Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a6adf6f3-ea92-3b78-8de5-14ff86212b00.roa
File: a6adf6f3-ea92-3b78-8de5-14ff86212b00.roa (raw, json)
Hash identifier: KL/KHGS5ycs4JOuMnUL74/8wo6PswvxYk5giAQQ4Mik=
Subject key identifier: 2E:56:0C:0E:F0:DD:7D:FF:C9:52:FA:FC:C0:72:72:49:95:62:A8:FE
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858483B5006620AA02DEE9070E3E0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a6adf6f3-ea92-3b78-8de5-14ff86212b00.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 15290
IP address blocks: 209.146.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:06:62:0a:a0:2d:ee:90:70:e3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=1667c322-7202-4eee-88b3-08c525e0fefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:98:c7:43:62:e6:61:cb:16:e0:46:24:9d:bd:
61:14:03:51:33:fe:fa:a2:81:40:e1:e9:2a:0b:c0:
16:82:6b:3b:e8:46:ad:71:b2:47:dc:d4:6d:b0:32:
b6:e2:1c:68:f4:d2:52:41:5e:1d:d5:8f:d0:3c:97:
05:1b:ee:2c:e3:4c:91:ff:4e:08:58:56:af:30:93:
a7:ab:c8:3b:49:f3:c4:4b:1c:b3:e7:cb:db:e4:e5:
6c:f3:5c:45:8b:b3:14:e9:e7:3e:fb:71:5d:17:42:
61:8a:43:b6:7e:33:9b:f1:c6:60:47:ce:fd:65:99:
1b:62:0c:04:d7:f0:08:9c:48:83:58:a9:58:ac:62:
df:04:b0:4d:e4:4a:9e:e0:76:89:91:c2:8a:02:76:
7f:8c:03:a8:3a:b9:4b:cb:33:bf:0c:fa:40:b5:5e:
16:b1:d1:bd:3a:15:3d:b0:73:93:6b:0c:c7:e7:14:
40:b7:77:b2:b5:1c:35:68:c6:33:ac:f8:23:c3:60:
6d:c5:7b:ba:50:ea:06:c5:4f:8a:29:5d:8e:d9:13:
d0:86:3a:91:01:a6:0a:05:a2:cc:08:92:1d:cd:75:
b2:3a:e8:8d:e5:15:aa:43:63:7f:b0:03:4b:aa:21:
ab:15:20:c2:0e:22:21:d7:1a:76:02:de:3a:75:5b:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:56:0C:0E:F0:DD:7D:FF:C9:52:FA:FC:C0:72:72:49:95:62:A8:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a6adf6f3-ea92-3b78-8de5-14ff86212b00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
209.146.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:12:1a:eb:f6:22:f7:6e:33:36:53:e6:8c:44:c6:b7:58:8e:
d2:be:31:22:20:cf:41:b3:cb:af:4a:2b:d2:c5:a1:ad:12:20:
30:9c:05:66:95:35:ce:c0:24:32:63:41:7d:90:9d:ac:8f:f2:
5f:8b:3d:be:74:70:15:bb:36:f3:b9:de:a0:c6:72:6c:b1:b6:
c5:00:fa:64:5d:3a:45:3d:bf:4f:51:ae:3d:a7:db:79:17:3c:
1c:ad:93:3a:d6:49:ad:fe:aa:66:87:e9:d7:74:b4:8d:a2:73:
10:91:63:47:a8:72:5c:71:75:0a:c0:ba:11:56:30:58:62:cd:
4f:e9:ed:a8:e9:d8:e2:ce:60:a2:34:54:d2:00:cc:70:19:de:
0b:82:7c:f5:f6:0e:9c:ba:9f:d1:06:df:1e:dc:82:6c:c0:be:
48:73:65:cb:9f:2d:86:ed:88:f3:48:06:cd:ac:36:fe:23:c9:
a6:2b:5e:70:c4:70:2c:b7:d7:28:b9:00:f1:5f:c9:71:dc:82:
b8:c5:f8:fb:ab:5a:c4:6e:74:9f:f8:8b:41:5c:cd:99:3c:44:
ab:9b:f5:4d:73:61:47:70:22:60:84:f4:35:21:95:71:49:2d:
f5:81:bb:16:d6:5e:03:d9:e1:56:4d:cc:d1:75:f5:93:9c:4e:
7f:41:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:45 2025 by rpki-client