Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa
File: 32961140-fc1b-3f18-9ecc-e50da122d081.roa (raw, json)
Hash identifier: gHSclkPgcoNVwUJHRzfVlpLtBGTxs60aWqnFEl4Xouo=
Subject key identifier: 60:F0:F2:08:8F:C4:7D:12:2E:0D:00:64:34:4C:06:59:01:7C:C1:8E
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584843B003901CFD479E03048E20
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 62651
IP address blocks: 216.131.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:03:90:1c:fd:47:9e:03:04:8e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=a156f993-fc7d-48e5-80ff-aa2632f4fc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4b:a1:a2:02:fc:ca:8c:1f:69:4c:bf:49:eb:
3f:2b:bc:86:67:25:af:d4:69:28:e0:ed:b2:f2:0a:
6f:14:a7:36:66:11:f1:b1:fe:df:05:98:50:b2:e5:
b8:45:cc:95:b9:8a:42:55:6e:15:31:6f:c5:da:69:
72:4b:ba:9d:c8:1f:52:b9:d3:0c:f3:66:2f:3d:9a:
b6:22:fc:ce:f8:05:38:73:a3:83:2e:05:9b:89:a1:
6c:fa:ae:88:8f:20:30:a1:2a:c5:ab:0d:ed:f2:85:
0d:d6:12:6f:65:70:a0:32:8d:eb:15:5b:88:7a:f4:
79:c6:70:3f:da:00:a6:6d:ed:b6:10:7e:c9:2b:f9:
1f:f4:b2:ae:43:f5:0c:bc:66:90:99:4c:bb:46:69:
35:24:a3:67:86:c7:34:64:50:e9:05:13:9c:d2:e3:
61:b3:f8:1f:aa:21:49:09:c6:e5:14:2c:42:4a:0b:
28:2a:a7:f8:26:b7:96:54:05:0d:f5:44:83:ff:27:
d3:84:dc:0a:aa:dd:a9:22:ce:33:02:ed:4e:35:7b:
0d:d6:0c:ce:3f:5e:65:6c:47:ab:7b:70:52:81:87:
16:b3:51:58:d7:70:27:e4:da:00:4c:7d:39:c1:77:
da:17:25:f5:da:17:64:76:75:1e:ef:aa:4e:f7:15:
26:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F0:F2:08:8F:C4:7D:12:2E:0D:00:64:34:4C:06:59:01:7C:C1:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/32961140-fc1b-3f18-9ecc-e50da122d081.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.131.89.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b0:0a:ed:30:00:df:9c:8d:2c:1f:71:a6:d1:a2:a2:15:c2:
1c:0f:5c:8a:67:1c:65:37:55:fa:49:4a:cf:33:72:c5:3e:7d:
73:04:62:c4:83:a2:0c:98:f5:45:a9:4a:16:e7:9a:83:83:59:
87:2a:f3:64:a8:8b:4f:00:51:7e:27:3a:dc:58:d0:51:16:65:
17:b5:dd:cb:79:43:2f:44:41:63:fe:03:d4:2d:e9:2b:a3:dd:
18:c0:1a:7e:62:1e:89:48:4a:d4:f9:35:be:91:fc:19:c2:60:
eb:ae:1b:57:f4:fe:a0:d5:ca:ee:83:d7:e3:3f:c0:80:68:ce:
f4:ba:11:66:91:af:8e:7c:dc:7a:df:76:92:36:df:43:b5:0a:
4e:40:2e:07:50:da:38:40:30:05:75:b0:56:4f:66:23:d6:7a:
9d:16:e4:b0:91:18:d4:08:d3:5b:76:55:33:e7:ee:fd:1b:1d:
4b:a9:62:93:de:0f:86:9b:0b:63:cd:f6:9c:fe:e5:f3:2f:d5:
9d:c8:d1:a5:7d:51:4a:87:e4:e0:57:b5:78:10:21:6c:4b:20:
91:5f:33:77:a6:96:68:f0:a6:91:c5:19:42:19:e2:95:5a:0c:
64:9a:b4:03:ee:b2:bd:ba:49:53:ec:93:95:12:95:55:27:25:
d2:96:c0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:36:06 2025 by rpki-client