Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dd0038fd-a4c2-3a59-9086-4ec612213489.roa
File: dd0038fd-a4c2-3a59-9086-4ec612213489.roa (raw, json)
Hash identifier: nZnD47jiORvXXEeMMIa+J9xgsucGiZkf+lygu8Dtgng=
Subject key identifier: 4D:CF:48:24:63:ED:09:AA:7C:BC:E4:FB:CE:D6:7C:04:B0:CD:8B:2C
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F432858488E23778205751F79664EA580
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dd0038fd-a4c2-3a59-9086-4ec612213489.roa
Signing time: Wed 15 Jan 2025 18:03:08 +0000
ROA not before: Wed 15 Jan 2025 18:03:08 +0000
ROA not after: Tue 15 Apr 2025 17:03:08 +0000
asID: 18785
IP address blocks: 216.106.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:8e:23:77:82:05:75:1f:79:66:4e:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Jan 15 18:03:08 2025 GMT
Not After : Apr 15 17:03:08 2025 GMT
Subject: CN=97c18da1-0e47-4a83-85f8-1ec130d39fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:4f:60:83:1f:38:7c:5e:cc:ce:f3:46:ca:
e7:ce:d2:75:10:f2:5b:bc:3d:fc:10:0d:46:0e:cf:
06:08:43:9b:9e:47:a3:3c:ad:98:9c:ef:40:01:b9:
ff:e3:98:d5:6c:fa:14:5c:75:f2:5d:a0:e4:7a:c3:
5d:72:f1:5f:a3:13:83:49:01:25:6b:94:ec:74:b9:
ac:d9:2e:e6:97:b9:8a:f0:2c:31:a1:5f:f2:d5:46:
fa:0f:af:b6:5a:fe:7f:fa:31:e4:e4:e4:1b:79:a3:
04:f0:35:1c:2b:a5:69:0c:4b:c9:2a:cc:c8:8d:fa:
6f:60:a6:48:53:82:b4:2f:bc:b0:03:07:d0:ce:a1:
23:7c:6b:57:46:c4:64:18:83:30:7b:68:81:cf:e5:
89:2b:2d:91:34:5f:b6:05:28:85:74:4a:c4:46:db:
c3:6d:93:e4:4a:a8:cf:92:f5:f1:5d:2d:64:64:d5:
f6:9d:5b:91:09:43:d4:cc:f5:12:a9:7a:e8:dd:fb:
33:bb:22:c3:93:30:25:91:c6:6c:47:fb:1d:00:18:
e1:0a:22:f1:fa:b5:2b:9d:8e:d3:06:ce:c9:57:13:
78:f8:ed:3b:0e:95:34:5e:18:cc:79:82:77:f8:14:
12:7a:a2:ae:69:67:b4:60:87:ee:54:b2:bd:77:a3:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CF:48:24:63:ED:09:AA:7C:BC:E4:FB:CE:D6:7C:04:B0:CD:8B:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/dd0038fd-a4c2-3a59-9086-4ec612213489.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
216.106.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:24:5e:e3:34:fb:88:a4:87:19:6b:8e:45:9a:41:d9:08:56:
63:08:5d:d6:96:96:32:de:c0:12:0c:91:8c:1f:66:b5:05:80:
90:18:ca:3d:03:bc:c6:dd:01:f4:9b:4f:7d:25:ed:46:96:55:
1c:4d:53:3e:d3:13:60:95:54:ad:0e:89:0d:d8:7f:72:b9:6a:
0a:d2:a5:01:6d:1e:02:fe:cb:08:a9:e0:96:63:5c:78:18:d6:
18:45:1b:c2:b0:31:dd:1b:74:56:0a:d0:d2:ea:2c:f9:da:46:
07:d4:06:b4:54:0f:f3:ec:d7:d9:38:f9:c5:16:6f:10:53:21:
ca:7c:d0:86:71:01:7d:ad:b4:b5:21:48:72:a7:8e:37:1c:22:
49:f3:66:78:61:b3:92:69:49:ea:0f:3b:39:fb:1e:e0:a1:4d:
1f:c0:0f:57:c6:a3:5f:bd:37:af:89:6f:41:1d:3b:2d:2c:94:
28:69:9e:85:24:c4:28:d0:b8:65:bb:94:91:06:fd:5b:17:88:
93:d8:cd:c2:88:58:28:e7:05:9f:27:de:40:1f:8a:29:02:ec:
d5:a2:0f:ed:f3:a7:40:19:0c:ad:93:b8:b8:3d:ad:1a:10:c0:
45:78:80:65:37:f5:cc:46:5b:53:c5:d5:5d:08:3a:91:a8:ca:
f0:03:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:03:08 2025 by rpki-client