Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/f70e090b-3e20-3bb7-aa11-cb1155ff8999.roa
File: f70e090b-3e20-3bb7-aa11-cb1155ff8999.roa (raw, json)
Hash identifier: Mu1q7hGyJHyqKSnu3YJZrVLF+FVFmtQxMHb+L96W3BQ=
Subject key identifier: FD:A5:3C:BF:7C:C5:8F:AB:E7:C7:11:89:5F:7E:95:9A:F9:CC:5A:3B
Certificate issuer: /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Certificate serial: 010D0C9F432858487CEB341977B65A5BD6632F00
Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/f70e090b-3e20-3bb7-aa11-cb1155ff8999.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 26284
IP address blocks: 216.250.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:34:19:77:b6:5a:5b:d6:63:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=cdd860ac-01d8-4f2c-b6c2-d769c0ed665c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:2c:d8:bd:83:3c:e8:85:9b:89:77:a6:c1:
b1:68:b9:5e:85:75:59:f7:0d:1f:45:56:42:c0:23:
2a:ce:e2:48:08:59:16:cd:41:72:34:e6:63:31:95:
d4:2f:35:85:37:c1:39:83:5f:b9:e5:1b:59:2b:40:
da:50:ef:2d:8f:23:70:9a:c9:32:15:52:98:2f:eb:
01:1e:c7:51:93:6d:58:9c:5d:07:30:28:bd:20:c2:
a9:1f:7a:db:30:ab:01:fa:ca:68:5c:0c:89:d1:68:
bd:08:c8:9a:48:44:16:10:40:ba:47:52:4b:ed:f3:
e7:04:5e:18:13:0b:09:b7:81:c1:a5:10:30:a5:bc:
7c:4d:06:33:84:b9:79:ec:ac:7b:9a:dc:60:42:3d:
54:a4:56:39:c6:90:49:55:6f:79:3a:6c:8a:67:85:
9a:5a:e7:d7:50:03:69:b9:57:d8:4d:d9:54:22:bc:
fe:65:8f:00:58:a7:08:1b:c0:b6:ff:18:2f:c8:3c:
54:21:56:78:36:34:7b:a6:c2:12:f9:e8:48:39:4f:
50:9d:dc:c5:cc:5c:91:26:42:e2:70:a3:6b:7d:24:
4e:b4:d7:db:33:57:54:59:13:c5:5a:2c:61:97:53:
92:32:43:e6:47:e6:0c:6f:22:87:1c:fc:5f:c2:49:
27:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A5:3C:BF:7C:C5:8F:AB:E7:C7:11:89:5F:7E:95:9A:F9:CC:5A:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/f70e090b-3e20-3bb7-aa11-cb1155ff8999.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl
X509v3 Authority Key Identifier:
keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
sbgp-ipAddrBlock: critical
IPv4:
216.250.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:7e:dc:51:b7:81:ed:f0:f0:fc:b2:23:88:c4:d0:1e:33:83:
ce:2d:b9:c7:ce:a6:50:f8:c9:ba:64:4e:52:6b:d1:ff:f7:ca:
5b:e9:08:cf:95:38:a3:d2:a9:1a:9b:cd:cf:d6:1b:3b:b6:09:
a5:61:a1:20:1e:e2:99:25:50:9a:39:35:ac:f7:9e:b7:b5:e5:
5d:01:0b:77:c3:40:6a:26:dc:90:79:cb:01:ee:bb:84:05:c4:
26:77:e9:b3:ec:98:43:2d:db:9d:7e:21:49:e9:7a:31:01:bf:
af:b6:95:6f:39:2a:72:8c:18:00:32:b2:76:7a:b6:4b:34:1c:
1a:09:f7:3e:ff:3d:4d:07:a5:3c:ec:e5:e0:09:9b:38:57:ad:
b5:29:31:ea:32:41:9b:20:b7:8c:df:6d:ba:90:6b:9d:b3:79:
ad:33:14:f5:42:f0:06:46:4d:7c:96:74:01:cb:a3:1f:37:b6:
4f:a3:58:9d:67:db:4a:10:bc:d4:05:6e:0d:99:91:65:25:f3:
16:c8:7a:c4:20:97:d7:ea:d3:d8:79:31:3d:89:f5:da:07:d5:
16:3d:22:ab:38:bd:df:59:f0:c5:42:56:5f:e0:bf:8e:4b:05:
e2:6d:d8:97:c0:b7:1f:9c:71:19:c3:3e:f6:6e:69:49:17:b6:
dc:d6:22:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:34 2025 by rpki-client