Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa
File: 598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa (raw, json)
Hash identifier: 6wyHjW5xQD62PX8yRJafMZHWQDdafp2EA/P2ukKGLA4=
Subject key identifier: B3:5A:EB:C1:7B:50:8F:D9:0F:09:04:65:3B:38:9A:33:AB:A5:C7:10
Certificate issuer: /CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad
Certificate serial: 010D0C9F43285848064501CB9233EE252FE1F1C0
Authority key identifier: 3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa
Signing time: Thu 28 Nov 2024 02:00:38 +0000
ROA not before: Thu 28 Nov 2024 02:00:38 +0000
ROA not after: Wed 26 Feb 2025 02:00:38 +0000
asID: 16509
IP address blocks: 67.221.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:06:45:01:cb:92:33:ee:25:2f:e1:f1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ca81c3-e5bf-48ac-8af9-0d789c35a2ad
Validity
Not Before: Nov 28 02:00:38 2024 GMT
Not After : Feb 26 02:00:38 2025 GMT
Subject: CN=20fa0db4-232d-489b-b3b3-c890730967aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5c:e5:9e:ee:14:7b:71:fb:4a:b2:b5:ec:93:
7d:f3:5a:f0:b8:3c:b0:ce:ef:07:d0:6c:e4:b0:1f:
d4:54:95:fb:b4:3d:db:8b:51:9e:a2:90:18:c4:f6:
0a:96:f0:bd:dd:02:da:11:35:a5:86:75:3a:f3:69:
99:69:22:14:e5:d5:78:de:64:97:ee:97:64:ee:da:
44:4c:1e:ee:d3:16:3d:51:93:83:68:f2:9c:56:9a:
63:05:35:fc:45:b1:fa:7f:ee:f0:c3:b1:bf:f0:51:
75:60:4b:61:5e:3b:87:cc:a1:ba:f0:73:58:ba:24:
d9:cc:2e:12:f4:5f:9b:42:71:02:ef:0b:7f:26:53:
cd:73:86:a2:3e:96:20:11:4f:e8:e3:ab:07:01:f6:
bb:47:4b:1c:87:ad:b9:19:59:61:84:d0:d1:3a:16:
a4:0f:ba:c4:e6:77:e4:e4:b2:42:31:25:7f:b8:f5:
08:9e:78:ad:4c:97:33:be:6d:f1:44:68:ba:c9:9a:
e2:a9:e4:31:46:14:20:c8:76:c7:a0:6c:5d:88:1d:
2e:c0:e9:bc:26:f2:32:f0:26:9d:8a:66:55:89:e7:
f4:6f:68:70:96:d2:cb:ce:d8:c8:6a:b6:50:80:28:
65:c2:9f:87:fa:0e:fa:d2:07:c5:60:f2:c8:ab:cc:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5A:EB:C1:7B:50:8F:D9:0F:09:04:65:3B:38:9A:33:AB:A5:C7:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/598fa9ab-3af1-34d5-90b5-80b9e74b1f7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.crl
X509v3 Authority Key Identifier:
keyid:3A:9B:77:59:C4:B4:2B:ED:89:BA:E0:4E:D2:D9:80:D6:B8:56:6B:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/16ca81c3-e5bf-48ac-8af9-0d789c35a2ad.cer
sbgp-ipAddrBlock: critical
IPv4:
67.221.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:10:d9:87:a0:94:da:e5:72:a3:4e:0e:5d:93:27:da:5e:b7:
82:3c:91:ba:8e:d7:4c:71:03:74:4c:e3:f1:ee:df:39:25:bd:
43:26:f4:72:ff:b2:e4:65:3e:c1:48:4d:de:b2:8d:c6:f6:94:
48:f2:01:b3:6a:0b:08:eb:b6:67:b0:fc:a7:f0:7c:bc:bf:48:
e8:ed:f7:5f:e9:84:76:6c:8f:c1:41:e4:bb:c7:c8:46:e4:8e:
a9:d3:a0:ae:c0:a9:93:46:2b:dd:54:29:a1:96:74:9f:31:7c:
20:af:f1:11:fb:b5:dc:bc:d1:d5:e6:21:0a:4a:ae:18:57:53:
0b:fc:87:d2:e9:53:88:11:84:91:c2:d6:e6:47:73:4b:d9:ab:
db:26:ca:2a:52:16:d1:79:53:cf:0a:f2:51:68:fd:5c:29:70:
f1:8e:f1:a6:0a:ba:65:95:f5:93:15:eb:57:11:7a:25:38:a7:
66:e4:e8:b5:64:5f:d7:f3:79:34:86:44:3f:36:60:bb:5a:3c:
8b:5a:90:64:40:d8:70:53:8d:49:b6:45:ab:ec:5f:2d:d5:68:
a2:e8:ce:34:8e:fd:2b:4c:ec:15:a9:dc:ce:a6:10:9a:83:14:
f3:5f:2d:5c:7a:f0:9a:e7:56:a7:94:3a:7f:89:24:2f:98:db:
02:ed:3a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:41:10 2025 by rpki-client