Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa
File: 3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa (raw, json)
Hash identifier: S0PPTy9CkP0dtYloUZi6ZlgX6GXNdkMeKbTKDi+dKOM=
Subject key identifier: 60:D7:BC:A4:A1:8F:FB:FD:93:2A:CA:A2:C7:85:F0:F8:20:E1:87:4C
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285847DF2F564B1B39C8BBF74F1480
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa
Signing time: Thu 14 Nov 2024 02:00:27 +0000
ROA not before: Thu 14 Nov 2024 02:00:27 +0000
ROA not after: Wed 12 Feb 2025 02:00:27 +0000
asID: 11090
IP address blocks: 216.152.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:df:2f:56:4b:1b:39:c8:bb:f7:4f:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Nov 14 02:00:27 2024 GMT
Not After : Feb 12 02:00:27 2025 GMT
Subject: CN=e435b640-13f6-4cd6-b012-252bf3f52b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:2d:a7:08:9c:e0:07:3b:8a:a9:ab:8c:d0:
68:b8:1f:25:8e:30:0d:6c:8f:9a:e2:0d:29:ea:f1:
26:92:3c:f5:77:61:21:58:4f:6e:9f:1d:ae:55:6a:
33:b5:35:56:33:08:48:aa:8b:bb:98:f8:68:3f:70:
42:29:3e:45:2e:8f:ba:84:65:ae:e6:f6:d5:f6:ee:
60:ec:57:3f:68:82:ca:09:fe:29:3c:b2:38:4b:8b:
e8:96:9d:f1:35:b7:c6:d7:3b:d4:c2:fc:ca:a1:9b:
9b:a9:9c:fd:d6:30:2f:06:ff:3e:47:bd:46:8d:ff:
f3:4f:c0:41:07:0a:d7:63:0f:ad:35:66:0d:f1:fe:
ef:94:75:07:2a:d3:db:55:b8:39:3d:a7:a2:45:b1:
31:fc:4e:92:5e:d6:27:94:68:5f:d8:89:03:49:b3:
7d:65:c3:b7:98:15:04:a6:c4:a0:cf:9e:9f:ca:26:
3a:7f:24:fc:cb:16:53:72:36:aa:30:b8:80:55:97:
2b:15:36:77:c8:31:25:3a:29:3a:4b:e8:6d:43:6e:
f2:28:fc:31:18:02:60:8d:4a:f7:ea:b0:0b:14:75:
7f:cd:61:03:be:cb:9e:ae:0d:ce:db:72:fa:c7:18:
e6:12:fa:a8:7a:93:ff:a4:40:55:ef:ff:fd:c7:39:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:BC:A4:A1:8F:FB:FD:93:2A:CA:A2:C7:85:F0:F8:20:E1:87:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3b268d14-7ec3-3f3c-a0d6-ac2a669c6060.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.152.180.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:a8:a1:ff:31:46:6b:66:1b:07:82:cc:c1:f3:79:16:02:79:
c0:09:13:35:b5:c8:9c:3f:69:c9:2e:ae:73:9a:c5:64:d0:07:
3b:71:cd:b3:99:25:f7:e3:1c:aa:e5:70:13:86:98:43:51:0f:
8e:86:3e:e3:a2:63:b9:5a:61:7d:af:af:58:eb:a0:8b:0a:7c:
fa:a4:0e:23:85:75:2c:4e:75:bb:97:99:d1:bd:bb:f9:60:c1:
04:df:05:05:7e:31:43:a4:7d:2c:4c:ea:ee:4c:e8:69:ef:07:
90:3f:91:ec:58:43:a3:a6:27:57:78:55:38:69:37:4d:71:4b:
5e:5b:be:e3:43:74:f3:f4:25:4e:72:9b:09:fc:94:e1:89:55:
04:57:19:3a:46:b9:73:ae:e3:e1:6a:31:7d:20:ac:3c:8e:48:
5d:1c:25:03:1d:86:c4:6a:22:94:ca:fa:21:3a:98:32:7c:fd:
bf:cc:02:e7:16:7e:b4:d3:08:3b:02:1f:ef:90:de:72:6d:16:
55:1b:d4:07:7b:b4:5b:17:69:ab:87:7e:ba:b6:c6:17:ab:0c:
02:c2:e4:a2:9b:60:2d:99:94:f8:d2:b4:22:e8:7e:20:06:ba:
16:ea:5a:63:8a:01:96:79:fc:10:23:e1:13:b4:69:0a:01:23:
41:b3:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:04:46 2025 by rpki-client