Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6dfe508f-4cdc-34b1-aab0-56315b8e79d8.roa
File: 6dfe508f-4cdc-34b1-aab0-56315b8e79d8.roa (raw, json)
Hash identifier: 28f2XZ+7WvfDMaO1ae9XbOmCbRLeUnCRubcIgjAGwzQ=
Subject key identifier: 54:C7:26:33:F4:0C:AD:9F:71:59:51:59:A6:64:1D:C2:26:5A:08:16
Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial: 010D0C9F43285847ED24C71337B2A67EF739F080
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6dfe508f-4cdc-34b1-aab0-56315b8e79d8.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 11090
IP address blocks: 216.137.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:c7:13:37:b2:a6:7e:f7:39:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=dd4e720c-22f7-429f-beba-0ff70d436b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c1:1d:ca:07:97:1e:9b:2f:b6:62:91:35:8d:
32:92:6c:d6:bf:9e:0f:18:ec:85:fb:8d:26:da:84:
3e:96:51:4e:a5:9b:0b:b9:03:91:c3:ea:a2:46:eb:
c2:bf:61:80:77:d8:c4:a3:59:af:66:c6:91:2d:b0:
d7:76:16:1f:25:a2:13:34:98:fe:f0:e3:51:c4:a3:
ab:ff:14:87:40:2a:5b:2c:72:2d:79:cb:bd:69:b5:
14:cf:de:48:d3:b8:ae:38:5e:4a:06:92:19:12:1a:
13:9d:32:ef:f8:35:71:4b:e6:4f:87:d9:8c:c2:d2:
27:ca:25:76:f0:95:8a:6a:bc:ba:ad:68:e4:7b:d5:
b5:6a:f6:e6:13:ed:39:a8:4e:00:33:32:1d:82:f1:
71:a8:2e:4c:2f:8a:2f:db:58:cb:21:67:a1:44:5b:
f8:01:01:a5:f8:38:e8:0a:90:db:14:3b:2b:19:5c:
87:d2:1f:54:14:d7:37:dd:05:a3:06:9f:8f:f2:06:
e8:b9:9b:6b:1f:0f:bb:11:9c:f0:e4:43:44:ff:25:
2a:c4:54:c3:41:e4:1b:ef:cf:98:39:e7:aa:62:62:
fb:7a:cd:d3:ce:a0:b0:bc:e2:bd:20:b2:40:de:3c:
93:2a:1a:a9:45:6e:5b:63:5a:67:1b:46:28:1b:42:
ff:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C7:26:33:F4:0C:AD:9F:71:59:51:59:A6:64:1D:C2:26:5A:08:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6dfe508f-4cdc-34b1-aab0-56315b8e79d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
X509v3 Authority Key Identifier:
keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.137.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:85:5b:de:46:cf:c2:94:00:53:b2:a9:6a:ce:d9:aa:40:38:
ae:70:72:f5:13:f6:27:fb:31:a6:16:3d:e7:d3:df:e0:2e:80:
db:7b:f9:94:e7:86:c6:c1:8f:47:87:64:b1:01:fe:22:65:dc:
3e:65:e2:20:75:1e:e7:7b:1c:7b:51:6f:5c:eb:25:6e:7c:ef:
be:e2:73:69:a2:99:95:6e:d4:f4:58:32:56:fe:f2:73:b8:5d:
11:59:a0:a5:aa:02:a0:65:c7:77:91:70:e4:9d:51:c4:8b:07:
d8:97:2f:05:1e:d8:31:d5:36:1a:93:c3:2e:3e:4f:d8:ea:72:
be:a1:1b:12:af:7e:3e:51:a0:f8:d3:20:d1:2c:5d:bc:3a:2f:
ec:5a:cf:1c:1e:94:d0:99:d4:ac:a9:eb:92:05:41:76:41:39:
13:60:60:7a:43:93:c8:47:92:10:aa:b1:19:39:f7:b8:43:4f:
64:e1:dd:63:97:17:96:13:67:c2:ff:24:e0:9f:73:a7:f5:57:
b6:e0:a1:fb:73:80:f3:5d:6c:0a:09:3b:9b:a7:4e:a8:c6:4c:
5f:33:d9:15:e5:88:9b:4d:b1:b2:52:f3:b0:f9:02:d8:ad:91:
3f:8c:1f:e0:51:cf:3f:9e:44:81:08:59:8b:3c:0a:c6:92:a7:
b0:f2:9b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:15:30 2025 by rpki-client