Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa
File: d08c84e2-cf05-324f-9e29-a1020bf31620.roa (raw, json)
Hash identifier: OiH9f+lkvFSbJ5+knFSEqsEEvR+qGMSfEbqs+cWAy3c=
Subject key identifier: 77:E8:B5:B4:81:E5:27:3A:D9:43:DA:48:20:5F:70:5A:25:9B:09:06
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584854703A8598DEDB6600D17F00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 22781
IP address blocks: 216.131.118.0/24 maxlen: 24
2606:b300:8100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:3a:85:98:de:db:66:00:d1:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=e710e516-9e85-45f2-9ccf-093c57c2e0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:9e:98:77:af:fb:c7:15:23:5f:51:99:eb:
e0:46:62:df:32:d8:98:20:f9:3c:90:98:40:9c:bf:
cb:ac:49:a5:90:f5:a4:cf:0a:5b:4d:55:29:d4:64:
e7:ba:ba:79:17:f0:d5:54:02:fa:04:a1:26:ad:11:
3f:33:06:b1:83:91:7c:a1:f6:10:5c:3d:e7:08:15:
82:1c:0c:22:62:5e:58:08:ce:e3:55:ee:6f:8b:02:
11:1a:50:e6:c3:45:03:72:17:0f:6d:d2:10:6f:86:
73:6d:78:99:af:86:dc:95:56:c9:7e:dc:21:c2:7c:
01:a6:89:11:34:44:1c:46:d0:da:13:45:d0:92:9d:
08:e4:82:8c:97:0d:8b:bf:f6:18:ad:a4:c0:1f:2f:
73:e5:3b:77:4d:77:86:04:92:08:0a:1f:b3:fe:03:
89:69:73:8d:9d:dc:23:7f:eb:16:be:c1:f7:b1:25:
ea:0c:38:a9:d5:7e:d2:0e:9e:04:b0:6d:20:91:40:
70:fc:6b:33:6a:6b:2b:fa:ce:7b:bb:09:ae:3a:5d:
bb:51:c2:7a:75:12:17:7a:a6:82:e3:a1:57:96:15:
9f:1b:ba:14:ba:3d:18:ca:06:99:93:12:00:e2:f7:
ab:cd:89:ae:dd:91:5a:80:9a:34:33:67:96:98:e7:
77:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E8:B5:B4:81:E5:27:3A:D9:43:DA:48:20:5F:70:5A:25:9B:09:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d08c84e2-cf05-324f-9e29-a1020bf31620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.131.118.0/24
IPv6:
2606:b300:8100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:14:0e:f7:28:9a:c7:9a:95:7a:b1:44:db:4f:8d:fa:23:4c:
9a:29:be:3f:4d:47:9f:31:c8:05:3b:d4:50:34:5e:58:6d:76:
dc:ae:d7:da:e5:33:e6:d7:61:9c:a6:7f:c0:bd:2f:a9:93:5e:
9f:fe:8a:ee:23:b5:91:47:bd:f5:4c:74:f4:a8:2f:80:2e:8a:
ae:c2:43:75:4f:4f:5f:72:82:6c:aa:ef:e2:a9:f0:ea:10:d9:
b6:5c:2b:b7:39:a5:19:1a:3c:46:5d:af:54:b3:dc:30:8f:d4:
eb:db:83:ee:8b:83:9c:c4:11:6c:8c:72:a9:27:6b:08:a4:1d:
6f:49:b0:55:b0:c8:b4:45:0d:89:09:76:3b:11:51:28:f4:e9:
4e:db:a8:4e:57:ca:3b:ea:48:dd:20:e1:0c:d9:d0:aa:bd:5f:
28:f9:b1:d3:36:33:83:01:7e:2f:7c:94:e5:ad:92:02:6c:11:
47:6c:23:7d:4c:31:b5:82:06:86:f3:3a:1c:0d:76:4f:e7:c1:
db:cd:8c:70:f9:9d:ec:7a:c1:3f:41:ba:a8:07:d9:29:1f:7b:
d9:8f:3e:aa:a6:b0:6d:70:4d:df:ff:1f:7b:ab:9a:e7:9d:d2:
ff:33:ad:40:64:a5:43:d4:5e:5e:d5:12:15:f7:f1:2d:ac:74:
91:cc:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:00:06 2025 by rpki-client