Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa
File: 2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa (raw, json)
Hash identifier: veKPfazm5XWKWH4AmXH6rP7lOUr7igdJT+zD4NKRjVI=
Subject key identifier: 29:A1:BD:A9:32:95:F6:C8:D1:81:6C:4C:B1:4D:CB:DE:1E:6D:BA:AD
Certificate issuer: /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial: 010D0C9F4328584820CA90AC3ECECDECBC5AF700
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa
Signing time: Sat 07 Dec 2024 14:00:51 +0000
ROA not before: Sat 07 Dec 2024 14:00:51 +0000
ROA not after: Fri 07 Mar 2025 14:00:51 +0000
asID: 13536
IP address blocks: 216.179.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:20:ca:90:ac:3e:ce:cd:ec:bc:5a:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Validity
Not Before: Dec 7 14:00:51 2024 GMT
Not After : Mar 7 14:00:51 2025 GMT
Subject: CN=1494fce2-870d-41a2-810b-83f2963dcffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:77:6e:91:c1:b3:6e:7b:b3:db:bd:da:4b:
65:51:98:47:41:39:46:eb:7c:a0:75:c9:38:85:70:
99:09:4a:46:b5:af:e4:65:21:61:39:4d:b0:ee:5a:
0d:04:3e:81:12:86:d1:59:14:56:b6:6a:9f:27:5f:
09:a9:3c:ca:95:32:c5:71:e7:85:a7:73:a4:15:61:
7f:c9:e3:ec:da:f6:3d:eb:14:a1:f0:a0:c8:86:b8:
68:d4:56:b1:59:02:26:a7:21:1f:95:2f:c5:6e:b4:
ee:e4:0f:8c:34:e4:9d:44:94:96:f1:3a:90:34:4e:
51:14:79:e2:e1:6a:c9:cd:04:e5:42:6b:d5:74:54:
bf:df:cc:40:74:df:25:06:74:a9:40:8a:47:e9:cd:
cb:27:eb:94:2d:1a:f2:74:66:52:38:c7:f5:7c:28:
01:9e:93:0f:aa:65:71:22:73:b1:03:10:42:f9:55:
d9:c3:d3:ef:9a:01:97:73:02:e8:e9:d4:28:68:d5:
61:cb:0d:e4:eb:2a:f2:b2:d8:25:3f:ca:ee:57:fd:
8d:e6:9e:11:6b:b9:40:98:1c:a4:97:57:3d:62:a0:
1d:43:36:96:0f:51:47:c6:f1:21:50:5b:a9:e0:71:
81:29:63:32:98:51:d5:cb:2c:fa:41:08:87:a8:6e:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A1:BD:A9:32:95:F6:C8:D1:81:6C:4C:B1:4D:CB:DE:1E:6D:BA:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/2899a7f7-27c2-3cf6-bbbf-8b0e833ae209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
X509v3 Authority Key Identifier:
keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.179.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:03:fb:ff:b5:a8:8e:93:8a:19:c6:da:d2:01:f3:64:c5:85:
b1:d1:83:5f:cf:67:5e:47:71:d2:23:9d:f2:4b:86:7d:06:36:
79:5b:b3:2a:3c:21:ee:c2:0d:66:9a:4c:45:77:63:3e:2a:be:
bd:a7:0b:35:1e:c7:d3:38:ea:1d:16:06:98:71:db:63:26:37:
45:07:3e:cf:74:d1:e2:cc:10:7d:ff:c9:af:c6:9e:ac:df:25:
7a:75:db:44:23:4a:90:04:d7:11:af:f6:62:e0:a9:26:f4:52:
22:31:bc:50:cb:ac:67:5f:ab:dd:04:06:48:14:43:78:16:53:
12:4f:29:79:d3:6a:60:e0:2d:54:bb:5b:e2:52:81:af:e9:89:
6e:18:4d:ef:4f:1c:d4:dd:1b:64:14:51:d6:93:5f:9f:fd:2b:
a7:2b:40:77:90:d0:b7:e3:ab:18:80:49:e8:49:8d:b9:92:90:
7a:0a:bb:4e:35:04:06:61:b6:dc:6a:16:1e:72:0c:15:79:30:
0d:45:07:9b:59:3d:2f:b5:36:75:b1:a6:93:77:f3:6f:14:36:
68:25:0a:9b:7a:4a:c2:d4:a1:7b:7d:d5:0e:25:ba:57:df:8f:
0c:95:c6:5e:87:b3:c7:43:f1:2d:d1:81:42:2f:9e:c6:6a:20:
e3:cf:10:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:37:23 2025 by rpki-client