Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa
File: a976272e-66d4-3404-810a-1db9636b39a3.roa (raw, json)
Hash identifier: Ju6KsgUHzzevR/FfHV1LLtDHHktRRrgv12epk5Zw4p8=
Subject key identifier: 02:3E:E2:1A:38:4E:A1:A2:7A:55:02:FF:39:1A:F9:6E:5B:D2:73:C3
Certificate issuer: /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial: 010D0C9F43285848143A7AD91FED4E33E0977080
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 399628
IP address blocks: 209.237.154.0/24 maxlen: 24
2620:96:a000::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3a:7a:d9:1f:ed:4e:33:e0:97:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=16c3aeb6-8b8b-4a11-9580-7d8937ebde4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ae:f9:e7:72:66:8b:45:f8:78:24:16:2d:8a:
fe:21:b9:9e:55:8c:1b:a1:59:be:01:63:b7:e6:9f:
e5:c1:36:c6:a9:26:00:ff:e5:97:25:3e:d2:ff:a2:
63:ff:f0:d2:80:56:cb:44:df:9c:0d:05:25:bc:be:
eb:9a:d4:32:e2:a6:71:0a:92:71:01:3e:89:f0:df:
a6:6d:b8:32:62:9b:c6:cc:c5:cb:8c:f4:7b:49:4f:
7c:95:f7:30:54:f4:a0:81:30:19:f8:1a:22:20:4e:
bd:80:65:44:9b:86:2b:a3:9d:5a:b4:eb:92:9e:ec:
cb:7a:e5:48:25:49:a3:fa:ec:77:30:34:d2:5d:35:
7b:7c:09:88:06:b8:0e:35:99:35:e7:76:4b:dd:06:
c0:fd:1d:88:00:f8:5f:f2:18:a8:2e:99:ad:7c:39:
aa:f8:28:7e:02:91:03:35:49:e4:84:62:05:8a:89:
9f:3f:ac:ba:9a:a0:a2:d2:80:f3:14:9e:c6:8a:85:
69:d9:aa:1d:4e:a3:90:fe:9f:b0:b8:2c:36:ab:e0:
96:82:00:1d:b3:e1:92:07:4b:1e:64:58:47:7b:26:
bd:21:cf:9e:3e:0d:b8:f5:6a:ba:8f:71:ac:82:ef:
bb:2c:9c:eb:16:3a:18:28:2f:9a:b6:7f:3e:58:bd:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3E:E2:1A:38:4E:A1:A2:7A:55:02:FF:39:1A:F9:6E:5B:D2:73:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/a976272e-66d4-3404-810a-1db9636b39a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
X509v3 Authority Key Identifier:
keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
sbgp-ipAddrBlock: critical
IPv4:
209.237.154.0/24
IPv6:
2620:96:a000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:88:50:df:e7:a8:c0:28:51:e7:39:0c:cb:46:d8:4f:b7:41:
34:99:8f:19:9e:54:45:b7:e8:40:5f:f3:75:7f:f0:ae:d4:2d:
00:c0:f3:f2:1d:0d:d9:f7:a0:bc:5b:f9:d6:77:d1:33:12:13:
9c:81:05:0d:18:de:8f:48:83:ce:eb:e4:d0:a6:64:08:4b:ae:
4a:7e:94:2a:e4:dd:31:17:78:be:cd:a4:3f:75:31:d9:4d:76:
f0:69:eb:4f:3d:ff:ef:85:e3:fa:fa:cb:ec:8b:9f:f9:e9:ef:
88:52:61:dd:b7:da:41:64:8a:43:40:d1:cb:5f:2a:23:af:89:
c2:59:0e:19:da:c8:da:6c:f7:0f:d8:95:cb:24:18:74:8d:bd:
38:63:da:24:20:15:01:3e:28:26:06:a7:d0:34:33:12:47:09:
7d:47:b0:26:ba:e4:85:af:f5:f5:2f:8f:95:d0:0b:e1:54:88:
6e:09:53:6f:7e:5c:20:55:60:b5:67:57:f1:0f:c1:ec:76:59:
c3:1e:9f:b4:3b:31:aa:24:e8:22:1f:a6:d2:1a:43:5f:66:a3:
3a:63:dd:a7:ca:a8:48:32:af:a0:12:c0:9f:e3:ae:f2:d6:42:
de:6b:50:07:83:71:c2:e7:64:a0:0d:1b:79:95:bd:5c:f2:a6:
c7:52:b6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:34 2025 by rpki-client