Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/9f9d0501-22bd-376b-b30c-a963ff6b3407.roa
File: 9f9d0501-22bd-376b-b30c-a963ff6b3407.roa (raw, json)
Hash identifier: 31MYdntcoxLtqYFW3E+nSd8wB99hHwhu5Nylf34OZ5I=
Subject key identifier: E4:C1:16:D6:ED:F5:D1:DC:84:4E:9B:16:CD:95:39:B1:04:69:9C:B2
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858483B50023F5BF53747D2659B00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/9f9d0501-22bd-376b-b30c-a963ff6b3407.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 17025
IP address blocks: 159.18.250.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:02:3f:5b:f5:37:47:d2:65:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=15e12a77-3d5e-47a9-9593-b5462ade64ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:84:6f:98:7c:58:3e:02:61:4b:78:b0:74:
6c:61:37:03:63:50:3e:56:e1:4a:2b:cf:4c:d6:fd:
3f:20:53:73:27:e7:52:33:3c:87:43:0d:84:9a:5e:
98:be:76:40:05:76:66:87:bd:bb:cc:38:94:9a:0d:
c3:1e:f7:eb:12:58:5e:8b:6d:85:01:eb:8b:c1:be:
36:34:46:22:d7:cb:59:d8:50:37:48:8b:b7:30:25:
6b:2e:ad:ef:18:46:24:2e:75:f7:43:49:16:43:f3:
a5:08:e6:a8:b0:6e:7b:81:d9:e5:dc:41:d1:a5:63:
6e:21:90:ec:6a:ff:b0:a4:ee:0f:67:1e:68:3e:4b:
64:0d:33:13:50:5a:66:ae:bc:81:fd:b8:ea:77:c0:
24:4d:bb:b3:9a:db:46:8e:90:5f:7b:0f:ce:3c:e4:
4e:e0:8a:97:b5:2f:0f:a0:bf:f1:d7:57:96:98:ec:
2f:a9:81:49:ab:c9:a3:45:29:5d:d3:bc:ed:10:59:
da:82:e0:0a:f4:d4:a8:c2:0f:68:5a:e0:93:de:17:
12:05:70:2e:b7:18:12:2c:55:58:94:77:a0:db:fc:
2e:c2:00:a5:52:38:ef:e1:db:7b:54:86:8d:82:e0:
30:d9:bb:b7:71:7f:e9:94:27:23:0c:85:d9:92:17:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C1:16:D6:ED:F5:D1:DC:84:4E:9B:16:CD:95:39:B1:04:69:9C:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/9f9d0501-22bd-376b-b30c-a963ff6b3407.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
159.18.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:4b:52:f9:c2:de:cb:be:82:3d:3c:98:94:c8:22:a9:f6:10:
81:f4:06:e8:84:3a:94:04:ce:ec:c2:27:eb:d6:56:3c:03:5a:
95:4d:23:b0:3a:ce:fd:54:6e:fd:8a:48:31:ef:a1:6a:58:22:
5a:23:49:c4:2e:ff:de:30:24:8b:53:08:01:07:14:d3:46:c5:
3b:83:7e:29:31:c6:e5:0c:9f:c8:e5:a4:8e:a1:25:7c:f1:31:
c6:53:26:a5:f1:89:28:00:8f:aa:af:4f:91:f3:58:50:03:fd:
10:85:b3:19:2c:89:36:0b:e1:b4:df:9f:7a:d9:7e:c8:aa:84:
f5:64:85:5f:fb:54:94:4a:58:a9:04:37:88:f3:6e:2c:82:fc:
f3:9b:86:83:99:d8:77:58:74:fd:b3:d0:4a:a8:e1:f1:1f:cd:
08:8a:46:a4:4d:d9:3a:0b:45:40:1a:1e:f9:3c:8e:04:8e:c1:
a0:b2:ef:c7:ec:b4:00:56:f3:ea:70:de:78:f8:56:ab:7f:0b:
ad:98:bf:2b:a4:01:8a:0f:41:65:da:a2:d6:ad:6e:6c:e0:b5:
d9:df:ac:f8:2b:52:57:74:86:34:bd:e4:43:2e:82:c0:3c:bd:
64:94:04:75:de:4a:24:04:1e:cc:c9:85:cf:74:15:0b:70:fa:
53:c5:9d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:05 2025 by rpki-client