Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ed91c2f-e660-358f-8205-7d3850ec790b.roa
File: 5ed91c2f-e660-358f-8205-7d3850ec790b.roa (raw, json)
Hash identifier: yQKxE9PHUNzsArQ+PnjWSAoGMpqG090P8KjXcHRXm9o=
Subject key identifier: 11:5E:8F:19:E1:75:14:D6:32:3F:D6:ED:D1:A9:0B:01:75:A9:82:92
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F056346DB5CF51237F2300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ed91c2f-e660-358f-8205-7d3850ec790b.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 100.16.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:56:34:6d:b5:cf:51:23:7f:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=e9542b1d-1ab5-4ebe-8e3f-d1a37e944954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c4:e2:6c:52:e3:e9:73:28:3a:bd:8a:6c:5f:
e9:a6:2e:04:ed:c7:4d:d2:55:23:5c:65:dd:3d:3f:
2e:30:0f:71:c0:fa:b2:3a:2b:a9:d9:b9:32:84:f2:
24:fe:0e:2e:f2:e5:19:be:31:38:50:6c:26:d0:7b:
86:d1:2d:14:cd:aa:d9:f0:a8:88:ae:bf:24:1c:1c:
24:ff:11:6a:f6:2d:95:0a:cc:ba:e6:32:bb:76:54:
aa:f5:81:23:13:11:62:8d:b5:8c:fa:b7:c3:1f:46:
e4:28:01:73:e4:56:12:ff:82:5a:d6:91:2b:97:95:
93:c0:86:74:40:ad:4e:35:4a:ad:ec:9f:de:65:23:
bd:12:5b:28:21:32:a6:f5:9b:30:88:79:f4:15:1b:
42:b0:31:49:17:fd:1c:c9:5e:72:6d:c6:a6:68:3c:
54:1f:ff:bc:d6:3c:da:db:e7:12:03:b2:e4:fa:f0:
db:87:9c:b0:5b:74:bf:93:3a:e2:99:c8:e2:7e:40:
64:49:c1:aa:5f:e1:b6:5c:4b:46:6a:47:8d:61:e6:
a2:b3:a6:96:7f:a9:59:2d:c3:6e:0b:64:87:49:60:
f2:a6:e1:6a:9a:dc:4a:f9:88:7d:e6:1e:2f:77:52:
cb:cc:60:d3:4a:99:d5:37:06:fc:57:63:7f:c8:ed:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5E:8F:19:E1:75:14:D6:32:3F:D6:ED:D1:A9:0B:01:75:A9:82:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ed91c2f-e660-358f-8205-7d3850ec790b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
100.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:67:e1:8b:a6:c0:ad:09:e9:f6:d1:34:e1:3c:fa:59:8d:63:
65:7f:c6:98:46:fd:8f:ea:c7:f2:6c:a2:41:d0:f2:d7:4c:ae:
d0:6b:12:f1:31:3b:b0:bb:b4:f5:0b:26:d4:2a:32:99:07:0a:
0c:27:a4:f2:23:8e:46:c3:90:32:af:99:21:af:44:cd:d5:d0:
a7:83:eb:f6:5a:20:c4:52:18:80:f4:48:00:31:dc:86:62:a4:
75:a8:52:92:80:94:d3:59:a0:0f:27:15:69:81:d5:85:5d:bc:
1a:20:e3:15:5b:1c:6e:06:b1:6d:f2:fc:25:76:83:73:32:7c:
fc:c0:75:19:b2:8d:90:6f:a9:bc:df:59:c3:c4:3b:60:e4:51:
d9:c4:e4:1c:7e:24:d2:12:48:14:70:b5:18:d5:91:74:e3:ba:
4f:00:73:b4:67:56:49:51:80:c0:55:07:72:e8:26:8b:e7:c4:
b5:0e:d5:ab:bc:66:31:3b:57:0d:4e:2e:43:7e:f3:a6:ae:94:
db:06:7e:46:5e:4a:b5:00:65:f3:b4:1c:1c:d8:e5:d5:2e:82:
80:24:1f:2c:3e:a4:b1:64:b9:8d:cf:6c:a6:0a:f4:17:1a:07:
00:05:e5:a5:49:34:77:21:47:4e:7b:ac:ab:a1:9e:ad:8d:8d:
8b:97:4d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:17:49 2025 by rpki-client