Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ced8f72a-45cb-38e6-b450-c9d10d7b0c24.roa
File: ced8f72a-45cb-38e6-b450-c9d10d7b0c24.roa (raw, json)
Hash identifier: tXHfNTX6ZWK3h2SbP+s1sGBNSGT2uK56/YGa0FwrKYQ=
Subject key identifier: 43:52:10:7B:74:3F:FB:21:74:D9:3B:A6:8F:DE:8A:4A:23:7F:B2:D4
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F432858480208286C46CF06ED91601100
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ced8f72a-45cb-38e6-b450-c9d10d7b0c24.roa
Signing time: Tue 26 Nov 2024 13:34:56 +0000
ROA not before: Tue 26 Nov 2024 13:34:56 +0000
ROA not after: Mon 24 Feb 2025 13:34:56 +0000
asID: 396827
IP address blocks: 216.87.145.53/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:02:08:28:6c:46:cf:06:ed:91:60:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Nov 26 13:34:56 2024 GMT
Not After : Feb 24 13:34:56 2025 GMT
Subject: CN=f00ade45-45a0-440e-8c00-ec0f24e33fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ae:f7:27:69:dc:6c:c1:82:9f:ad:13:07:40:
ca:3e:9b:17:a0:62:08:e2:da:43:3c:a9:d4:a2:00:
f0:be:f8:01:2f:f8:1e:4e:a6:39:79:cc:5e:4f:b2:
4d:17:1d:f4:dc:94:f2:65:2b:66:a4:75:db:71:2b:
f8:c0:71:23:fb:5c:fd:66:ff:11:c7:64:a9:7f:fb:
c4:4e:72:1a:a8:b8:b0:7a:e0:ad:76:db:6d:c8:2d:
6f:be:50:ce:c1:da:e7:a1:ed:f1:38:7f:d9:b0:db:
74:4c:f1:ba:af:eb:ac:0e:6c:21:0f:d3:0e:2b:cd:
9f:60:9a:58:7a:20:aa:5c:39:ea:76:1c:8c:3b:20:
d7:06:9a:40:0d:23:b1:ec:23:c7:ff:ff:3a:88:8c:
99:57:52:77:a8:b8:3a:4f:88:6a:35:93:54:d5:c7:
8d:e6:c6:d0:c9:fe:a7:8c:7d:29:3a:e2:34:8e:38:
17:bc:d5:8a:a8:f3:9b:7c:ca:04:81:81:35:1b:c3:
33:b1:36:6e:f7:56:ed:01:46:d8:ad:74:ab:b0:a1:
82:9c:35:3c:ad:d3:82:eb:18:63:f1:f3:d2:1c:d2:
a3:ac:e0:4a:2a:1c:fe:71:f2:47:e0:f0:7f:ed:9a:
20:cd:e9:71:f8:14:57:3e:ee:16:92:23:61:9f:70:
bd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:10:7B:74:3F:FB:21:74:D9:3B:A6:8F:DE:8A:4A:23:7F:B2:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ced8f72a-45cb-38e6-b450-c9d10d7b0c24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
216.87.145.53/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:45:9c:37:ef:f7:fb:d0:f5:e7:db:29:51:31:9c:b1:94:f3:
ec:dd:43:00:a2:27:ca:68:90:04:fc:69:75:69:66:8f:dc:3b:
b7:bf:8d:26:b8:9d:27:1c:a3:ac:72:98:d1:ea:15:11:85:00:
0c:06:fc:a1:d7:a9:9b:98:57:b7:12:90:ff:a2:fb:46:5b:15:
f1:5c:07:22:d1:ff:5f:5f:a8:5b:53:af:f3:d2:02:39:40:18:
e1:ae:ce:5a:26:ec:03:6b:2b:db:88:d6:be:fa:a4:31:22:3d:
18:ad:f1:cf:fc:b7:f3:f9:d1:a7:fc:fc:9b:30:87:06:c2:77:
1d:df:9a:31:6d:ff:df:b9:f3:17:2f:ba:eb:e2:10:93:6d:71:
94:34:0f:71:dd:05:02:ae:6f:ef:11:d8:66:52:ed:17:37:73:
e3:48:00:94:7d:d4:e4:bb:d3:9f:da:2e:58:89:5c:fa:37:9c:
a2:c4:de:7e:6b:4c:ec:fa:4b:b4:28:7f:26:a2:d4:36:3f:e8:
41:b4:e3:65:58:20:9a:cf:64:66:1f:8e:70:d1:80:02:20:e1:
c5:aa:6b:e5:ab:16:2d:56:1d:eb:bc:4a:f8:2d:bb:4c:f5:3b:
96:4e:44:de:86:c0:fe:b5:ab:b4:b9:dd:55:0b:22:b7:bd:41:
b0:06:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:45:58 2025 by rpki-client