Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/65f587e2-c8b1-37da-aeb6-58b6f18dfff7.roa
File: 65f587e2-c8b1-37da-aeb6-58b6f18dfff7.roa (raw, json)
Hash identifier: fXgY1LlDOjYyq7ufNq35Fm2tL0EaZciYp7Ye0+duW6Y=
Subject key identifier: 42:54:5E:65:94:10:58:EE:C0:AB:33:89:F8:1C:CA:C3:CA:39:41:E6
Certificate issuer: /CN=f6676d9c-ad8e-4829-af9f-b27b749d7759
Certificate serial: 010D0C9F4328584800AFC9A0B431B92CF7862000
Authority key identifier: 04:20:31:CD:0E:01:C3:3C:B4:BC:20:32:D9:48:93:A7:96:EE:D8:5F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/65f587e2-c8b1-37da-aeb6-58b6f18dfff7.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 14380
IP address blocks: 216.151.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c9:a0:b4:31:b9:2c:f7:86:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6676d9c-ad8e-4829-af9f-b27b749d7759
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=64d944e7-9cdd-4ad1-8ef9-8626e88e5dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:e2:1f:ae:e4:7e:a7:c9:6e:38:d8:3e:6c:
44:17:71:02:e5:9b:48:8e:74:59:d7:ca:a5:d6:03:
e9:fc:6c:84:bd:97:10:6b:24:12:3a:73:9e:5d:7f:
1b:e9:bc:f9:54:f1:0f:ac:a8:5a:44:61:c3:94:44:
50:fc:59:46:8a:30:9c:46:13:af:ae:14:ed:6a:16:
c9:e4:e9:58:60:23:ed:98:33:cb:52:49:19:6f:c3:
1a:49:23:6e:f6:79:31:77:61:5b:87:d4:24:45:04:
37:5d:44:4c:65:e8:73:69:5d:96:54:44:d2:f2:75:
3d:bc:99:af:c8:ae:68:80:6e:59:fe:dc:11:cd:47:
c3:73:1a:e1:56:cb:b8:a2:18:57:1e:f4:27:0f:8d:
10:b3:ce:bf:59:c8:6b:9f:86:73:7a:62:bb:db:96:
22:c0:08:e4:d0:bc:c1:d4:08:6d:2d:04:e1:ba:cb:
bd:ce:67:00:59:e4:19:bc:92:12:62:d1:17:0a:73:
5d:57:4f:fa:a9:e4:f2:55:d4:d9:63:b7:e5:23:39:
cb:bf:d0:ac:d6:58:c3:92:1e:4c:35:04:bd:d5:03:
9a:a7:30:90:72:3d:fc:29:a7:34:ba:c1:f4:f2:8d:
11:84:b5:90:4c:a6:e9:71:bc:31:d8:32:2a:39:91:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:54:5E:65:94:10:58:EE:C0:AB:33:89:F8:1C:CA:C3:CA:39:41:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/65f587e2-c8b1-37da-aeb6-58b6f18dfff7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759/f6676d9c-ad8e-4829-af9f-b27b749d7759.crl
X509v3 Authority Key Identifier:
keyid:04:20:31:CD:0E:01:C3:3C:B4:BC:20:32:D9:48:93:A7:96:EE:D8:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f6676d9c-ad8e-4829-af9f-b27b749d7759.cer
sbgp-ipAddrBlock: critical
IPv4:
216.151.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:43:22:c5:95:bf:04:35:60:22:10:2d:b1:1b:b4:29:0e:ef:
b0:b9:4d:f2:bf:58:d1:ac:a2:81:c4:12:58:35:46:fb:c8:22:
68:97:cf:b2:0b:70:32:11:36:30:42:2a:d8:02:a8:77:6c:a8:
30:63:6d:bb:8b:5f:0d:50:1d:b2:6c:d9:fa:c9:16:8e:0e:7f:
04:8d:1f:c7:c2:98:9f:a3:b9:e9:31:e5:b9:bc:25:17:4c:7c:
80:ed:1f:de:7f:c6:7a:63:2c:2c:31:93:4f:1d:88:ad:d7:db:
0a:1d:c4:ea:9a:33:90:9f:46:36:eb:92:b9:22:36:e9:2b:ab:
51:95:05:81:35:f1:0c:94:ab:9b:74:d9:3a:1d:38:be:26:38:
35:cd:57:d6:7c:3f:b7:1d:b9:3d:ac:09:8d:49:88:ed:f7:d5:
68:4a:78:db:ef:8c:f9:8a:7c:b5:b1:10:c0:4b:fc:43:5a:69:
e5:7f:8e:6b:5b:c7:e6:31:da:6e:5b:c1:47:e6:e3:a0:b8:52:
5c:fc:64:28:7d:6a:1e:74:51:ff:f2:c0:0d:52:a4:bc:13:5b:
16:15:bc:26:cb:42:8c:ec:51:a3:b3:c9:0c:fb:a7:ba:68:51:
92:61:93:eb:2a:d5:b8:c3:ec:96:18:57:f4:fd:19:ed:dc:ae:
29:4b:40:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:49:48 2025 by rpki-client