Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa
File: bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa (raw, json)
Hash identifier: qL17z/ifu3t6REPpVbXEJ4HahdneX+8VRLEBY+4o3Wo=
Subject key identifier: 32:52:DB:62:6E:2B:AE:82:74:C3:C9:82:46:B1:7F:11:80:30:E7:30
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858483B500BAB2489A2A736D0E380
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 394708
IP address blocks: 216.255.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:0b:ab:24:89:a2:a7:36:d0:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=0f579fa8-b550-43f8-8b88-ae8813035691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:b2:e1:cd:e1:4b:80:60:9a:c3:89:03:d4:
ef:a0:a1:09:6b:b1:0c:7e:44:bb:93:6d:b3:00:aa:
41:1f:f8:65:2d:81:f4:27:d4:5f:af:4d:5f:a3:e4:
4f:5f:23:65:e3:59:0c:ad:d7:8f:ce:e4:08:80:a5:
7a:b6:23:49:1d:5c:e2:c1:da:69:27:1d:13:7e:c7:
98:4a:ea:bf:1f:0a:a4:f4:c0:7a:09:37:b4:09:0f:
d8:37:91:6f:97:62:f9:10:89:f3:b5:89:ec:c4:bd:
2d:9f:ed:3e:f8:a2:2a:49:8a:cd:cf:b9:04:8e:06:
53:eb:ea:cd:22:cc:ba:9b:3f:de:b2:96:1e:b6:2a:
a2:e3:0b:54:a9:b4:c3:25:d0:81:27:6d:26:7c:2d:
ad:1e:14:dd:21:1d:4c:31:2f:8d:3d:72:23:eb:35:
50:39:49:d3:58:11:ac:10:82:b5:8a:f8:dd:f1:ef:
76:9d:0d:26:98:e0:ed:16:bd:9b:96:b8:50:80:ae:
68:98:cc:7b:4d:92:b9:03:80:95:6d:99:6d:6c:5f:
a0:e5:85:93:6c:4a:3e:5f:f8:78:d9:57:2a:8f:73:
1d:ab:7a:c5:93:5e:cb:c9:59:12:be:fc:2f:d7:08:
d2:92:19:6d:36:c9:42:b3:26:e1:59:1a:7b:cd:dd:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:DB:62:6E:2B:AE:82:74:C3:C9:82:46:B1:7F:11:80:30:E7:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/bc2cc0f5-3728-3849-96cb-a2771bb9a663.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.255.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:49:99:f4:e5:67:a3:10:47:33:0b:6e:52:3b:ec:63:97:77:
ea:0b:cb:4b:1b:6f:e4:c2:ad:82:e3:70:12:c9:d2:68:8f:00:
36:68:6d:94:6c:47:0a:9d:53:9a:bd:5e:ef:75:20:2d:b8:db:
7b:17:2d:31:7d:40:f8:c5:50:69:56:7f:8a:24:96:c8:21:ba:
e8:45:74:fc:3e:28:d9:13:6f:6d:a4:aa:c8:50:be:c9:48:f4:
ed:f3:b6:ba:20:02:1c:14:4b:5f:c4:7d:21:23:0e:3c:a7:8c:
bc:80:c5:86:79:75:61:3d:b7:16:be:3e:45:66:5c:c1:3f:bf:
b9:8e:ee:d7:a1:c2:f2:55:32:c2:c7:c8:29:5a:35:55:94:50:
df:4e:8d:c5:0d:9e:ed:9a:99:c4:c2:d0:e9:aa:4b:7f:11:b1:
29:15:be:32:1d:84:f0:05:21:a8:17:3e:89:33:32:20:b8:fa:
56:e0:fd:5e:a5:0d:38:24:4f:bf:8d:6d:dd:47:57:6a:e4:23:
46:50:60:d6:67:6e:e3:69:27:dd:2c:ca:a0:2e:c0:27:04:72:
d2:f8:a1:75:3b:16:d3:05:bd:d8:cb:42:66:bb:20:fc:43:da:
c0:4f:3e:92:d0:28:b4:bf:4a:4f:0f:7e:2e:54:8e:1e:c9:cd:
ba:1f:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:36:32 2025 by rpki-client