Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/6dd2c7a8-1f04-3246-85e7-d51cac05cae8.roa
File: 6dd2c7a8-1f04-3246-85e7-d51cac05cae8.roa (raw, json)
Hash identifier: NWBJLiV/6bnQBQrX0QTldt47egMHDXZP8scZkWOhNgg=
Subject key identifier: B8:0B:42:77:5D:84:6A:F6:A8:42:5A:D5:7A:6F:F2:5A:58:1F:9B:C3
Certificate issuer: /CN=2a85302a-1502-4116-b560-4c2d2155f989
Certificate serial: 010D0C9F4328584800AFC99209DCAEEEF6F78080
Authority key identifier: 58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/6dd2c7a8-1f04-3246-85e7-d51cac05cae8.roa
Signing time: Tue 26 Nov 2024 02:00:26 +0000
ROA not before: Tue 26 Nov 2024 02:00:26 +0000
ROA not after: Mon 24 Feb 2025 02:00:26 +0000
asID: 16509
IP address blocks: 216.150.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:00:af:c9:92:09:dc:ae:ee:f6:f7:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a85302a-1502-4116-b560-4c2d2155f989
Validity
Not Before: Nov 26 02:00:26 2024 GMT
Not After : Feb 24 02:00:26 2025 GMT
Subject: CN=947384b3-824b-4d4b-8781-b8d7c9200bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:05:29:96:60:1d:8c:9f:bf:db:49:ba:d1:
40:4e:8a:5d:b8:6b:01:56:7f:b4:53:09:29:c1:0d:
45:67:bb:08:1f:62:48:b5:85:d3:c4:fa:5a:ce:f1:
57:c3:92:12:47:66:57:26:35:d5:f7:3e:0d:b3:06:
b4:7e:55:0c:a9:e0:ee:fb:63:35:83:1a:5d:b7:e5:
a7:e9:41:fa:5a:d5:1f:34:e0:88:1a:78:9e:6a:da:
9f:9d:fe:ec:fb:31:7c:10:37:fe:91:e0:d7:a0:f8:
6d:f9:72:5b:6d:a7:df:80:68:1f:b5:0b:09:9a:0d:
c8:db:f7:a2:76:1e:2f:cc:cc:3d:d7:09:b6:49:4b:
c5:68:39:22:cb:89:d1:bd:1a:ee:43:38:df:14:0e:
5f:dc:67:d1:02:59:e5:4b:56:0b:ca:e9:f2:08:b5:
ce:ee:47:e3:f2:d5:8e:73:de:19:17:47:21:12:15:
72:e2:2b:b8:14:d6:d4:6f:05:00:8f:ef:1c:86:17:
f5:fa:d4:42:fc:6a:8f:25:b6:88:51:3f:3b:66:ee:
46:48:5b:8f:cb:b2:eb:84:54:b8:5b:9c:3f:96:77:
54:29:b2:67:54:64:5b:7e:4e:17:84:4d:a4:09:ec:
da:38:e4:80:9e:f9:4c:12:d4:cd:09:83:a3:51:e5:
7d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0B:42:77:5D:84:6A:F6:A8:42:5A:D5:7A:6F:F2:5A:58:1F:9B:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/6dd2c7a8-1f04-3246-85e7-d51cac05cae8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989/2a85302a-1502-4116-b560-4c2d2155f989.crl
X509v3 Authority Key Identifier:
keyid:58:F1:C6:B6:CC:8A:00:8D:01:C6:21:53:1B:F6:B2:6B:25:F3:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2a85302a-1502-4116-b560-4c2d2155f989.cer
sbgp-ipAddrBlock: critical
IPv4:
216.150.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:ac:0f:5d:a2:07:97:f0:62:09:56:c7:cf:66:45:ab:a9:07:
05:56:5b:09:9a:44:38:be:6a:35:fb:59:f5:f6:c5:35:5f:36:
e1:1d:b2:dd:c1:7a:ca:bc:ba:d4:7d:20:0b:b5:88:a0:3c:91:
f5:9e:1e:1f:53:2e:20:81:01:76:ee:9a:fc:be:7c:85:06:7c:
70:4c:f7:b1:fc:e3:3e:fa:9a:59:2d:e7:1b:e4:be:ac:2a:bd:
59:8c:dd:7a:3a:84:e0:07:a3:42:15:60:c8:d3:61:7b:bd:dd:
ae:dc:be:bb:c9:05:f6:18:69:77:b7:0b:bb:4c:1c:4a:47:8e:
b2:1e:ef:82:8f:b4:dd:78:0a:7d:2d:0c:13:6d:f8:08:35:06:
04:1e:5a:71:47:0c:c9:43:00:3f:6a:34:85:ca:f0:36:eb:2d:
7b:63:f0:19:5d:c4:a8:02:b7:87:2a:46:16:fb:5a:2c:fa:ac:
e4:93:eb:b7:1a:8e:fe:88:b0:c5:bc:a8:b6:d8:8a:fc:c9:b3:
5d:39:91:1c:24:4f:f7:00:68:aa:d5:3b:6e:82:d0:5e:1d:7a:
6b:0d:26:68:57:22:69:0a:95:45:e4:2c:af:4a:0b:d0:a7:93:
01:49:09:7a:04:7a:50:29:9d:f7:d1:28:77:56:21:f7:54:97:
be:c9:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:46 2025 by rpki-client