Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa
File: 0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa (raw, json)
Hash identifier: CjUDFwX16dgcS520CUv4GqwRQhkY/3/TuheBIDg1Br4=
Subject key identifier: C4:0E:99:C6:B7:8E:FF:B8:B1:39:36:E3:42:6E:07:6B:3C:62:52:B2
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858483B500BE4A0DB2B888C93BA00
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 394708
IP address blocks: 216.255.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:0b:e4:a0:db:2b:88:8c:93:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=d5e07e16-4a39-4a8b-bc68-0a51ff802c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2f:da:85:72:89:43:a4:a1:39:62:95:d4:af:
b0:d0:cc:5c:a3:36:8d:d9:d4:d8:81:14:14:7d:ba:
f1:0d:89:50:bc:54:ad:be:0b:60:c7:1f:7d:9e:a7:
78:2b:ac:f1:1e:b8:67:94:66:ec:3a:30:a0:4e:69:
3d:7a:f9:d8:79:96:f7:0d:fd:45:79:92:a2:b0:fd:
10:de:7a:b6:d6:7c:73:32:34:56:76:95:a1:6f:bc:
77:49:60:c8:de:21:56:dc:80:07:f3:32:f4:3f:10:
41:ad:01:7d:9a:42:59:9a:3f:21:f7:bd:cb:54:0d:
5b:2e:9d:d9:87:be:4d:2f:0a:95:77:7b:55:18:a6:
96:43:5c:e2:fd:5b:88:07:20:c6:f6:47:3e:c7:72:
01:d7:d9:e2:d8:80:83:09:51:c3:47:09:c7:66:83:
73:ed:cb:75:7f:a7:6d:8a:11:37:53:ab:68:c4:e0:
4b:82:f0:d3:41:c8:de:5e:95:70:b3:bf:fe:db:bd:
ff:0b:eb:d4:cb:fd:0e:03:ca:9a:5c:1e:fb:3c:28:
03:2b:a6:cc:56:67:8c:51:e8:c8:13:2d:16:af:68:
b7:ff:a9:bd:07:1c:35:44:ed:f9:17:1f:fe:29:bd:
c7:be:d1:6c:f0:17:c9:6c:bc:84:f5:48:9b:5b:20:
a3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0E:99:C6:B7:8E:FF:B8:B1:39:36:E3:42:6E:07:6B:3C:62:52:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/0ad6e3c1-d403-3349-83f5-f0ef0fca24b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.255.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:f4:58:12:eb:bd:c2:58:67:d2:c1:94:4e:cc:51:c6:90:3f:
24:22:b1:c9:bd:89:ab:8d:94:fa:59:93:69:3d:28:37:3b:56:
b8:40:c8:f8:ab:4e:d9:4c:8f:f4:f5:57:d1:e4:b8:fa:5d:35:
59:df:b6:64:d6:06:56:03:9c:42:be:b8:dc:2c:e1:76:a0:ab:
cf:29:37:e3:0c:3b:44:01:53:45:0b:75:8e:7e:82:3e:db:1d:
ab:c6:cc:29:08:fc:c1:3a:7e:be:e2:73:37:d6:d2:35:ea:11:
d2:21:77:61:7b:41:92:fe:37:30:d2:69:bd:4a:81:94:5e:4a:
12:29:60:e6:c2:61:78:19:e1:43:b0:64:95:08:e1:4b:6e:24:
37:06:04:6f:91:7f:db:27:36:bf:9f:a2:9f:8a:1f:7f:10:3e:
6d:6e:5f:62:2c:81:32:25:09:71:a9:18:f6:d7:9b:7d:7a:e3:
0b:97:f8:49:93:19:0c:5d:30:49:00:6e:9e:e5:e3:ff:1a:53:
c0:3f:1e:c5:96:9f:b5:8c:f0:01:d0:a5:9e:3f:25:2c:3d:29:
8b:7a:71:d0:23:48:ab:17:18:8b:38:6b:0e:d5:6f:85:5d:a0:
5c:17:4d:26:53:e3:e7:9b:62:f0:ed:5a:39:43:dd:2f:4c:55:
09:27:e0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:53:29 2025 by rpki-client