Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/7b44d906-481e-39c1-8a54-23b40220e02d.roa
File: 7b44d906-481e-39c1-8a54-23b40220e02d.roa (raw, json)
Hash identifier: +tGz+1a9Wpiytq6KfDCLxZt22LQcLKrqOi2HNl3v5J0=
Subject key identifier: 91:41:74:E0:3A:0F:1A:E7:6C:5D:A6:27:F3:11:3A:0E:34:49:A4:04
Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial: 010D0C9F43285847FF4A4D119931A95B9C168790
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/7b44d906-481e-39c1-8a54-23b40220e02d.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 16509
IP address blocks: 216.24.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:4d:11:99:31:a9:5b:9c:16:87:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=0292e1a7-c632-4527-b2bd-6f0a0ca427c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:b3:87:09:c5:15:07:5f:1b:51:a1:47:ee:
e4:c8:a5:9d:56:39:03:bc:b0:f6:41:33:46:5d:c0:
77:ce:10:e7:5f:86:00:90:d6:04:f9:0e:08:d5:3f:
c1:aa:9c:d6:b0:35:14:44:82:d9:eb:b4:01:d4:68:
21:f5:4d:00:ca:2a:e7:b1:1a:31:f7:41:6a:6b:63:
da:0d:c9:80:b7:13:2a:0a:5e:05:98:d8:98:ab:29:
72:b0:26:fc:c9:19:47:1a:29:d6:6c:20:5a:d3:ff:
36:8b:be:cf:82:f0:59:9c:a7:84:c5:62:35:bd:0b:
4d:6e:6b:80:cd:02:a1:cc:e9:ee:56:24:08:70:80:
21:b5:af:1f:b1:8b:bc:b6:9c:7b:fc:4a:8b:70:73:
ff:01:4e:37:70:90:e9:0b:93:08:49:51:8e:5b:b4:
4d:50:e5:ae:62:a6:23:5b:92:ef:8c:58:ef:f7:65:
6f:33:21:b6:8b:a4:b6:80:ab:05:30:82:93:f6:59:
08:54:8d:ee:e2:2d:01:6d:f1:27:4e:7e:5a:46:fa:
d9:32:13:69:b9:e9:40:74:7b:1a:17:51:bb:55:a1:
67:fc:a8:74:cb:70:0e:78:da:ad:a1:3c:eb:18:2f:
e6:9b:98:ed:b1:f9:ec:81:e7:30:4b:63:47:3c:a4:
50:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:41:74:E0:3A:0F:1A:E7:6C:5D:A6:27:F3:11:3A:0E:34:49:A4:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/7b44d906-481e-39c1-8a54-23b40220e02d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
X509v3 Authority Key Identifier:
keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:f7:af:a6:44:ef:30:44:32:f9:36:60:4a:39:3b:a1:26:6e:
f3:8f:d1:66:eb:cd:8f:b4:e0:fc:b9:8c:87:eb:a4:72:20:c8:
52:b3:fd:57:89:27:cf:1b:52:5f:30:97:c3:02:f8:dc:6a:c0:
be:87:1e:a1:88:fb:e2:ba:8a:bf:02:a6:cb:8c:c8:38:41:e5:
ef:2c:86:9b:8e:3c:8c:96:53:49:a5:9a:7b:42:00:e4:7a:cb:
95:48:3f:a1:81:82:9e:70:df:9e:94:44:28:41:fd:06:bf:39:
14:53:00:08:ea:84:f9:34:da:08:0a:85:ab:a1:21:63:f9:8c:
1e:11:fe:cb:81:6a:b1:4c:66:7d:b7:29:0e:70:c3:63:37:0e:
8a:c0:36:54:0b:e3:8b:a6:ba:91:b6:93:a0:f5:78:6b:99:d8:
59:88:87:6b:02:b3:91:fb:cf:98:99:15:45:7e:22:f3:b4:2b:
09:1c:c6:92:ea:a9:2b:5b:de:c0:ff:91:77:c5:99:37:e8:66:
59:f2:20:0e:da:39:82:f5:81:87:10:cd:b5:95:21:3e:b1:23:
58:ab:86:4c:c8:f7:bc:d1:68:8b:b2:75:2d:3e:b0:3a:d7:d6:
8e:da:80:dc:85:95:37:20:df:60:ec:d9:e3:df:e2:56:68:cd:
43:8a:7a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:28:06 2025 by rpki-client