Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/3d359667-78f9-3d87-b525-31bf659ba3c5.roa
File: 3d359667-78f9-3d87-b525-31bf659ba3c5.roa (raw, json)
Hash identifier: +XtpJS0zJ/Aa7akUSvJD/rHAfF4S8b2fb8KuwV0gRek=
Subject key identifier: AD:DB:03:01:A9:55:75:1B:60:B9:01:D1:B7:C7:85:DA:23:57:41:C4
Certificate issuer: /CN=ae6238c6-9389-4fbe-a6aa-24095966ea40
Certificate serial: 010D0C9F43285848037A4B14AF47D70CF760C900
Authority key identifier: 22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/3d359667-78f9-3d87-b525-31bf659ba3c5.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 31868
IP address blocks: 216.129.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7a:4b:14:af:47:d7:0c:f7:60:c9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6238c6-9389-4fbe-a6aa-24095966ea40
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=1010edb6-743c-4de7-a179-9a6a30bd7cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:b3:99:79:74:23:f4:12:7b:9b:9f:d4:e0:
36:64:38:57:da:6b:23:04:0d:0d:2c:a7:62:e0:73:
db:9b:72:ce:63:68:b1:40:fc:67:98:5d:97:14:9a:
fa:66:ee:58:d4:a2:08:d7:07:f2:bb:91:da:3d:43:
e7:b3:63:f3:69:85:85:32:43:80:4f:47:d9:40:b9:
de:d5:34:6b:1e:5c:b6:40:53:a5:3d:fb:1c:ab:58:
1f:ee:ea:18:17:0b:d8:7e:51:45:59:40:30:98:11:
ff:d8:63:b3:da:88:f9:0f:3c:da:96:a3:4f:bb:c1:
4a:e2:3a:b9:a7:a0:ce:ff:31:b6:c7:88:ad:c6:27:
0d:b8:ec:82:e3:22:bb:a8:0f:66:a0:51:e7:c1:ae:
73:27:4a:eb:b7:23:4d:43:a8:42:f9:44:42:17:61:
b6:2c:93:d9:90:ec:3a:4f:e7:2d:d4:3c:95:4b:3b:
72:48:00:29:c8:6a:54:4c:35:4b:48:e5:ef:85:91:
0f:3a:bf:29:a5:3b:be:00:3c:3d:51:32:c8:af:10:
cd:65:c8:94:14:bb:96:c4:45:c5:12:48:df:5f:f6:
f0:4f:df:ec:a6:9f:23:bb:b5:b5:71:42:6f:b7:c6:
bc:b9:2e:00:40:91:eb:e5:b7:27:df:95:fa:3d:0c:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DB:03:01:A9:55:75:1B:60:B9:01:D1:B7:C7:85:DA:23:57:41:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/3d359667-78f9-3d87-b525-31bf659ba3c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40/ae6238c6-9389-4fbe-a6aa-24095966ea40.crl
X509v3 Authority Key Identifier:
keyid:22:FD:42:6E:C0:AB:77:6D:3E:E9:73:3A:09:2E:7D:DE:5C:80:B7:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae6238c6-9389-4fbe-a6aa-24095966ea40.cer
sbgp-ipAddrBlock: critical
IPv4:
216.129.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:f8:66:91:5f:72:a8:e2:0e:c8:80:16:07:70:86:6c:c7:46:
36:63:c8:d9:3d:da:cb:fb:ab:6d:70:d8:92:38:c8:3e:94:f2:
05:52:92:17:15:81:d2:5a:ba:bc:e7:65:27:0e:5b:cc:8e:4d:
65:0b:a3:f5:fb:7a:61:18:2d:c3:11:d0:fb:e0:32:88:ca:43:
bc:4b:a6:3d:05:90:41:3e:a7:d8:4b:9e:e6:9f:b1:22:ca:26:
c4:d7:60:f8:e4:c5:d1:dd:7d:7e:6b:b1:4a:3b:0f:cf:f9:40:
6f:22:c8:03:ba:e8:87:36:5f:a7:2c:1b:e1:72:12:f1:47:6b:
66:d5:2e:35:e4:64:52:66:e1:40:b8:b8:ba:73:a9:39:6f:68:
fc:de:50:d0:22:99:19:07:f1:de:1c:4b:d3:92:19:50:6e:e2:
1a:0c:60:39:23:c7:a3:e2:54:45:d1:5a:96:43:14:17:3a:5e:
5f:29:a3:9d:59:cd:f4:5a:cc:89:62:7f:39:45:ce:57:c1:54:
b2:1d:42:2f:45:4e:1b:66:be:e2:36:c7:89:6c:44:cd:1f:00:
8d:db:5b:19:98:99:6e:6a:11:f1:96:0c:c3:6a:5b:20:84:37:
c8:cb:31:30:69:d4:ed:d7:40:cb:0e:7d:fe:c6:32:9b:40:8c:
ff:8f:1f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:00:39 2025 by rpki-client