Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa
File: 6f3608bf-3d7e-3946-adc4-5ab836814644.roa (raw, json)
Hash identifier: 0q+B6IiRJ2yiu14y+RV0LRPVDA5iqvx1n56oycGairg=
Subject key identifier: 15:DD:DF:39:69:74:C5:A6:A9:91:87:92:B3:C0:65:1A:ED:EF:BF:75
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F432858485E35B4810B4363EF3F5C5A80
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa
Signing time: Sun 29 Dec 2024 14:00:53 +0000
ROA not before: Sun 29 Dec 2024 14:00:53 +0000
ROA not after: Sat 29 Mar 2025 13:00:53 +0000
asID: 8635
IP address blocks: 16.1.38.0/24 maxlen: 24
16.240.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:5e:35:b4:81:0b:43:63:ef:3f:5c:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Dec 29 14:00:53 2024 GMT
Not After : Mar 29 13:00:53 2025 GMT
Subject: CN=22f36240-8a14-4341-a2fe-7d6c287c5a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c1:52:f2:f6:04:af:6f:fc:e2:cc:f1:bc:20:
06:ff:05:74:a2:f3:22:15:9f:d9:97:2e:ca:9b:d5:
5b:31:aa:d3:f8:19:2e:4d:27:5d:cd:93:33:d8:02:
ba:c7:0f:52:7f:2e:4c:ed:e9:4d:37:9c:47:1d:f9:
6c:97:0c:c2:06:da:df:41:fa:1c:68:6e:ca:34:a3:
29:a0:70:8f:81:2b:e1:0c:03:84:9f:1a:f0:ce:cf:
42:17:2b:45:c8:c8:5f:92:ef:b8:0f:0b:68:df:30:
fe:b9:3b:51:1e:e0:29:3f:51:00:81:a1:72:c4:da:
4a:53:36:7a:d2:59:c4:48:bf:42:f9:66:83:22:43:
64:2a:ed:11:f5:3b:8e:a8:b0:ea:4a:be:55:7f:67:
50:ce:9b:a6:3a:57:4f:97:da:0c:1c:87:7e:eb:73:
50:e0:21:84:0d:a4:79:1e:c8:e7:dc:1e:45:81:fa:
34:02:f3:37:42:f7:93:ef:37:36:61:e2:47:72:4b:
31:49:08:ec:a8:98:5f:bf:96:ca:a9:4f:d0:68:5e:
6b:6c:1e:dc:d7:45:df:67:0d:7b:c7:f4:90:58:ac:
f1:a6:7e:bb:04:a0:c1:02:34:31:31:2c:22:d3:42:
94:61:2a:59:a0:4d:c3:d9:f2:f9:a1:f5:bd:70:72:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DD:DF:39:69:74:C5:A6:A9:91:87:92:B3:C0:65:1A:ED:EF:BF:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.1.38.0/24
16.240.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:1b:3b:2f:16:e6:e6:7f:df:11:93:62:e1:a6:52:0f:b8:d2:
b8:ca:c6:cc:3d:3d:33:6f:cf:04:19:2f:b0:ba:ce:16:28:50:
25:a9:96:09:d5:be:86:c2:21:83:28:a5:db:8b:9e:07:5c:2f:
c0:5c:3b:4e:d2:b1:e1:00:81:87:9f:67:16:2f:35:c3:5e:d3:
12:39:d7:47:81:f8:fb:ed:30:a5:94:f6:d7:9b:b4:04:b9:15:
f6:7b:64:6e:b7:e6:f0:76:f1:91:e5:66:32:16:f9:77:79:4c:
be:ed:04:ed:7f:1d:97:f0:d1:67:da:8f:0f:16:f2:4c:51:76:
20:f4:3f:f0:cf:2f:d8:5f:af:2f:0c:91:85:b8:f8:36:e0:05:
4a:09:7f:f8:58:75:da:cd:2c:f0:d7:e6:f5:36:a7:bc:20:2a:
2c:fa:f3:1b:25:65:86:f8:8b:86:69:31:84:e0:f0:79:ba:b5:
01:60:49:99:23:6b:13:4f:13:10:c9:3b:95:05:c8:f4:e8:00:
a8:a9:9c:e0:92:b6:83:f2:fc:e5:6c:ec:17:7e:73:b2:73:be:
ee:f6:52:90:7d:9e:b5:c8:39:b0:1f:60:fd:a8:15:20:73:c4:
66:3b:10:e8:49:07:35:72:b4:f4:ca:b3:42:5a:ae:c3:be:8a:
9f:c2:a0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:34:27 2025 by rpki-client