78:96:e0:06:69:c6:37:30:ba:fc:66:f2:e1:
f9:01:03:04:be:f9:6d:61:07:43:5a:72:d8:74:ab:
75:77:b8:1d:d9:71:9d:7c:57:fa:81:d2:9d:06:01:
1e:85:78:29:23:5e:ef:d1:ee:a8:a4:36:e3:84:01:
75:7b:21:39:05:65:72:1a:38:87:1d:55:3f:13:58:
bd:ed:8c:33:8f:a9:93:52:6e:4c:90:b3:fb:6c:65:
c3:27:cf:ba:e6:1f:de:ff:6d:9a:57:62:93:af:36:
ed:05:26:d2:b9:df:20:97:88:40:67:34:1b:f3:b4:
e1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4F:89:40:0E:FF:D2:B4:48:DC:37:56:97:A1:6D:14:E2:63:AF:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/4d8367d4-1898-320c-b3eb-4aa0e3cbdce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359/67d0730c-5dbd-466b-a70c-5267ec1b7359.crl
X509v3 Authority Key Identifier:
keyid:1D:C7:82:52:8E:1E:44:22:99:92:03:4E:5F:7D:7D:CC:A1:B7:AE:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67d0730c-5dbd-466b-a70c-5267ec1b7359.cer
sbgp-ipAddrBlock: critical
IPv4:
216.99.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:1d:7c:6e:a3:a6:1c:04:d6:3f:bb:17:4b:ba:28:02:40:39:
fd:a6:5b:d3:e4:50:47:fc:67:31:94:a5:46:d5:ca:a8:c8:5e:
6d:47:43:3c:69:be:be:ef:52:05:79:95:83:89:fb:a2:29:9f:
dd:ca:fc:f0:0d:40:db:d1:ca:18:17:fa:a4:2b:87:2e:39:da:
f9:00:fa:cd:27:03:06:6c:6a:2d:62:0d:9e:4a:16:bb:40:48:
8c:0b:fd:5d:96:a9:4b:fe:a7:cc:56:16:d7:3a:9d:5e:9f:85:
04:2c:45:c8:d7:20:f8:d1:57:4b:e8:a3:3d:b9:84:24:4a:f3:
8a:a6:e1:50:7c:c0:57:e7:4c:89:c4:8b:8c:e2:7f:a8:62:5e:
26:22:c9:ff:c9:f4:84:20:ba:3e:bd:bb:2f:91:3e:f3:15:87:
a3:b3:34:45:31:fe:18:bc:0b:f4:33:a5:12:a5:d3:b1:bf:7a:
70:e5:c8:73:81:8d:fc:c7:a0:3c:99:99:e9:71:f8:70:af:90:
1d:33:0e:42:cc:c0:c8:4f:9e:4b:ad:cc:80:8c:cc:73:73:21:
05:47:03:7e:d1:b3:98:b6:6a:9f:b8:4a:df:ad:0b:19:cb:15:
b5:5b:56:26:39:3c:c4:03:4e:ea:f4:06:54:42:3f:ec:d1:c3:
cb:44:d9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:19:44 2025 by rpki-client