Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/5d3f40c4-8a58-3671-b4db-9f752c8e8848.roa
File: 5d3f40c4-8a58-3671-b4db-9f752c8e8848.roa (raw, json)
Hash identifier: U80v0yRwJWUUqqpFoEX1ma7+S80E55WcZwTDLAt2bMw=
Subject key identifier: 37:43:51:EF:68:72:0D:54:98:C9:FF:C1:C8:AE:63:DC:F9:79:B3:A0
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285847ED24C740376759F8E90AEA00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/5d3f40c4-8a58-3671-b4db-9f752c8e8848.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 11090
IP address blocks: 216.137.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:c7:40:37:67:59:f8:e9:0a:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=c5ad371c-8dcf-4494-bd78-acf2c532deef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:54:a7:8b:61:f3:c4:fb:99:24:c3:dd:0d:
93:22:02:78:22:73:cc:e3:42:f2:56:db:ff:3c:c3:
a0:e3:10:29:84:4d:47:67:5b:3f:b2:7b:98:53:ba:
62:07:35:ac:82:76:5d:47:ca:49:cd:41:f5:dc:06:
c4:54:11:30:4e:ad:d6:3a:95:58:2e:fc:2e:8e:26:
50:a7:92:0c:2d:a2:a9:92:25:71:04:9e:e5:2c:b5:
e3:0a:01:37:78:83:61:c0:87:eb:e0:91:2e:5d:0c:
4a:98:84:57:c3:be:3b:bf:8e:9b:83:bd:a0:63:03:
ed:88:34:f8:13:6b:f1:9a:bb:a6:91:7d:fa:d6:ff:
27:51:02:8c:06:50:51:20:12:e9:9d:f0:2f:59:82:
d8:d9:62:37:2b:2e:1b:0b:e1:15:81:65:d7:6a:8c:
bd:24:d9:c3:c6:6d:b3:fc:35:f1:52:c8:a5:a8:9c:
a8:4c:2b:52:3d:e7:e7:b1:dc:f2:9f:b7:9f:84:2b:
55:ef:18:2e:7a:03:4e:ad:dc:e3:cd:7f:9d:00:91:
cb:ad:b1:2c:f9:63:3c:b9:52:56:6c:c3:65:2d:0c:
9a:7b:20:68:92:92:08:76:b5:fe:e9:4a:d5:a4:e0:
39:56:e0:e3:7f:55:28:3d:5e:65:65:48:7c:e3:c8:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:43:51:EF:68:72:0D:54:98:C9:FF:C1:C8:AE:63:DC:F9:79:B3:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/5d3f40c4-8a58-3671-b4db-9f752c8e8848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:1d:09:f5:46:51:b5:ed:cf:c8:df:a0:7a:9f:7d:e2:76:04:
8b:92:4b:81:61:bd:5c:db:fa:a4:7f:7e:91:8c:ee:32:f8:c9:
de:6c:21:61:ae:c4:d1:65:83:0b:67:ac:19:e7:b7:ce:a0:f3:
86:ff:a1:4d:6c:c3:b9:eb:dc:d3:9b:f3:27:27:d0:16:1b:54:
aa:ea:9c:74:fa:f4:91:41:70:b3:3a:b3:b5:bd:17:4a:53:6b:
f6:ff:24:93:91:9b:60:22:5c:e0:53:72:d7:75:f6:21:ee:f9:
b6:8f:ff:19:de:7c:ac:4f:ac:90:8c:1c:f9:ec:f1:c5:1d:b6:
da:f9:22:ff:c0:ad:c3:54:e6:c3:fa:22:58:56:0e:da:2a:63:
00:a0:3f:24:53:1e:8a:7f:0e:58:a2:3a:95:40:29:fb:7e:76:
b6:0f:26:7d:ac:ca:b9:63:0a:25:51:46:c0:e3:c0:41:de:1b:
d0:eb:fc:67:7d:06:55:8a:7e:20:ec:74:e6:fa:14:7e:13:ce:
7b:88:4d:5f:d8:3a:5e:03:f4:fc:61:d8:e1:b1:60:a7:05:7e:
35:eb:78:5e:f2:34:8c:0e:72:79:a3:9c:d9:8f:c1:71:11:e2:
04:4b:ee:98:12:35:e5:67:2c:12:17:cf:3a:1c:91:1e:0a:5e:
a1:4c:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:02:40 2025 by rpki-client