Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/db026509-40a5-3620-9bda-6c16e8cbca2a.roa
File: db026509-40a5-3620-9bda-6c16e8cbca2a.roa (raw, json)
Hash identifier: Z4RhxPNrfnaRvgOyHMd0Js+bMGUO1iZuAoRIKOGmSSA=
Subject key identifier: FC:FE:C3:D0:87:9B:EB:00:18:8B:50:79:05:C4:F2:FC:72:AC:81:D0
Certificate issuer: /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial: 010D0C9F432858483B500D42CDFC9A2BC5137C40
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/db026509-40a5-3620-9bda-6c16e8cbca2a.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 7106
IP address blocks: 216.201.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:0d:42:cd:fc:9a:2b:c5:13:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=8c556afd-9c78-4c28-baad-e0d0e173ed08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b2:f6:68:fc:dd:77:2e:da:da:c3:0b:82:6e:
e2:ba:22:a1:c6:5e:89:f8:ce:66:a7:09:c6:73:c6:
72:58:ca:0e:6f:5d:9d:d4:bf:fe:f6:95:be:b4:c7:
87:71:21:2a:c1:4c:3f:82:8f:92:d7:11:f1:87:52:
f9:f5:63:0b:a7:ae:c9:40:fe:4c:a0:44:43:8a:73:
d0:0c:58:aa:97:61:00:5b:50:e8:f4:a8:89:2a:67:
e6:6f:cb:b6:9a:37:28:a3:b6:f1:85:e2:57:2b:10:
2b:c5:e7:ac:43:ce:17:f2:0e:dc:87:22:d2:1d:70:
c8:7c:22:81:c0:95:a1:cc:34:73:c4:3e:77:e5:72:
99:f6:30:08:d9:1a:05:ac:c0:c2:29:4a:9a:1b:83:
19:28:06:02:40:91:09:f2:f3:1b:b1:94:09:4b:e5:
1c:28:5a:2f:d7:32:ee:e7:72:00:e5:3b:e7:c9:56:
4b:ae:61:85:a5:3a:62:7c:fc:e7:8c:30:f4:85:c1:
09:a3:59:21:36:1d:be:1b:23:cf:d6:a4:c4:f9:37:
a8:99:6e:11:47:ac:b3:1e:dd:71:f8:b8:a4:04:9d:
92:07:66:0a:fc:54:09:6c:3e:cf:8b:24:bd:05:db:
e3:5e:b5:6d:3a:ca:ce:6b:3e:ba:cb:a0:84:52:0f:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FE:C3:D0:87:9B:EB:00:18:8B:50:79:05:C4:F2:FC:72:AC:81:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/db026509-40a5-3620-9bda-6c16e8cbca2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
X509v3 Authority Key Identifier:
keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
sbgp-ipAddrBlock: critical
IPv4:
216.201.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:df:75:ef:f8:f6:47:f9:53:af:5c:8a:37:cd:b7:fc:60:f8:
d3:44:af:10:51:43:24:d6:56:86:8a:0e:52:d0:7d:7f:b1:73:
eb:78:93:ab:3b:ee:fd:98:6c:35:47:a1:4d:ae:d0:04:cc:eb:
3d:6b:8f:c2:51:4b:bf:0d:d0:a3:8d:26:a1:98:52:17:6f:db:
dc:a2:03:4f:9b:68:07:5e:d8:2e:7e:d4:8f:8d:5f:46:d9:3b:
65:e5:fa:bb:e9:94:ab:86:bf:8e:6d:f6:8f:0e:16:91:89:0b:
c8:65:90:5e:5d:e8:3d:a9:5a:d6:31:b8:6e:ae:76:75:3b:fc:
d5:aa:50:ba:55:01:25:4c:4d:65:96:8f:08:89:e6:b2:4f:22:
41:e4:0f:3f:c5:8e:49:ea:69:ce:53:4b:ca:ac:7f:3e:0c:08:
ef:c2:19:19:32:7a:a3:f9:77:f0:45:e8:9a:a5:b8:64:a4:c6:
3a:64:ea:e0:36:4c:e0:8f:91:82:3a:89:ca:a1:1b:ef:e7:df:
47:e4:3f:19:9f:06:0e:e7:3e:29:48:02:64:b0:45:92:8e:55:
70:0b:78:03:b2:ae:c4:4d:97:c9:07:50:39:ee:15:16:95:ea:
ec:e2:62:e8:8f:36:e9:ad:44:a5:a3:9f:32:34:c3:2f:0b:a9:
9c:4c:4d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:07:20 2025 by rpki-client