Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ac8cc015-54cf-38a5-9942-d0efbb85759d.roa
File: ac8cc015-54cf-38a5-9942-d0efbb85759d.roa (raw, json)
Hash identifier: ycu//n7lcLVh9+KWU6cgGej2Jp6+ruJloRoiTOFryV0=
Subject key identifier: EC:CB:EB:4A:6A:5A:C4:A6:CC:44:5E:C6:AA:B2:BE:4F:CE:B8:C2:C4
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F43285848573AD4110CCA55638FB69100
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ac8cc015-54cf-38a5-9942-d0efbb85759d.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 13576
IP address blocks: 216.249.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d4:11:0c:ca:55:63:8f:b6:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=cc546295-a0b7-4419-a8ee-bb7cc4ec736b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e8:d4:4e:26:92:49:78:f5:f6:01:43:bf:ec:
9b:bf:05:7c:a8:e2:79:a0:08:1b:77:2f:e3:48:74:
12:a6:71:33:21:3a:ab:d9:4b:3d:d5:39:6a:94:57:
4a:b8:05:63:c8:07:52:0a:60:56:6a:3d:6f:a6:d1:
4b:e1:50:d1:7b:e5:04:d6:66:02:0a:24:1a:ef:40:
36:e1:0d:90:f2:a7:0a:0a:3f:48:ed:8a:50:ff:42:
36:67:9b:14:0d:16:47:20:e9:fe:bc:35:8d:41:6b:
59:70:a4:4f:58:58:20:13:3e:34:c3:60:de:6e:ac:
29:2e:24:eb:eb:1f:46:20:2b:43:56:81:2e:63:54:
ad:75:93:f8:68:10:5b:0b:50:28:d5:91:c0:16:3e:
1d:80:1e:f6:a8:e2:11:e8:b1:47:49:ba:7a:5e:d8:
7b:bd:cb:13:11:de:e3:1f:23:f9:ca:5e:9a:a0:db:
34:6c:be:b7:5c:49:3d:38:4f:36:e0:48:d2:0f:99:
26:de:c3:56:44:37:21:b3:df:34:cb:ec:dc:5f:8d:
58:fc:b9:88:c8:4f:34:1c:9a:90:57:db:11:b3:a1:
88:79:91:3f:b8:b6:cb:d2:c8:ec:dd:88:6b:87:8d:
3a:05:c7:8a:d0:20:f7:44:07:da:c6:1a:d0:0c:e2:
69:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CB:EB:4A:6A:5A:C4:A6:CC:44:5E:C6:AA:B2:BE:4F:CE:B8:C2:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ac8cc015-54cf-38a5-9942-d0efbb85759d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.249.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d7:63:c2:95:32:c2:b1:e3:83:04:66:b9:e3:a6:0e:72:b2:f2:
7e:0b:8f:c3:7b:52:90:25:ca:9f:86:7a:03:3d:a7:be:0c:36:
58:64:ba:25:d3:f0:9d:bd:af:6e:f8:1d:8d:f0:34:79:31:87:
44:09:97:58:1b:b7:0e:9b:bc:45:0f:ad:b9:f8:7c:62:7c:fe:
ad:cb:a4:b5:f7:6e:d8:7e:ff:53:b3:5e:01:ca:73:8b:41:b1:
15:a9:d9:43:0c:b7:ff:1d:b1:e3:5b:21:23:b7:ec:92:4c:ab:
0b:24:ea:ed:59:df:10:17:0c:ba:0e:13:3c:b3:8d:ae:a4:32:
e0:44:f0:2e:17:cd:28:9d:17:63:59:b2:f6:a4:8c:48:69:75:
7f:62:d2:fc:ed:7e:9d:a0:49:d4:a6:37:f2:1d:2f:b5:f6:0e:
71:d5:ae:b9:43:ed:29:d0:3d:e7:98:d4:39:6d:bb:64:be:57:
53:f8:1f:c7:6f:dd:ab:26:07:bd:74:a7:5c:24:d7:4d:71:97:
06:08:1c:51:d1:a8:1d:e1:4e:09:75:34:28:fc:8c:2f:31:b8:
a4:61:10:c7:57:d7:d7:15:e4:79:27:2d:d5:67:78:d4:6a:39:
a4:ee:cb:6a:f3:1b:b3:7e:42:39:88:68:5b:61:2b:42:6b:5c:
ff:6c:a0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:22:49 2025 by rpki-client