Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0f7f6459-9a9b-3619-afd9-067a05684fe4.roa
File: 0f7f6459-9a9b-3619-afd9-067a05684fe4.roa (raw, json)
Hash identifier: +sfeY/4rnNV2q8eu/OvVGXiQk+NJIg4KgcZf38OL6qM=
Subject key identifier: 1B:4C:04:B5:D0:4B:39:1E:5D:BA:B6:B1:63:A2:04:A2:12:F8:7E:20
Certificate issuer: /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial: 010D0C9F432858484C10342A06A10517AAF704E0
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0f7f6459-9a9b-3619-afd9-067a05684fe4.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 32482
IP address blocks: 216.82.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:10:34:2a:06:a1:05:17:aa:f7:04:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=d3c095c9-aabf-4317-bb3f-ee83f1313b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:5a:27:97:d2:fb:d5:c6:41:27:ac:75:81:
3b:db:5a:61:b7:46:84:99:cd:ae:97:38:dd:4a:8b:
55:72:3b:4d:5a:0a:da:56:9e:6f:7d:68:0a:25:af:
50:e9:44:6e:32:5c:28:95:58:13:e7:b8:ca:c8:98:
38:b7:34:60:ad:79:2a:13:de:cd:4c:11:86:98:32:
f1:0c:27:f6:20:bb:5a:2b:0b:5e:03:63:c4:34:60:
af:d8:cf:9f:79:2b:17:6a:25:1f:70:17:d4:4e:1c:
b4:91:ea:a6:04:5c:87:af:ee:5f:38:3d:50:9f:17:
06:02:e6:e1:37:50:d5:79:37:df:e2:af:05:26:50:
c6:ab:fe:fc:df:01:34:6e:3f:c9:46:9b:d6:a3:d8:
9b:ad:79:9c:5c:dc:64:f1:aa:49:34:3a:90:eb:ba:
f5:f6:70:0e:71:07:95:f5:e5:a7:49:b4:23:4e:18:
4a:8e:89:d5:9c:67:96:cf:78:42:f4:73:e9:14:c8:
51:65:bd:66:b2:b2:d7:69:ab:d4:6e:87:52:dc:58:
17:f9:67:14:d9:a0:3a:dc:f2:39:22:d3:a1:5b:36:
21:9c:ce:89:22:6e:03:5b:ab:05:15:a9:64:b3:42:
b8:04:2e:14:b6:e9:c7:91:04:ef:88:97:75:3a:4a:
74:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4C:04:B5:D0:4B:39:1E:5D:BA:B6:B1:63:A2:04:A2:12:F8:7E:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/0f7f6459-9a9b-3619-afd9-067a05684fe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
X509v3 Authority Key Identifier:
keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
sbgp-ipAddrBlock: critical
IPv4:
216.82.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:cb:66:81:f8:da:a4:a4:19:dc:2a:38:80:40:dd:76:36:ac:
fb:fe:1c:0d:91:0b:f4:f4:e2:b7:4a:59:aa:92:5a:18:3d:63:
9a:13:37:bd:ab:a6:e2:d6:8f:f7:09:d4:ad:8f:4b:9a:e2:ac:
64:0e:bb:91:11:c4:da:8a:27:cf:30:ab:ee:5a:c3:6e:f5:94:
74:05:f8:d0:70:1e:a8:b1:88:ee:97:1d:46:c2:56:31:ad:90:
2b:51:d9:b5:9a:1e:13:9c:41:e0:0d:5c:3f:7b:98:7f:62:87:
1a:a3:9e:13:85:f1:35:97:84:6d:57:8f:c4:75:1f:35:f7:b9:
8c:58:75:8f:71:93:d3:71:59:f6:bd:30:6a:87:c1:f8:6e:ef:
bb:70:a0:32:56:44:d8:cf:62:32:c6:a7:5b:2e:80:28:38:e1:
78:47:ca:e5:25:af:41:57:20:8b:2e:ff:f7:31:ff:62:77:a9:
24:c7:a4:82:e9:c1:29:5e:41:1d:f6:46:8a:72:d4:2d:7b:31:
7e:d8:7b:63:2a:55:96:64:39:de:bb:9f:e6:f6:7c:1d:04:86:
52:61:eb:30:65:9a:4a:6b:2d:8e:6b:7e:5a:e0:70:ce:04:79:
cd:f4:f9:a1:26:ec:62:60:9d:4e:1e:18:80:fa:4a:be:fb:23:
12:65:77:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:47:50 2025 by rpki-client