Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa
File: fb067586-180b-31bb-9e56-5603dfecf409.roa (raw, json)
Hash identifier: jB9T+nCBIYnvmly2kbCatPsOct7ZY5MKay53XjlRq0E=
Subject key identifier: F5:D6:45:24:C3:D2:03:B7:75:C7:62:8E:35:F0:00:C5:27:3A:6C:19
Certificate issuer: /CN=3be78fcc-c9b8-439e-ad7c-f03e1ec7a147
Certificate serial: 010D0C9F43285847EF7AB0BC0D516D6BD6361000
Authority key identifier: 10:73:8B:3D:05:8A:EF:0A:25:25:80:26:59:13:8D:A9:13:A7:49:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa
Signing time: Tue 19 Nov 2024 22:05:21 +0000
ROA not before: Tue 19 Nov 2024 22:05:21 +0000
ROA not after: Mon 17 Feb 2025 22:05:21 +0000
asID: 401408
IP address blocks: 216.181.130.0/24 maxlen: 24
2602:f7c8::/40 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ef:7a:b0:bc:0d:51:6d:6b:d6:36:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be78fcc-c9b8-439e-ad7c-f03e1ec7a147
Validity
Not Before: Nov 19 22:05:21 2024 GMT
Not After : Feb 17 22:05:21 2025 GMT
Subject: CN=b16e072d-6b71-4f22-b8f4-ede4bd040cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:43:a2:2f:a9:3c:fa:f1:b3:25:e3:6f:60:6c:
da:15:5e:38:f5:a0:5b:a7:d8:74:17:36:3c:bb:14:
99:4a:6d:5f:98:70:3a:e5:de:45:78:5d:39:66:e3:
10:0f:0f:8a:29:94:b3:fa:5c:bd:ee:c0:5d:5b:0a:
a8:a1:7b:99:4a:72:23:2a:de:bc:76:67:b8:2c:bd:
a4:89:6c:21:e1:79:b1:e8:6f:f3:d1:a7:50:78:27:
a0:ce:1f:44:64:d5:bd:84:9c:33:99:0e:60:79:7b:
f7:67:9b:01:32:c3:23:37:d6:f2:c8:20:e1:99:d6:
f0:d1:cf:27:da:f1:c8:8b:cb:d4:09:d3:e4:bb:60:
00:6e:fa:72:74:4f:0e:9f:3f:40:36:c8:90:1e:a1:
b1:81:67:cc:c6:e1:33:64:b0:94:97:27:0c:d1:7c:
5a:e9:fc:5b:d2:03:37:ed:ba:fc:8c:78:68:e7:e1:
ad:57:12:9d:97:d7:81:7c:27:27:fb:eb:fc:b1:6a:
8f:bb:db:a1:8c:68:3a:aa:7d:a1:3a:b7:61:6e:bb:
4a:15:8f:7d:03:7a:8c:20:66:86:04:4f:55:50:a9:
26:d8:19:1a:53:dc:df:e9:b4:b0:67:86:30:28:7a:
0d:b1:81:88:ea:ad:6f:07:f6:47:fd:99:46:4a:c3:
20:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:45:24:C3:D2:03:B7:75:C7:62:8E:35:F0:00:C5:27:3A:6C:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/fb067586-180b-31bb-9e56-5603dfecf409.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.crl
X509v3 Authority Key Identifier:
keyid:10:73:8B:3D:05:8A:EF:0A:25:25:80:26:59:13:8D:A9:13:A7:49:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer
sbgp-ipAddrBlock: critical
IPv4:
216.181.130.0/24
IPv6:
2602:f7c8::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:d7:29:b3:ca:95:3a:4c:a1:30:72:2e:b0:02:0d:35:37:95:
2b:9d:99:c4:4e:d0:0e:6f:5e:80:b5:6a:08:29:aa:02:b0:24:
8d:26:ce:d3:2f:5c:25:02:3c:19:ad:ab:9a:1e:98:5a:ba:fd:
e7:2f:4d:44:ab:8d:cb:4c:de:9f:16:31:15:f1:77:41:4a:a1:
79:c1:64:fb:ed:0b:0d:3b:b6:c0:f9:b9:95:db:6f:ea:55:5e:
f8:ea:cb:e2:0e:94:ea:07:45:68:57:f6:1a:43:58:ac:95:d2:
cc:75:53:45:b7:c7:75:62:bb:3e:c1:17:8e:df:bb:33:3e:66:
90:aa:18:14:45:33:92:6e:5f:af:73:a8:b9:66:e6:ac:76:93:
6f:15:e3:44:c5:d7:23:47:1b:54:ac:46:2f:67:0f:c4:1e:ee:
44:f9:d6:1a:ba:35:d9:04:96:b2:6e:2c:16:0f:1c:4d:c7:ca:
f0:9c:cb:05:a4:68:85:90:c7:09:32:c2:3d:32:a5:0c:79:d5:
b0:c2:b4:91:ad:3b:af:6f:b9:92:36:62:20:b1:e4:fd:21:2a:
74:f1:e4:d9:88:93:47:d7:6a:2e:4b:9e:40:02:59:fd:98:be:
0c:06:5a:a6:31:a7:3a:bf:f5:00:d3:48:50:75:69:37:d6:c5:
9f:35:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:42:29 2025 by rpki-client