Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ca8d454c-8457-3d57-82f4-1e234ade3489.roa
File: ca8d454c-8457-3d57-82f4-1e234ade3489.roa (raw, json)
Hash identifier: Ng8QuQBXr8qb/91zARw/qMEr1cVzykM8OjwywvkPhqs=
Subject key identifier: 03:B8:16:47:E7:E1:3D:50:5A:30:1C:1B:3D:AF:D8:36:87:5F:17:31
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584843B003AA263B09A86BF87B80
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ca8d454c-8457-3d57-82f4-1e234ade3489.roa
Signing time: Fri 20 Dec 2024 02:00:40 +0000
ROA not before: Fri 20 Dec 2024 02:00:40 +0000
ROA not after: Thu 20 Mar 2025 01:00:40 +0000
asID: 62651
IP address blocks: 216.131.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:43:b0:03:aa:26:3b:09:a8:6b:f8:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Dec 20 02:00:40 2024 GMT
Not After : Mar 20 01:00:40 2025 GMT
Subject: CN=85d47627-4a5b-4f94-9054-b1ce538207f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7a:8d:e9:a3:e1:e3:71:d9:36:d1:6f:00:9c:
73:1a:c7:61:0b:eb:86:08:e2:3a:00:cb:e1:5a:de:
60:d9:c4:c4:14:15:5d:18:3d:a9:8d:ad:f6:5a:c9:
4e:3e:86:4d:30:77:5e:bd:d0:3f:f8:1d:8b:11:0e:
2c:65:28:d0:97:35:27:3d:89:d1:4d:21:93:c4:e6:
3d:75:c4:ba:18:c2:86:c0:4b:0f:ff:7c:a7:ff:41:
3f:33:39:74:75:12:f0:14:57:3c:ec:0b:3d:4d:5a:
68:35:2b:d2:1d:5b:e6:0e:a4:1d:50:a1:12:e4:c3:
e5:cf:f6:f3:1e:18:61:61:1b:73:da:c4:bd:3e:78:
2d:c8:08:2c:44:50:fe:7a:c7:c2:f9:e3:71:08:6d:
60:a3:8b:21:ab:73:50:56:9f:7a:4c:43:24:9e:17:
80:21:56:54:13:60:b6:e9:0d:18:0e:ee:6b:21:f7:
3e:66:65:83:5a:2c:52:80:c0:a0:ed:60:c3:5a:41:
e6:74:e2:5c:24:5a:09:63:f8:99:b8:5a:bb:87:6a:
b6:82:97:23:bf:35:28:98:6a:85:27:d9:06:7e:65:
1a:c6:93:28:09:d8:de:b9:d6:21:71:92:d7:67:6e:
d2:ae:4a:4d:4e:82:56:dc:00:02:52:ef:36:1f:51:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B8:16:47:E7:E1:3D:50:5A:30:1C:1B:3D:AF:D8:36:87:5F:17:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ca8d454c-8457-3d57-82f4-1e234ade3489.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.131.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:3b:37:d8:d1:df:76:8c:5c:4b:1b:5f:b3:3c:e2:e1:44:68:
50:a8:46:4b:ba:94:4f:21:0a:c9:1a:8a:54:31:0f:47:24:a1:
7a:e6:fe:f3:f4:43:f1:18:1f:8c:14:75:a9:9b:ca:c0:c3:ed:
55:03:28:96:c1:ab:8c:64:1f:fd:bb:15:e4:ef:8b:1b:db:b8:
bd:c7:05:39:b0:b5:de:a3:7f:f8:8f:c9:af:80:29:aa:5e:b4:
a1:42:12:4f:a0:13:53:ee:0a:1c:f8:24:f2:42:49:3a:4d:ce:
60:9d:37:dd:50:3a:9b:54:73:1f:ee:1a:e7:f4:9d:76:ac:65:
19:bc:4f:23:09:8f:a4:4d:82:c4:19:b4:1e:56:d6:f1:12:0d:
8b:d5:be:80:ca:ac:89:34:53:ab:bb:c3:c8:94:53:08:7e:fc:
58:a2:e5:66:49:0a:ea:c5:eb:a1:38:d6:cc:e4:b2:81:06:1d:
bd:6c:b2:33:e6:d6:da:a4:46:c6:0c:2b:e1:93:b8:77:01:64:
c9:d4:19:ee:fa:3a:67:83:36:5a:6b:85:9b:9e:d7:c1:a5:93:
96:7d:e3:da:3e:1d:c9:bc:de:0f:a0:eb:e7:f2:88:71:80:13:
ae:25:f8:b7:f8:89:38:09:72:13:c0:68:4c:b7:43:3c:3e:09:
ad:99:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:28:55 2025 by rpki-client