Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/db8ec9a1-e76c-32c3-a365-98369a226dae.roa
File: db8ec9a1-e76c-32c3-a365-98369a226dae.roa (raw, json)
Hash identifier: wzjXkdNVQUQL2DhAfbSG9CeBtfLQhfReL6+AVZXtm5o=
Subject key identifier: D4:9E:D4:58:6F:6D:77:4F:61:FD:8A:C0:7C:15:67:11:DC:84:DB:2F
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F43285848424AE11D13EDB433CC6A0B40
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/db8ec9a1-e76c-32c3-a365-98369a226dae.roa
Signing time: Thu 19 Dec 2024 14:00:52 +0000
ROA not before: Thu 19 Dec 2024 14:00:52 +0000
ROA not after: Wed 19 Mar 2025 13:00:52 +0000
asID: 6461
IP address blocks: 209.153.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:42:4a:e1:1d:13:ed:b4:33:cc:6a:0b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Dec 19 14:00:52 2024 GMT
Not After : Mar 19 13:00:52 2025 GMT
Subject: CN=80aab89e-201b-42ec-a8a1-97420f99bfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a4:3b:d2:67:1d:05:df:ad:19:e2:d6:b2:c7:
28:fc:74:9b:07:5e:5b:23:22:af:ae:ef:79:b2:97:
83:41:e0:83:31:f7:46:02:85:ff:77:63:60:c4:cc:
67:07:e8:f0:97:f1:00:d9:36:46:0e:2e:2d:63:b4:
e3:98:58:4d:52:79:b4:8e:98:47:45:8c:43:e4:0b:
8a:a8:dc:27:d2:88:87:5d:2d:cc:12:db:4f:6e:1b:
64:e3:db:b1:d4:f5:83:72:93:9b:75:53:c8:63:51:
29:f9:d5:16:43:a0:7a:a8:b5:c0:2e:af:7a:b2:04:
c4:3d:96:f3:1b:8c:3f:6f:e9:1e:87:4e:9c:4b:8f:
4c:da:73:fe:48:8f:61:42:d5:4e:b9:bf:86:d8:f9:
52:ad:33:77:cb:5a:bc:1e:0a:4b:1b:af:d0:12:32:
2a:4c:59:8e:18:18:8c:b3:8c:3e:dd:b7:ed:96:51:
93:ef:09:d6:b2:7e:79:26:5a:b4:af:86:25:93:2d:
8b:48:b3:f3:0d:3d:6f:e5:e9:3f:1c:71:38:6a:8d:
f9:c9:e3:0d:8a:85:2d:a3:ee:44:3f:7c:5a:23:9f:
fd:f2:b5:ef:0a:8f:d3:97:03:d2:79:bf:92:f7:89:
83:ec:45:45:29:4a:b6:1b:26:9f:70:0c:c0:f4:cc:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9E:D4:58:6F:6D:77:4F:61:FD:8A:C0:7C:15:67:11:DC:84:DB:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/db8ec9a1-e76c-32c3-a365-98369a226dae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
209.153.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:30:94:c6:8b:64:4c:69:8c:8f:03:a7:18:ec:be:54:c7:1f:
53:d7:6d:fb:88:7f:22:b6:8f:b3:18:aa:9e:78:dc:ba:fe:0f:
59:90:49:ab:bc:d8:0b:24:1d:50:25:2a:f1:a2:f7:a3:4b:30:
0c:21:31:ec:71:45:a2:52:cf:96:cc:3b:d9:00:98:60:da:c7:
7d:22:b4:dd:d2:00:19:45:6f:2f:29:13:40:86:76:cf:3e:fa:
ea:1d:24:4e:90:40:59:b6:00:1d:3f:9e:0d:a5:ae:fe:ca:0b:
30:1b:22:5c:e6:17:09:01:2b:f7:2e:9a:90:33:6f:3e:06:81:
62:88:45:20:a0:e1:71:5d:47:1c:19:f3:47:78:4d:95:2c:98:
9f:8b:38:c7:60:fc:5f:5c:3f:11:20:ce:d3:ba:11:03:9f:29:
00:12:7b:a9:fd:05:1b:66:77:94:6e:af:c5:22:93:0e:6d:93:
24:83:e1:c7:13:ec:7f:3a:d5:29:23:0f:a8:74:96:fd:03:11:
64:7e:1e:6e:e6:b7:86:7e:82:21:db:8f:84:f8:76:cb:4c:63:
bf:23:d5:54:80:4d:e9:c6:89:4c:81:6e:e5:01:a9:5d:78:45:
2a:02:aa:a7:af:e9:ed:bb:41:fd:da:12:bb:d0:0b:3b:e5:32:
2b:7d:b2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:49:03 2025 by rpki-client