Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e6a23650-6304-3534-b996-0e4e086b4359.roa
File: e6a23650-6304-3534-b996-0e4e086b4359.roa (raw, json)
Hash identifier: Mg0QNJxqUUYDUWT7xXRBSwoBIBpzNdcy2/vNd424G84=
Subject key identifier: D8:FD:B2:76:78:76:FD:AC:9B:44:8E:7C:B3:2B:34:64:D5:62:3B:6E
Certificate issuer: /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial: 010D0C9F432858483B5000C35816B5AF330D6700
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e6a23650-6304-3534-b996-0e4e086b4359.roa
Signing time: Tue 17 Dec 2024 02:00:38 +0000
ROA not before: Tue 17 Dec 2024 02:00:38 +0000
ROA not after: Mon 17 Mar 2025 01:00:38 +0000
asID: 812
IP address blocks: 159.18.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3b:50:00:c3:58:16:b5:af:33:0d:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
Validity
Not Before: Dec 17 02:00:38 2024 GMT
Not After : Mar 17 01:00:38 2025 GMT
Subject: CN=70a3a6b8-5a4b-4dcb-a048-996e126376e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6c:10:2d:e5:da:33:68:c3:3f:e9:8c:8e:88:
a8:bb:5d:6e:16:37:1a:ab:94:44:86:86:6f:93:44:
f2:00:3f:a3:a1:55:8f:14:66:f5:3b:50:f5:8a:a2:
8d:3e:41:7f:84:9d:d7:6f:ce:b7:64:05:1a:b4:62:
b8:81:f3:83:d0:34:bc:9d:10:11:a0:9d:7c:4f:50:
31:4a:9f:6e:55:cb:47:35:a5:9b:6e:2c:0a:86:39:
d5:de:af:6b:4c:3f:7b:d0:24:99:ec:df:33:c5:86:
ec:80:c8:08:fa:e2:86:2f:6c:ff:7d:60:72:63:d0:
65:9b:a5:ac:a3:fb:c3:0f:f9:36:92:e5:d8:b1:aa:
bd:93:2f:87:d5:8d:79:c2:84:3a:73:f3:27:56:c7:
2c:7c:51:32:cf:b4:e9:2c:36:01:20:bc:b4:24:a4:
39:ae:30:b7:bb:76:f8:f0:f6:92:6d:48:ae:83:2d:
e9:df:0d:8c:ca:ae:ff:fa:42:27:9d:29:1f:75:bc:
42:45:3b:a0:70:2f:32:98:e0:59:db:5a:85:47:72:
c3:3c:77:05:cb:d1:82:71:ad:2b:c0:c1:69:fd:13:
4f:4c:dc:8a:7e:e2:ad:31:40:fc:3a:00:65:32:49:
1b:29:69:78:03:3e:df:6f:93:99:32:ac:5e:49:37:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FD:B2:76:78:76:FD:AC:9B:44:8E:7C:B3:2B:34:64:D5:62:3B:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/e6a23650-6304-3534-b996-0e4e086b4359.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
X509v3 Authority Key Identifier:
keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
sbgp-ipAddrBlock: critical
IPv4:
159.18.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:0c:40:aa:b6:20:a9:7d:c4:ff:53:82:ef:45:a3:07:6f:7d:
6b:94:30:38:e1:9a:0b:fb:6c:3b:38:8f:d5:b1:21:ab:cf:21:
a4:cb:82:2a:64:a6:f1:a3:46:29:e1:15:76:59:24:4f:c9:35:
df:16:c5:3e:01:42:34:ca:1e:b8:0f:51:e5:22:a6:71:4b:73:
03:47:64:54:71:09:b4:4a:fe:81:3c:f9:cd:e1:43:2c:37:86:
de:0f:0a:46:2a:5d:33:80:83:96:e5:9f:a9:77:55:9f:cf:ae:
1f:72:46:32:6c:e4:d0:f4:40:d8:30:7a:31:31:fa:a5:90:e2:
e8:40:16:68:df:15:ac:98:f2:6b:a4:be:f0:67:68:72:6b:b5:
f1:38:99:06:e9:58:26:95:64:de:09:e8:80:cc:0e:ca:17:e5:
23:fc:c8:6b:f3:80:bc:70:5c:25:20:5a:db:8e:e5:1e:bc:64:
d2:a5:f5:7f:f0:1f:ed:1b:57:82:d1:f3:4c:53:7e:8d:63:50:
0a:58:c6:91:2b:78:6f:ad:62:90:cd:e7:43:6b:f8:be:90:eb:
79:02:76:3a:93:dc:71:a9:2a:6c:16:fa:f2:57:7d:55:ae:36:
68:f0:41:be:18:b9:59:26:f5:46:49:2a:b1:45:b1:1b:10:78:
47:28:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:45:55 2025 by rpki-client