Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/d402ec43-9e08-3318-b9b6-cce578a54cb9.roa
File: d402ec43-9e08-3318-b9b6-cce578a54cb9.roa (raw, json)
Hash identifier: Q3UUjbcz7PbUkdvXw1+PkF7a3K089IddQSqzS9h955U=
Subject key identifier: A2:94:1E:92:BB:10:5B:D7:9F:01:A1:EC:74:5D:30:84:0C:01:FC:A2
Certificate issuer: /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial: 010D0C9F4328584845157374E39F6A58F6057D80
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/d402ec43-9e08-3318-b9b6-cce578a54cb9.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 16509
IP address blocks: 216.24.225.0/24 maxlen: 24
216.24.226.0/24 maxlen: 24
216.24.227.0/24 maxlen: 24
216.24.228.0/24 maxlen: 24
216.24.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:73:74:e3:9f:6a:58:f6:05:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=35306de2-d155-4f56-92ec-010260c459ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:c9:4e:41:ea:78:68:6b:9f:df:70:9e:f0:
66:5d:1e:0d:44:96:b9:e8:a5:b7:04:65:98:b9:9a:
a0:e2:f6:f2:9d:22:e6:44:f8:49:3c:20:0f:cd:86:
33:d9:dd:0c:30:16:5d:76:5f:07:a8:25:fc:92:98:
07:8d:4b:f3:02:56:b0:12:25:ce:88:79:46:11:7a:
0b:ba:e0:63:a5:f7:49:9e:56:cd:51:0f:66:20:2d:
a4:78:06:03:24:5a:a6:0b:1b:94:03:10:ab:a4:b3:
1a:ee:b9:77:42:13:b7:93:1a:73:e7:c7:db:69:d7:
d4:e4:17:1e:42:3e:4e:14:e7:ac:3c:eb:0c:1b:8f:
df:7f:26:d0:16:20:51:bd:ca:47:94:67:e4:0b:9e:
f4:72:41:be:f6:ed:3a:07:75:f1:80:0a:46:30:a8:
bb:fe:86:81:8c:7d:9e:dd:a9:0a:ba:52:2f:03:ec:
10:52:d4:3b:11:b5:bf:b7:d7:70:f2:bf:6f:aa:41:
59:b4:96:2e:3d:e5:3a:95:03:24:90:1c:74:17:97:
16:66:6e:69:2f:66:61:ac:cb:7a:e2:ff:97:f7:1c:
a7:e3:ee:21:78:4c:44:76:a3:b0:85:00:c1:90:4c:
eb:0e:53:5d:a9:53:42:2d:53:23:ce:d4:93:4b:46:
bd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:94:1E:92:BB:10:5B:D7:9F:01:A1:EC:74:5D:30:84:0C:01:FC:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/d402ec43-9e08-3318-b9b6-cce578a54cb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl
X509v3 Authority Key Identifier:
keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.24.225.0-216.24.229.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:c8:5a:60:12:bc:7f:ea:5f:eb:b8:0a:9b:27:44:01:cb:dd:
df:98:30:e6:8c:d9:b2:2b:3f:7f:b0:8d:04:62:93:9c:2b:5d:
48:51:fa:0e:ac:f8:6b:63:8d:03:1b:7d:d3:aa:e7:e9:5c:69:
08:b2:b9:6f:12:ba:71:92:42:6b:93:5a:1a:de:03:e7:8c:ba:
51:95:3b:ac:e7:91:36:ac:ae:e2:a9:68:e3:80:67:83:ae:eb:
22:2d:4f:70:23:9e:19:1d:0a:92:09:43:e3:6b:e4:cb:b6:4b:
86:50:11:07:8d:5a:80:76:6d:1f:da:16:41:06:72:36:66:d1:
f6:dd:8e:6d:4c:57:90:25:ab:05:e3:94:df:17:b9:cb:22:0d:
53:ff:e6:b2:34:05:80:38:44:ae:7e:7f:f5:4d:b0:67:8f:98:
88:ab:40:69:49:f5:84:21:75:1e:80:46:49:7e:20:90:ab:6e:
98:af:05:b8:39:93:d3:57:37:57:ea:63:e4:5b:06:e2:c1:df:
b9:aa:e6:80:16:f6:f1:a2:e1:b3:92:04:51:d3:2f:83:d2:53:
dc:a1:f6:f5:d2:f3:ad:48:46:b5:8d:64:c1:a5:64:52:bf:e6:
3e:24:07:8a:d4:4a:4d:e6:b6:c6:7e:b7:14:64:0b:f7:36:c0:
05:b4:d9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:45:05 2025 by rpki-client