Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/808b7872-045b-35fa-8678-b05114fe56d3.roa
File: 808b7872-045b-35fa-8678-b05114fe56d3.roa (raw, json)
Hash identifier: w1isSeyCxd3iW96pcqOoHiyMNjd5GDBsQuf4J/j8DwU=
Subject key identifier: B4:DA:74:C6:0C:FC:E9:E5:2A:1C:05:30:CB:E5:8C:24:28:3B:AF:34
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858484C10316FCEABC4F1BCA27240
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/808b7872-045b-35fa-8678-b05114fe56d3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 13576
IP address blocks: 216.249.202.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:31:6f:ce:ab:c4:f1:bc:a2:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0f340c89-330a-4ab1-9aa0-0329eb12c042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:60:f2:d7:b4:78:21:bd:9d:3d:08:1b:69:b4:
d5:70:63:8c:81:1f:0e:05:4a:bb:3d:bf:1c:c7:5f:
36:9b:dd:88:3f:d1:72:7b:ae:75:33:18:0b:76:47:
2f:f9:3e:ff:27:fd:6d:ec:03:9f:51:ac:f6:9d:a5:
87:6e:79:55:72:83:b2:a1:02:9a:4c:20:21:d4:4c:
df:b7:21:bc:fb:c1:8d:ab:ef:74:8e:e8:42:8e:4e:
55:96:fd:5d:6b:c1:46:5b:45:29:78:7e:58:01:a8:
e1:cf:c4:59:23:51:8f:c5:6c:67:34:69:e0:cf:1e:
c2:a2:79:12:cd:fb:1e:db:71:96:56:b2:fb:b4:8b:
9e:56:99:6a:bc:b0:1a:63:d5:b7:28:84:90:14:7a:
d2:38:ae:24:0b:85:8d:40:11:c8:7c:55:68:15:87:
7b:47:ce:a5:fe:51:bc:38:29:a1:1f:fd:a4:2a:4d:
b6:1b:38:06:5c:2c:a8:6f:39:4b:72:6d:92:62:31:
38:5c:ce:cd:18:45:3d:ed:9e:1a:62:99:62:bd:52:
63:7c:b8:8e:36:ec:3c:19:60:85:e5:15:44:56:2c:
2d:b7:ea:92:da:ae:e5:c7:13:d0:fc:cd:3a:ba:5d:
a6:73:aa:70:6e:26:0b:5a:39:04:54:ff:81:01:9d:
73:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DA:74:C6:0C:FC:E9:E5:2A:1C:05:30:CB:E5:8C:24:28:3B:AF:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/808b7872-045b-35fa-8678-b05114fe56d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:d6:69:65:93:2d:d3:af:ae:4c:3d:09:35:59:e0:17:9f:b8:
25:41:5a:9a:69:7c:4c:41:ef:de:f6:c0:c8:cf:37:3a:56:11:
be:65:81:c3:31:79:7f:30:c9:19:33:3a:42:5f:55:b5:c7:85:
d7:d0:b4:bd:3b:8c:53:4f:66:d6:61:48:03:bb:20:8b:f3:c9:
e6:b6:dc:5d:c4:e5:29:10:cc:d5:ad:8e:d0:21:e9:f3:f6:bd:
97:b9:b4:11:66:17:e6:54:a1:4e:df:e1:30:85:7c:12:a5:a3:
d4:ca:2f:6c:56:ec:67:27:83:b1:bb:6f:40:7b:78:59:7c:b2:
b1:85:a7:2d:ab:05:a0:8d:a7:83:6c:2e:5d:1e:c1:cd:52:66:
0e:fb:a1:d2:3f:9c:8e:ee:7e:7a:80:38:cd:fc:98:1d:63:2b:
53:5b:45:31:cf:0a:17:19:7b:db:11:d5:72:49:c0:5e:cc:ea:
1e:05:7a:6c:23:bb:e1:c6:2f:f7:69:3b:fd:35:92:be:a7:d2:
a3:d3:e9:05:2f:5b:6a:c8:1a:19:e8:2d:3b:15:96:32:b3:d3:
e8:19:b5:67:ad:66:10:9a:65:74:22:13:63:c9:d8:82:33:51:
53:26:40:e2:84:a3:78:7c:71:f2:73:98:a4:60:c1:91:fe:e7:
95:9c:02:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:31:04 2025 by rpki-client