Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/485b245a-e6e4-3551-b9b0-cdd124cb0285.roa
File: 485b245a-e6e4-3551-b9b0-cdd124cb0285.roa (raw, json)
Hash identifier: IrxWXO3qumnfFciuxP2gonqGpEwdTDooGKWjmuEk6+Q=
Subject key identifier: 52:A6:90:95:D6:37:FA:D7:F5:A7:28:2F:01:41:D9:AB:63:F2:29:C4
Certificate issuer: /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial: 010D0C9F432858483CB5691C06EC40AE25E71FC0
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/485b245a-e6e4-3551-b9b0-cdd124cb0285.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 6461
IP address blocks: 216.211.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:69:1c:06:ec:40:ae:25:e7:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=e4448bbd-ba1f-414a-b97f-ed838fa0f2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:12:ab:a9:82:a3:9f:a8:dc:e6:37:f8:9b:72:
d4:25:5b:0c:1e:df:7a:7f:1e:e5:bb:86:f7:1e:0f:
0a:7e:3a:1a:52:22:cc:f3:24:c2:2f:d1:c4:8e:79:
9d:03:35:7b:17:9e:96:68:95:65:44:e7:84:af:0e:
90:b9:65:c5:44:47:06:48:3c:bc:35:dc:f4:4e:2c:
a0:84:ef:11:17:eb:0f:df:07:9e:75:44:1d:a3:ce:
d6:44:1d:30:2c:08:bc:6e:61:87:1c:33:bf:87:0e:
01:e8:fd:d3:00:15:8c:f5:b7:9b:c3:14:84:7a:b3:
78:e1:69:6b:bb:ce:5c:dd:ca:ae:02:11:21:0d:a4:
22:17:59:3f:7a:c3:9c:75:25:35:26:43:40:ca:22:
e6:fb:d9:99:ff:89:02:f7:0b:bc:f7:76:3c:4f:06:
72:4f:76:37:f2:71:05:6b:89:df:25:4f:c0:9c:0c:
29:29:7b:4d:11:c6:cb:0c:6f:a9:93:ee:ae:a2:54:
d3:97:0b:71:4e:0e:55:a1:41:91:da:78:b9:0a:f1:
78:83:21:46:2e:20:29:38:43:05:89:02:29:65:bd:
b9:d7:df:c1:e7:ee:0e:d3:c6:a0:85:de:86:df:99:
72:56:bf:64:d9:63:bd:7f:3b:69:f3:c2:8b:89:e2:
50:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A6:90:95:D6:37:FA:D7:F5:A7:28:2F:01:41:D9:AB:63:F2:29:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/485b245a-e6e4-3551-b9b0-cdd124cb0285.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl
X509v3 Authority Key Identifier:
keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
sbgp-ipAddrBlock: critical
IPv4:
216.211.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:89:5a:18:26:5f:10:ee:b0:43:55:07:d0:8a:6f:ca:d9:f7:
f5:f5:22:33:54:18:71:b5:9f:f6:a3:e8:86:e4:8c:df:e5:45:
16:5c:28:7d:33:56:09:4f:ad:98:c7:30:f3:cb:c1:fb:30:30:
a5:4a:0f:d2:be:21:ff:5d:de:b4:fd:c1:13:e0:39:1d:12:42:
1a:ea:7e:93:71:cb:18:a5:18:c7:35:f3:f1:57:9e:9f:3c:cb:
ac:4c:39:84:55:eb:59:b8:b8:91:88:75:2a:23:dc:11:b4:ab:
d4:14:b2:49:7f:75:a1:b7:af:e3:49:ed:37:dc:ed:f0:a3:ce:
62:c2:ad:06:fd:29:c8:63:d4:35:7f:85:a7:ac:bb:84:39:e0:
ce:8f:a4:df:eb:8d:07:83:d2:13:7a:12:75:b1:4e:43:76:a1:
45:1d:da:2a:f5:f5:ff:67:94:ed:60:56:c7:ae:8a:bb:bb:db:
61:db:53:03:13:73:57:db:7e:1f:3b:dd:81:49:3e:2b:21:9f:
18:8f:53:38:a5:61:07:b3:57:5e:01:f0:9f:76:9e:b3:9c:d8:
37:b2:f4:77:46:78:0b:6c:61:b2:a0:cb:45:cf:64:52:c3:81:
84:a8:3c:ae:c7:98:ac:da:f4:a4:9f:f1:8b:d2:04:8e:77:b6:
5c:b4:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:16 2025 by rpki-client