Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/36518cfb-6360-3b20-ba26-50ede2a2c5e4.roa
File: 36518cfb-6360-3b20-ba26-50ede2a2c5e4.roa (raw, json)
Hash identifier: 9nf16boMZaxiU4P0Bbx9UVg9lVY6gKG+O6eIKhQ5qB4=
Subject key identifier: B8:45:A7:9B:4A:00:FE:FA:A8:BC:8D:F6:BD:CE:59:24:18:E1:0D:02
Certificate issuer: /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial: 010D0C9F43285847FF4A4261A2A167E6F77A2880
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/36518cfb-6360-3b20-ba26-50ede2a2c5e4.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 40249
IP address blocks: 216.211.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:42:61:a2:a1:67:e6:f7:7a:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=21feaef8-a757-4bec-a1f3-6ae2a28a9112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:ea:88:e4:26:84:6e:e5:39:66:68:c3:91:
69:19:26:14:a0:64:7f:04:b3:7e:5d:00:9f:84:74:
79:78:34:40:07:98:40:92:25:77:4e:46:53:d6:f9:
d7:0a:b0:7e:5b:9f:34:6a:e6:e9:6a:fe:c6:05:9d:
3b:c5:b8:b5:3f:62:5f:aa:02:15:bb:1f:bc:34:f4:
f9:94:3f:65:f0:d1:05:2a:da:de:a7:37:83:2b:a9:
51:06:8b:72:b3:8c:0a:d4:90:12:4a:92:64:f6:4e:
4c:c3:7f:a8:19:79:01:48:03:d4:9e:d3:fe:69:86:
8a:1e:17:c2:d9:9d:e1:be:51:e7:1f:0a:df:44:d9:
99:ec:94:5f:75:0e:42:90:ea:34:91:b6:c2:b1:29:
7f:77:07:29:18:05:82:78:47:2a:5d:73:df:4b:53:
c7:89:34:8a:4e:0d:b2:54:aa:90:27:9c:ad:3e:36:
e2:05:0e:e6:0e:3a:ca:5d:64:06:d3:ca:55:c6:eb:
5b:a6:11:a0:e6:c1:85:81:e4:f4:27:5b:be:06:4d:
d4:e5:e6:78:35:de:df:85:fd:ff:c5:93:47:ae:f2:
75:6a:6a:8c:2e:5f:01:1d:28:55:93:47:9b:4f:e9:
55:6b:97:60:c7:ff:7e:35:cf:81:64:ab:b7:c3:e3:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:45:A7:9B:4A:00:FE:FA:A8:BC:8D:F6:BD:CE:59:24:18:E1:0D:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/36518cfb-6360-3b20-ba26-50ede2a2c5e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
X509v3 Authority Key Identifier:
keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
sbgp-ipAddrBlock: critical
IPv4:
216.211.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:5a:8e:f7:39:1d:aa:cb:0b:e1:8b:52:5e:7f:87:d7:a4:9f:
27:80:19:a5:a7:e9:cc:d1:89:ed:6c:3e:df:0f:12:35:07:2d:
05:38:ac:5f:83:a6:e2:58:97:5f:86:b8:ef:75:7f:9c:f4:54:
00:50:b9:9b:4e:8e:1a:9a:14:28:fe:20:1c:38:b8:6f:6f:d2:
8a:91:71:9d:fb:8c:75:42:0f:c2:f5:0d:15:ff:b5:7a:3f:cf:
af:16:5e:1c:b0:1a:e4:45:d2:46:27:1f:58:5d:49:30:1b:9f:
a8:af:2f:a2:b6:07:23:8d:66:e3:12:8c:59:13:d7:f3:f0:fc:
15:60:00:a9:fd:c3:90:5e:22:c4:0d:74:68:43:ab:c7:e4:0c:
77:9f:6f:e8:56:f3:ee:33:76:2b:9c:1e:4f:7b:35:03:a2:81:
c9:a6:de:69:6f:40:1e:fb:dc:79:1b:74:ce:28:c1:b5:58:85:
cc:0c:c0:e3:62:57:34:6e:40:1d:91:72:95:6c:44:9d:58:4b:
ef:f2:32:98:92:89:79:48:40:18:91:7b:47:c2:73:35:04:24:
42:e7:34:cf:15:03:eb:96:08:55:5a:f0:fb:ef:7f:15:91:4c:
1c:a6:f4:57:f9:d2:f8:84:60:d4:db:82:5e:5d:95:a5:09:38:
f8:32:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:18:31 2025 by rpki-client