Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/058d050d-5248-3ecc-92f5-1d246c951ea5.roa
File: 058d050d-5248-3ecc-92f5-1d246c951ea5.roa (raw, json)
Hash identifier: PPaEJTfctNSHlSnv5YA87ClmdHrS0dQbZYiTwvZWPXY=
Subject key identifier: D6:E1:11:CD:AD:56:27:4F:6A:5D:8E:4E:C5:0F:66:E0:CC:BB:1A:CB
Certificate issuer: /CN=30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6
Certificate serial: 010D0C9F43285848705AFC8BC6B026FDBF90F980
Authority key identifier: F5:C7:2E:43:ED:3E:D6:D8:2A:96:2A:ED:5B:43:17:B2:26:28:60:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/058d050d-5248-3ecc-92f5-1d246c951ea5.roa
Signing time: Sun 05 Jan 2025 02:00:39 +0000
ROA not before: Sun 05 Jan 2025 02:00:39 +0000
ROA not after: Sat 05 Apr 2025 01:00:39 +0000
asID: 26804
IP address blocks: 216.153.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:70:5a:fc:8b:c6:b0:26:fd:bf:90:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6
Validity
Not Before: Jan 5 02:00:39 2025 GMT
Not After : Apr 5 01:00:39 2025 GMT
Subject: CN=cbb9d5b8-2376-4b46-a8ad-e2b65ca0f8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:8d:43:68:57:07:4a:91:e4:0b:59:e0:62:
50:1a:5c:08:84:95:ba:1a:f2:dd:aa:c5:12:7f:e5:
95:cc:fe:af:65:d1:54:47:81:c3:92:94:78:3f:c5:
df:e4:14:d7:eb:f8:ab:8f:af:36:ac:54:07:38:9c:
4b:02:c7:62:ee:3e:7f:92:e3:ae:cf:07:64:01:a1:
ff:6a:80:94:c7:31:1b:ec:a6:09:e8:21:a4:05:36:
7d:3e:d7:46:b8:ad:93:66:8e:9e:92:ec:c9:2c:8a:
2a:e5:5e:40:f2:b2:13:36:c8:14:01:e7:c5:b8:d3:
1b:3e:f1:51:6d:d2:b7:65:b5:e2:0d:b2:12:49:a4:
43:1a:cf:01:84:58:24:40:8f:1d:ee:da:c1:31:60:
7c:a4:7a:c0:42:0f:69:c4:42:d6:dd:a3:d7:a1:0c:
3f:77:0f:73:05:b3:e6:a5:78:c9:ad:24:90:de:35:
67:80:52:10:ec:34:5d:09:02:f4:92:79:ca:83:c2:
8e:e0:8e:2e:14:63:82:ca:bf:0d:6d:e7:aa:56:5c:
1f:15:ce:ca:eb:7c:ad:60:88:7c:41:52:c7:82:71:
e2:f2:41:97:b1:00:ee:32:6c:f6:58:7c:02:18:32:
cc:c2:29:55:97:97:4d:92:e3:cb:ff:a4:70:54:a4:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E1:11:CD:AD:56:27:4F:6A:5D:8E:4E:C5:0F:66:E0:CC:BB:1A:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/058d050d-5248-3ecc-92f5-1d246c951ea5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.crl
X509v3 Authority Key Identifier:
keyid:F5:C7:2E:43:ED:3E:D6:D8:2A:96:2A:ED:5B:43:17:B2:26:28:60:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/30ce2cec-2622-4f61-8eb7-95f1a4a9b1e6.cer
sbgp-ipAddrBlock: critical
IPv4:
216.153.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:14:7a:1f:6b:97:73:6a:b0:8e:62:29:ac:c8:65:65:a1:2c:
ab:8e:7d:ff:02:0f:00:fc:b5:ea:de:a6:f8:af:8b:d2:fc:4f:
af:bd:73:5e:55:32:0e:80:4b:c3:58:5d:0c:d8:0a:c8:5e:85:
70:23:5c:86:54:59:2d:c3:73:7d:30:b1:f7:c7:41:5b:32:7f:
40:7f:7a:ba:2d:26:69:17:a8:44:71:78:2b:04:11:46:64:aa:
09:26:b1:d0:8d:9b:71:41:54:8c:27:21:e8:63:c4:1a:d2:2e:
ea:fa:c9:df:db:0b:fc:8a:c1:37:b4:49:b1:dd:2f:dd:c8:4b:
68:0f:cb:ca:db:be:68:f5:a3:d2:af:69:f2:4c:2c:2b:2f:ca:
4a:cc:09:3c:6b:94:be:25:14:a3:ef:a2:8a:4b:34:22:9b:a1:
56:87:8d:16:08:fe:4a:ba:b5:43:8c:2e:fd:5b:23:ac:f4:77:
f1:6b:a1:db:cb:a4:9e:83:06:61:d9:7d:e9:ab:15:02:d0:a1:
f7:d0:77:c0:ec:1f:54:05:ed:da:58:4c:05:27:bb:a3:16:3a:
57:9d:9e:94:3d:a6:b2:94:9a:d5:81:e5:f4:ad:fb:39:79:1f:
5f:b6:7b:7a:30:9a:25:6a:68:b7:c8:75:6a:05:39:24:c5:e6:
ac:ef:f7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:43:36 2025 by rpki-client