Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa
File: fc936a75-72c0-395c-a61c-d20afdd52258.roa (raw, json)
Hash identifier: 1TU2xNoLs4AQ/uSCvYdYpAB8Ol20p1YzULwLiXkWQ0k=
Subject key identifier: 0A:F3:19:D9:C1:DC:A9:21:E6:BE:DD:45:2E:16:64:23:F6:51:60:D6
Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Certificate serial: 010D0C9F432858489A3B4B7920B04ED2594B16A0
Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa
Signing time: Mon 20 Jan 2025 02:00:40 +0000
ROA not before: Mon 20 Jan 2025 02:00:40 +0000
ROA not after: Sun 20 Apr 2025 01:00:40 +0000
asID: 398420
IP address blocks: 216.246.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9a:3b:4b:79:20:b0:4e:d2:59:4b:16:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959
Validity
Not Before: Jan 20 02:00:40 2025 GMT
Not After : Apr 20 01:00:40 2025 GMT
Subject: CN=3262ddea-0209-43d5-ba1f-0f933fcdf2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:b0:96:7b:7d:ea:d3:89:a4:26:11:ed:f7:
45:0e:72:aa:03:89:c9:ef:5a:55:91:8c:40:07:a4:
37:7b:e9:6d:bf:6b:89:22:66:ac:80:01:c0:ce:eb:
30:26:98:45:96:e9:dc:cb:49:f8:6b:2d:14:b5:6c:
9c:f4:91:5a:93:e8:c1:f0:5d:97:2e:36:43:84:85:
0e:02:0a:9c:30:fb:42:20:0f:37:d9:a9:76:72:08:
09:86:b0:88:ee:34:6a:07:d0:6c:9f:6d:86:87:b5:
ed:1a:e8:b0:c0:17:9e:55:eb:0d:73:4a:8a:3f:02:
d0:bd:25:dc:66:4c:dc:07:8d:03:f9:d3:78:4d:5d:
cb:52:de:91:fd:ee:16:d7:ae:f3:ca:77:8c:ce:a9:
80:84:4d:ce:7f:6c:57:27:58:59:b9:93:f1:a4:22:
cf:7f:93:31:ef:a7:19:d9:8f:06:9c:80:d6:c2:8d:
e1:ca:09:2b:d0:d7:a4:8a:07:42:da:01:ce:ae:9b:
3d:c3:32:6c:ee:78:eb:4b:73:5f:20:c5:5b:cc:e6:
4a:4a:cc:d8:5a:f7:be:3e:66:d9:e7:05:01:8e:d2:
f6:e6:af:c9:7b:ae:b8:ae:00:13:91:6e:0a:ae:a6:
ed:8d:12:97:c7:10:28:57:2c:24:0f:f3:af:0e:a1:
cf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F3:19:D9:C1:DC:A9:21:E6:BE:DD:45:2E:16:64:23:F6:51:60:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/fc936a75-72c0-395c-a61c-d20afdd52258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl
X509v3 Authority Key Identifier:
keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer
sbgp-ipAddrBlock: critical
IPv4:
216.246.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:39:a2:1f:66:88:01:6e:b5:67:f7:08:f3:44:2d:3b:bc:5e:
92:19:29:64:4c:54:6f:14:c4:f3:b3:32:66:1e:39:3f:a0:a8:
92:ac:b3:77:f7:9b:b2:2d:99:af:bd:2a:b6:4d:5c:9a:c7:22:
29:6f:c5:ab:bc:4a:49:8c:f4:27:94:74:66:1c:0c:73:b7:5b:
33:3e:bb:09:de:73:ec:4e:98:22:cf:ac:9a:9e:04:0c:bc:07:
fb:68:e5:2f:57:60:2d:d8:9c:ef:73:11:9e:1f:e0:f2:cb:77:
cf:c6:b3:ac:5c:e0:85:d0:71:74:4a:dc:d5:e5:a8:79:86:66:
6b:14:8e:5a:1b:b1:8f:9e:d2:94:5e:2c:bf:1c:1b:ee:71:a6:
ff:0f:4a:aa:ba:1e:29:4d:20:e5:ea:15:99:15:81:dd:f7:61:
bd:c5:ab:5d:cc:37:97:f6:73:33:ab:08:7e:30:e8:15:58:bb:
95:26:33:96:f3:9b:20:8f:da:0f:ff:cc:5a:e4:2a:83:8c:bf:
d0:ad:e7:1f:c1:a1:67:92:c6:ba:97:14:34:77:26:74:7b:eb:
cd:c5:88:d9:fc:82:30:c3:c8:56:cd:5e:61:1c:e5:f7:bf:61:
15:6b:33:ea:48:fe:94:1b:6f:bd:2d:c5:5b:9a:e2:fc:8a:e6:
6c:92:30:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:32:20 2025 by rpki-client