Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ae766c58-45e2-3b4f-897c-d52aded9706a.roa
File: ae766c58-45e2-3b4f-897c-d52aded9706a.roa (raw, json)
Hash identifier: iXmlfCDtiC2Q9rhpcBB9Cyw0dKmYS7krA60dJEiZV10=
Subject key identifier: C2:DB:84:21:C8:C0:2D:0A:75:C0:8A:41:14:3F:7B:18:75:13:19:A2
Certificate issuer: /CN=6dabfd0c-f982-470b-a430-b95c3c76868d
Certificate serial: 010D0C9F43285847ED24C0A9B5ECFED484512840
Authority key identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ae766c58-45e2-3b4f-897c-d52aded9706a.roa
Signing time: Tue 19 Nov 2024 02:00:27 +0000
ROA not before: Tue 19 Nov 2024 02:00:27 +0000
ROA not after: Mon 17 Feb 2025 02:00:27 +0000
asID: 20101
IP address blocks: 216.18.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ed:24:c0:a9:b5:ec:fe:d4:84:51:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dabfd0c-f982-470b-a430-b95c3c76868d
Validity
Not Before: Nov 19 02:00:27 2024 GMT
Not After : Feb 17 02:00:27 2025 GMT
Subject: CN=8fc69f65-c3f2-4b36-b514-3666188ac814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:19:62:0d:ef:da:c9:08:91:c7:64:82:e7:
53:70:ea:0c:35:4e:5e:3d:ed:5c:92:ac:62:75:a1:
6b:0c:e2:3d:b2:de:25:a9:e2:73:d2:7d:91:e1:25:
d9:d0:18:0d:fc:67:bc:98:e7:db:39:83:b6:ce:6e:
c6:d3:b9:52:cf:5a:5d:a2:01:f1:79:20:48:32:8b:
ba:c4:2f:05:c0:3b:91:20:2c:e2:df:05:c6:ef:8a:
63:92:0c:f3:e6:1a:1a:4b:86:c0:a5:a5:1f:69:b9:
e8:cf:14:34:d6:c6:d7:3c:bb:54:bd:1b:f0:38:2b:
20:d3:26:bb:0e:f9:6e:b7:18:1f:ea:62:21:74:06:
cd:20:fc:c1:20:8e:c5:6d:07:ab:8f:0a:e6:f9:68:
d4:b8:0c:b6:59:44:fe:e7:14:ee:09:eb:5f:4e:b0:
39:0b:76:35:74:38:2f:3b:fa:e9:2c:84:9a:a9:13:
68:77:e3:56:7b:a3:a1:61:68:90:ec:33:6d:f6:96:
c1:59:bb:27:40:96:d9:84:4e:e4:e2:d5:33:6e:ee:
6d:85:cc:b5:92:e9:72:6d:26:a7:22:26:1a:7c:e0:
2a:b4:f3:c0:92:6a:28:6b:c8:20:c2:d8:5b:da:0d:
3a:d3:bb:da:dd:46:d0:51:09:90:c3:46:bd:85:6e:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DB:84:21:C8:C0:2D:0A:75:C0:8A:41:14:3F:7B:18:75:13:19:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ae766c58-45e2-3b4f-897c-d52aded9706a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl
X509v3 Authority Key Identifier:
keyid:70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
sbgp-ipAddrBlock: critical
IPv4:
216.18.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:09:02:b1:f0:21:1f:dc:2f:2b:dd:f2:6d:c9:2d:02:fd:0a:
aa:3c:e0:1f:0e:3f:ca:71:ca:fb:96:24:2e:f7:c4:73:a8:9d:
b9:c6:f2:a9:0d:3f:b0:f0:02:14:43:92:bd:92:50:83:14:a6:
20:d4:a0:ae:48:28:07:83:fd:76:db:e3:0d:36:aa:ad:cc:9a:
3c:e7:67:a4:28:6a:af:ec:a9:55:36:6b:d5:ab:21:98:cf:80:
f4:d3:cb:49:9d:c8:ef:04:44:63:0d:57:2d:f8:31:41:ad:a0:
30:6d:9f:dc:6e:fb:4b:ad:c5:81:a1:55:14:22:1e:0d:d4:af:
ac:ff:2d:51:0d:ec:3c:eb:83:d0:b7:b9:42:61:05:06:62:fb:
d6:ea:87:5b:d6:5d:14:54:f9:ff:7d:2c:40:d2:22:fd:de:22:
c1:d6:d0:cf:ca:69:cd:d0:82:42:8e:c9:3e:c9:ff:cc:b1:51:
99:62:89:4a:f7:b6:56:76:27:c2:cd:8c:28:29:75:b7:af:ca:
eb:ae:0a:29:32:1c:06:2a:80:bc:32:12:07:6b:14:e8:5c:72:
de:82:50:2f:39:1c:f3:97:f2:ff:e6:50:5c:e2:ba:5b:3c:f1:
92:05:30:a9:c3:c3:b5:14:e3:eb:6d:5c:6e:f4:b1:f1:06:e4:
5c:aa:cc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:33:18 2025 by rpki-client