Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/894271a5-6122-33fb-9751-fa39952c5cb2.roa
File: 894271a5-6122-33fb-9751-fa39952c5cb2.roa (raw, json)
Hash identifier: TrUCSSfl1aDTsO53ted+39uZeFF/05xKUsBgWuLTQxY=
Subject key identifier: 3D:38:01:81:BB:A5:6E:BE:44:6C:F7:0C:F8:E0:B2:1F:B4:3D:E2:2A
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584855D59E2BE8A0CB7282066900
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/894271a5-6122-33fb-9751-fa39952c5cb2.roa
Signing time: Thu 26 Dec 2024 14:00:52 +0000
ROA not before: Thu 26 Dec 2024 14:00:52 +0000
ROA not after: Wed 26 Mar 2025 13:00:52 +0000
asID: 13576
IP address blocks: 216.249.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:55:d5:9e:2b:e8:a0:cb:72:82:06:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 26 14:00:52 2024 GMT
Not After : Mar 26 13:00:52 2025 GMT
Subject: CN=b6f33a20-7d34-4c98-9609-b25ea92c4f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7e:99:7e:2e:1d:0f:3a:fe:01:48:32:ea:99:
e9:34:f7:f5:54:33:d5:b8:97:96:6b:8e:52:ff:e4:
a6:8a:5c:85:60:1c:8b:b1:c8:d9:5c:c0:2d:98:b8:
6c:de:1c:dd:7b:ef:e3:84:1c:89:75:35:fa:a0:aa:
28:e8:b0:37:5e:43:e2:c1:b5:a5:8c:04:b5:f2:48:
87:a2:ed:25:29:9f:5d:98:d1:ae:0e:f4:d2:cc:2c:
73:44:49:db:6b:bb:64:3c:94:46:b1:1a:55:c7:a4:
f0:22:5b:25:e6:7b:55:a8:79:f6:43:52:6b:56:aa:
d2:0d:37:a0:ca:e2:b8:cc:dc:31:8e:d8:36:96:ac:
35:23:c0:b5:ee:96:5b:db:d1:c3:b2:08:c2:be:1e:
25:eb:e5:b1:44:2c:1d:c4:d5:f2:07:03:f6:3c:33:
c5:f5:32:35:f9:64:02:4a:6e:20:c6:9a:8c:b0:2e:
c5:f1:17:b0:d0:2a:7b:cf:ce:d8:5b:63:b5:01:f7:
60:e1:b5:a0:d3:27:42:5a:9f:56:8b:cc:d2:b2:cf:
56:dc:a3:0a:11:08:36:0a:40:2f:ff:33:a3:da:8e:
a9:a2:2e:fc:dc:45:5f:b1:87:60:e5:55:dd:77:40:
8c:d8:01:5f:39:fe:d6:5d:58:f9:35:3b:ba:9a:66:
77:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:38:01:81:BB:A5:6E:BE:44:6C:F7:0C:F8:E0:B2:1F:B4:3D:E2:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/894271a5-6122-33fb-9751-fa39952c5cb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:c6:5c:bd:e6:38:0a:b3:e5:24:cb:20:bc:84:ae:d8:94:cf:
1d:80:16:d9:e0:3b:2d:03:75:04:73:e4:88:6f:11:9d:df:84:
33:41:71:cd:50:a0:06:30:dc:cd:44:94:cd:9f:bd:68:c3:d3:
88:4b:96:99:68:04:ef:d3:6f:dc:31:0c:ad:2e:62:d4:a4:99:
b8:e2:19:0f:bf:da:8e:5f:54:82:e3:1e:17:6d:c5:9f:d0:0a:
11:16:e2:e3:6a:f8:ca:b7:05:47:88:a2:26:df:f3:05:1a:9a:
db:48:5b:ec:d1:d1:b3:94:5e:d2:6c:e5:43:3b:37:38:f6:f0:
4b:ff:57:41:8b:32:b5:49:cb:30:67:01:3e:bf:2a:2d:1f:ef:
a2:3e:3f:1c:d0:bf:d8:fb:11:44:de:81:4c:35:d9:07:48:62:
0b:89:af:d1:f0:b6:e9:2f:14:67:36:d5:c6:f9:a9:ed:f7:43:
53:eb:54:74:55:f7:ed:5d:a0:e8:75:87:c8:36:e6:f7:0e:8e:
3b:5d:c2:a5:cd:d9:29:ed:b4:18:f5:71:16:66:7e:0b:d7:8a:
31:03:26:9f:d6:80:c9:6c:30:93:7d:a0:c9:47:56:ac:d3:b8:
d3:62:c6:08:1a:bd:87:be:8d:44:c3:3a:ac:bc:be:81:8b:3d:
06:71:de:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:27:58 2025 by rpki-client