Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa
File: 680d15e7-a36c-3758-9cb4-c1ea5f325659.roa (raw, json)
Hash identifier: ICL0JJ7PQbHqqoiiTJ+RjxT3wm42b34kBzjrFtGqAws=
Subject key identifier: 85:67:7A:86:21:9E:C1:DA:21:DF:EE:5C:7E:FB:C0:86:ED:CF:10:F3
Certificate issuer: /CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901
Certificate serial: 010D0C9F43285847EE8A2FE9A5BF07E6521F6946
Authority key identifier: 3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa
Signing time: Tue 19 Nov 2024 14:00:39 +0000
ROA not before: Tue 19 Nov 2024 14:00:39 +0000
ROA not after: Mon 17 Feb 2025 14:00:39 +0000
asID: 63178
IP address blocks: 216.229.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ee:8a:2f:e9:a5:bf:07:e6:52:1f:69:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec4eaab-a927-41c8-b94d-d5dc7ba3d901
Validity
Not Before: Nov 19 14:00:39 2024 GMT
Not After : Feb 17 14:00:39 2025 GMT
Subject: CN=10c4741c-7ba5-45ff-a8ae-c96fa122cd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:8e:ac:49:e3:a3:df:d8:1e:65:71:ec:e5:
0c:5e:4e:2a:a6:78:5f:1b:94:b1:aa:b5:b2:7a:df:
a3:c5:26:6b:78:cd:73:6e:28:13:ed:fc:73:e2:06:
90:1f:2d:14:9b:0d:b7:4c:a2:86:89:ec:72:3e:5a:
60:42:c6:4b:5f:c4:ba:bd:32:1a:ef:31:dd:fa:47:
dc:22:3f:49:14:7a:d4:8c:d8:5c:12:02:63:33:26:
4f:86:8a:bc:47:06:3a:c0:f4:d6:40:53:0e:1f:64:
cb:c2:ed:6e:04:25:7e:c0:67:34:52:02:27:92:9e:
f0:36:35:58:11:fa:d0:7c:9f:3e:35:3c:31:c1:8f:
ed:9a:3c:02:4f:6e:53:69:82:82:be:18:c3:93:db:
87:c6:92:38:5d:38:48:1d:3c:6e:d2:65:f7:5f:65:
df:04:e8:9a:eb:6e:4f:5c:fd:2d:0c:ac:6b:f6:d4:
6d:28:4a:02:be:c1:8e:32:3f:74:a0:c0:e4:8d:0c:
2e:b4:c7:02:2e:87:5a:00:ef:76:9d:8c:32:9e:bd:
1c:9d:3e:52:34:f6:b3:7c:93:4a:6c:f7:6d:26:57:
02:64:51:aa:f3:1d:3a:75:f5:eb:1d:92:8b:e7:43:
a3:5e:07:be:d1:b4:ab:d2:77:fb:89:dd:bb:1a:2e:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:67:7A:86:21:9E:C1:DA:21:DF:EE:5C:7E:FB:C0:86:ED:CF:10:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/680d15e7-a36c-3758-9cb4-c1ea5f325659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.crl
X509v3 Authority Key Identifier:
keyid:3C:B7:B0:D2:32:96:28:88:E7:95:B8:8C:13:24:8D:13:9D:CD:6D:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ec4eaab-a927-41c8-b94d-d5dc7ba3d901.cer
sbgp-ipAddrBlock: critical
IPv4:
216.229.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:d4:1a:86:ce:67:88:bd:c2:b5:f8:b3:f1:de:ce:62:fa:bc:
a7:9b:47:3e:49:b6:ef:1c:91:d9:d8:c9:9b:83:e9:60:35:f9:
8c:76:05:26:10:ad:2e:29:0a:67:a2:03:69:2b:be:58:fa:87:
62:5c:a2:66:a2:e3:36:61:5a:2c:d6:6c:25:26:49:30:35:cc:
97:15:30:24:f8:62:3c:ba:c4:73:ff:50:48:fc:9c:ce:12:b1:
32:da:a4:52:53:3c:d7:d2:83:65:37:00:48:46:36:a7:62:4d:
49:36:f4:4a:ab:35:a3:fc:84:ea:68:40:23:85:6c:7f:5e:aa:
6b:ca:23:59:32:98:35:3f:e3:9b:bb:1c:01:43:bb:63:3d:8e:
e2:9d:1d:b5:66:4d:50:90:87:9d:09:f5:90:7f:5d:13:20:8d:
46:41:49:00:5d:11:3b:59:ed:f6:6a:c0:d1:6b:f3:48:38:f2:
cf:01:32:07:74:df:6f:0c:4a:4f:39:03:10:b9:12:76:98:71:
f9:3a:33:92:0d:0c:95:84:6b:f7:21:b2:7b:89:c3:91:26:f6:
31:f9:fa:11:f4:f3:8c:75:4c:9a:68:53:4f:85:1b:83:46:81:
d5:cc:18:43:d7:d6:d9:e5:e7:51:9c:ee:f4:ff:9e:44:d7:0e:
c0:f8:1a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:21:28 2025 by rpki-client