Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/a157c38f-dc2b-375e-818d-d69613c22af4.roa
File: a157c38f-dc2b-375e-818d-d69613c22af4.roa (raw, json)
Hash identifier: smAUX750RCa+xwLmen0oMCly+PhtKydaQrhGJHQxMPw=
Subject key identifier: 65:22:5E:10:F0:94:2D:03:30:FA:4F:AF:A9:C9:CA:97:42:5E:2E:9D
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858483B500D553EA208677922C300
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/a157c38f-dc2b-375e-818d-d69613c22af4.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 7106
IP address blocks: 216.255.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:0d:55:3e:a2:08:67:79:22:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=da4065bd-9093-499b-a33b-949dc85fd4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:70:9c:65:eb:dd:e7:b1:dd:97:72:32:46:91:
9f:a5:13:97:6b:9e:8a:7a:1c:16:58:f2:33:af:74:
6b:5a:d5:96:17:0f:26:48:f6:09:25:23:c3:c0:c3:
f0:5c:10:87:eb:9c:fd:0c:f5:f2:04:73:c6:24:eb:
25:f4:01:7e:65:42:aa:f1:5d:b4:78:5d:9a:b9:6b:
45:17:47:b4:2c:c7:4d:9a:fb:f8:ac:22:c9:01:10:
a9:a7:5e:77:68:d7:69:8e:80:4a:4e:12:62:45:be:
9a:f5:6f:2f:a2:43:25:e7:4b:ad:bd:c0:3f:d8:cd:
71:50:77:70:80:70:5a:77:de:92:da:21:e6:f5:86:
75:c4:d1:ad:40:ba:a4:05:53:95:dd:3f:b5:6f:10:
3d:a8:16:d4:77:28:45:9e:2e:90:8e:c8:ab:6b:49:
ef:22:59:c4:29:29:fe:6d:68:53:32:d8:2e:3b:b7:
f3:e3:1f:59:77:79:be:b1:01:b4:91:06:f1:f0:bf:
0a:37:2c:2d:7c:05:a9:9e:38:b1:f3:4d:a2:50:e9:
bd:04:a7:10:25:10:f7:ef:28:0a:e7:52:3c:87:33:
15:7c:a1:ce:16:bb:f1:1f:36:c5:64:6f:36:42:6f:
64:2f:3d:0f:6c:fe:e0:ea:f1:e6:35:12:75:d5:38:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:22:5E:10:F0:94:2D:03:30:FA:4F:AF:A9:C9:CA:97:42:5E:2E:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/a157c38f-dc2b-375e-818d-d69613c22af4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.255.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:12:4f:3e:ce:cb:85:41:35:1f:7b:b5:01:1e:af:3c:67:42:
de:08:db:06:38:d4:6f:6f:1c:f7:00:05:2b:cb:df:e0:79:e3:
14:e3:fd:aa:d0:ee:4b:b4:ce:a0:c7:d5:0a:db:c7:f2:cd:90:
f6:ad:dd:76:6e:0c:34:5b:11:26:22:6e:86:f4:b9:68:54:d5:
63:f4:a0:eb:34:a6:0e:19:46:10:74:95:5c:6d:fc:ef:f1:0d:
4c:10:69:2a:4e:29:d4:70:88:b3:e8:88:56:a0:50:68:73:fc:
b4:c9:0f:80:d6:00:fb:c5:6e:4e:b5:7f:5a:d8:ee:49:86:38:
e0:11:9e:10:1c:b3:dd:98:2e:a1:36:76:2a:7d:f6:91:e3:86:
db:0c:3f:ba:11:6d:35:78:31:aa:ac:cb:33:43:c1:ee:b0:8c:
69:f7:79:1d:3d:2d:a4:90:84:09:d9:49:ec:5b:e1:b5:49:88:
7e:d5:d8:4a:16:76:34:3c:16:60:9b:5f:53:01:b0:0e:27:fa:
30:d0:1a:35:eb:01:20:d2:83:3b:ef:57:5e:56:4a:c5:5b:7f:
f9:69:29:1e:69:ee:13:33:5b:b9:68:c5:e0:f8:d8:ab:50:a6:
27:83:4b:37:2f:10:8f:1b:9b:1d:40:b0:a0:a3:58:4e:72:0d:
d1:51:a5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:43 2025 by rpki-client